"Suffered a DOS from a series of 10 sequential IP addresses..." doesn't tell us any information at all.
Ten sequential hosts accessing a website does not constitute a DOS. You would have to say something about the rate. On Thu, Dec 15, 2016, at 03:59 PM, Grant wrote: > > In this entire thread you haven't mentioned what your "scenario" > > is. All you say is "DOS". What is your scenario? > > > I'm not sure why you'd say that. I started off with: > > "I recently suffered DoS from a series of 10 sequential IP addresses > which identified themselves as being associated with a fairly legit > search engine." > > Those 10 sequential IPs would not have triggered any of the 3 > mod_evasive conditions which are applied to each single IP. > > - Grant ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot _______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users