View this package for all CentOS/RHEL versions →

How to install nginx-honeypot in CentOS/RHEL 10 (noarch)

NGINX honeypot - detect malicious bots (and optionally firewall-ban them)

License: MIT https://github.com/dvershinin/nginx-honeypot

Install

sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm
sudo dnf -y install nginx-honeypot

Description

NGINX honeypot with lots of "honey" for bad bots. A map of bot-bait request URIs (phpMyAdmin probes, .env grabs, exploit paths) makes NGINX return 410 Gone, cutting server load and log noise. The package is config-only and needs nothing but nginx. Banning the offending IP is optional and opt-in: a free fcgiwrap + ipset path, and a Pro path that bans from one directive via nginx-module-nftset-access. Both are documented in the README.

Compatibility

This package is compatible with all RHEL-based distributions, including CentOS, AlmaLinux, Oracle Linux, Rocky Linux, etc.

RPMs

Package	Size	Built	Changes
nginx-honeypot-1.2.0-1.el10.noarch	23 KiB	2026-10-31	Danila Vershinin - Network mode: server-ban-nftset-network.conf logs trap hits as JSON, and the · optional nginx-honeypot-report timer ships them to a central server. · - honey.conf: stop matching /.well-known/ paths, dot-paths in query strings and · /actuator/health, which banned ACME validators and monitors.