Learn More
Resend Email
10
cursee
7y

Question for Web Server Gurus and Security Ninjas.

How to prevent bots, crawlers, spammers sending various numerous requests to your web servers?

There have been numerous requests to routes like /admin /ssh /phpmyadmin etc etc and all kinds of stuff to the web server.

Is there a way to automatically block those stupid IPs :/

question

server

security
Favorite
Ranter
Comments
  • 7
    7y
    Fail2ban is simple and reasonably effective
  • 5
    7y
    With ipset you can create a list of ip and ip blocks to avoid (it works in combination with iptables).
    The idea is:
    1) get an incoming packet
    2) check if it comes from the list of banned ips; if yes, discard it
    3) otherwise, keep traversing the other iptables rules
  • 4
    7y
    Unix: fail2ban

    Windows: wail2ban (I’ve never used it but it’s out there)
  • 1
    7y
    As others have mentioned, fail2ban, and lock down certain pages to specific addresses.
  • 0
    7y
    Ok probably the most noob question you have every seen regarding this topic.

    The devs said they have setup everything and also using cloudflare.

    So why do I still see those requests in the logs?
  • 0
    7y
    @cursee cloudflare enterprise?
  • 2
    7y
    Nginx rate limiting and CSF?
  • 1
    7y
    ipset, Fail2ban, Imunify360, CSF/LFD
  • 0
    7y
    Thank guys. I have advised them to learn about fail2ban and implement it.

    Let's see 😁

    I'll share update here if there is any.

    Personally I just use someone's services for my projects if it's something I'm not strong at. This advice is for a friend.
Related Rants
devRant © 2021 Hexical Labs LLC
Privacy Policy  |  Terms of Service
Add Comment