i wrote a
program that counts requests by IP and frequency. That and some
fancy code to teduce server load and the bots are blocked fairly well. I
Something that fail2ban can't handle?
I'm not sure how well fail2ban would work for any of this. The majority of
machines hitting my hardware are residential IPs through proxy services. It is
unusual for there to be more than a handful from any one address, which is why
I've ended up querying ASNs for abusive traffic and dumping whole routes into
the the packet filter.
--
------------------------------------ personal:
http://www.cameronkaiser.com/ --
Cameron Kaiser * Floodgap Systems *
www.floodgap.com * ckaiser(a)floodgap.com
-- Go Computer Now! -- Sphere Corporation -------------------------------------