Want to make bad bots vanish without wasting bandwidth?
#NGINX has a secret status code 444 that simply drops the TCP connection. No headers. No body.
e.g. location ~* \.php$ { return 444; }
0 bytes sent, scanners move on. Handy for
#11ty / static-only sites & totally invisible to real users.