# Nginx Block Directives for Подсети облачного хостинга DigitalOcean (AS14061)
# Source: https://antibotcore.com/bots/networks/digitalocean
# Option 1: Direct block inside server { ... } or location / { ... } block:

deny 104.131.0.0/16;
deny 104.236.0.0/16;
deny 104.248.0.0/16;
deny 128.199.0.0/16;
deny 134.209.0.0/16;
deny 138.68.0.0/16;
deny 138.197.0.0/16;
deny 142.93.0.0/16;
deny 143.110.128.0/17;
deny 143.198.0.0/16;
deny 143.244.128.0/17;
deny 146.190.0.0/16;
deny 157.230.0.0/16;
deny 157.245.0.0/16;
deny 159.65.0.0/16;
deny 159.89.0.0/16;
deny 159.203.0.0/16;
deny 161.35.0.0/16;
deny 164.90.128.0/17;
deny 164.92.64.0/18;
deny 165.22.0.0/16;
deny 165.227.0.0/16;
deny 167.99.0.0/16;
deny 174.138.0.0/16;
deny 178.62.0.0/16;
deny 188.166.0.0/16;
deny 188.226.128.0/17;
deny 206.189.0.0/16;
deny 207.154.192.0/18;
deny 209.97.128.0/17;
deny 46.101.0.0/16;
deny 64.225.0.0/16;
deny 64.226.64.0/18;
deny 64.227.0.0/16;
deny 67.205.128.0/17;
deny 68.183.0.0/16;
deny 2604:a880::/32;
deny 2a03:b0c0::/32;

# Option 2: Geo mapping in http { ... } context:
geo $is_bad_digitalocean {
    default 0;
    104.131.0.0/16 1;
    104.236.0.0/16 1;
    104.248.0.0/16 1;
    128.199.0.0/16 1;
    134.209.0.0/16 1;
    138.68.0.0/16 1;
    138.197.0.0/16 1;
    142.93.0.0/16 1;
    143.110.128.0/17 1;
    143.198.0.0/16 1;
    143.244.128.0/17 1;
    146.190.0.0/16 1;
    157.230.0.0/16 1;
    157.245.0.0/16 1;
    159.65.0.0/16 1;
    159.89.0.0/16 1;
    159.203.0.0/16 1;
    161.35.0.0/16 1;
    164.90.128.0/17 1;
    164.92.64.0/18 1;
    165.22.0.0/16 1;
    165.227.0.0/16 1;
    167.99.0.0/16 1;
    174.138.0.0/16 1;
    178.62.0.0/16 1;
    188.166.0.0/16 1;
    188.226.128.0/17 1;
    206.189.0.0/16 1;
    207.154.192.0/18 1;
    209.97.128.0/17 1;
    46.101.0.0/16 1;
    64.225.0.0/16 1;
    64.226.64.0/18 1;
    64.227.0.0/16 1;
    67.205.128.0/17 1;
    68.183.0.0/16 1;
    2604:a880::/32 1;
    2a03:b0c0::/32 1;
}