Answer by Sergey Ponomarev for Block access with https ipaddress on nginx

You may try to add a regexp by Host that will drop IPs and require domains:

server {    listen 80;    # skip raw IP as host e.g. require at least one letter (same for Punycode)    if ( $http_host !~* ^(.*[a-zA-Z]+.*)$ ) {        return 403;    }}