I’m in the process of developing a WAF reverse proxy designed for the smallweb and selfhosters to address precisely this.

https://git.eeqj.de/sneak/smallwebwaf

It’s alpha but it should be ready for real-world testing in the next couple of days. I’m going to drop it in front of my Gitea and home-grown api servers.

I’m super tired of Anubis spamming me with furry fetish art on its pointless interstitials 20 times a day. As someone pointed out in another comment, LLM scraper bots are super easy to detect with basic heuristics. PoW and session cookies and an interstitial are massive overkill and annoying spam.