Post #3474236
2026-06-28 07:47 UTC
@JigmeDatse@social.openpsychology.net @doctormo@floss.social fail2ban F-ed up some legit users of my office website a few weeks ago because they were unlucky enough to be using VPN software that assigned them the same IPs as scrapers that hit the site during the previous 24 hours. (Boo, NordVPN.)
I think I've had some better results with using modsecurity configured to drop the obvious scrape connections. (The request URIs are predictably F-ed up.) But there was a burst of new shit yesterday that made me wonder.
Replies (1)
-
@JigmeDatse@social.openpsychology.net 2026-06-30 04:43
@roadskater@mastodon.social @doctormo@floss.social For me, the legitimate users are either me, or other servers (almost exclusively) so the use of a VPN seems unlikely. But this is very much a good point.