Well I certainly use it to defend from that kind of attack all the time. Can you give us some idea of the rate (ie: how many requests per second)? Also, for that kind of attack it's important to be using the recidive filter. By any chance is it a wordpress site?
On Mon, Dec 12, 2016, at 04:31 PM, Grant wrote: > I recently suffered DoS from a series of 10 sequential IP addresses > which identified themselves as being associated with a fairly legit > search engine. fail2ban would have dealt with the problem if a single > IP address had been used. Can it be made to work in a situation like > this where a series of sequential IP addresses are in play? > > - Grant > > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, SlashDot.org! http://sdm.link/slashdot > _______________________________________________ > Fail2ban-users mailing list > Fail2ban-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/fail2ban-users ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot _______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users