For reference, that snippet seem to have done the job. I'm not redirecting them, I trash them though. if ($args ~* "^param\%"){ access_log off; return 410; } Posted at Nginx Forum: https://forum.nginx.org/read.php?2,265514,266528#msg-266528