fail2ban Posts

How to block a referer ddos attack with fail2ban

How to block a referer ddos attack with fail2ban

A site in Algeria was sending thousands of requests to a server that I manage. On various pages of their site they had hotlinked an image from our site. However, our site did not have that image on it, so I have no idea what it trying to do. Since it was getting a 404, it was not really bogging down the server, but I would rather it get stopped at the firewall level. That way it would not slow down Apache at all. To do that I used Fail2Ban. Here are the steps I used to do this.