"we caught one" god. Luxurious.
Once again, I strongly advise you to set up fail2ban so that anyone you serve a 404 catches at least a full day ban, and if you don't care about talking to other people's services, do your best to fully block the IP ranges associated with all the major hosting companies.
@mhoye a single 404 is very aggressive, all it takes is one fatfingered link in a page pointing to your site and you're banning visitors en masse.
after 5-10 404s in a row for different URLs, different story.
@mhoye yes i'm all for having specific poison URLs that trigger an immediate ban.
But "immediate ban on any 404 whatsoever" seems heavy handed.
mhoye
Andrew Zonenberg
Peter Bindels