Our local GitLab server has been under attack by Anthropic Google OVH and more (twitter.com)

I saw them try to read some static files I posted here but they were instantly blocked by a combination of nftables and nginx.

    bzcat *mirror*access*bz2 | grep -c " 200 "
    283
    bzcat *mirror*access*bz2 | grep -c " 444 "
    3607

That's what made it past nftables TCP MSS and TCP window rules. The 200's were members of HN. The 444's were bots.

Does Gitlab front-end with Nginx or Haproxy?