On: Fail2ban Sucks (2020)

[mkasberg]

On a related note, the number of HTTP 404 errors I see to /wp-login.php on my static website is ridiculous. (But absolutely not security risk.)

[pepa65 → mkasberg]

That's what you get running a webserver. This is what should happen (but you could choose not to log those...)

[NateEag → pepa65]

You could also temp-ban those IPs for a few hours and save yourself some CPU and bandwidth.

It may not seem like much, but I spent a year or two adminning a >1 million reqs / day cluster, and it does add up. Auto-banning this type of obvious offender (with fail2ban, as it happens) did result in a noticeable improvement for us.

[pepa65 → NateEag]

You could indeed (temp-)ban them based on logs. Of course it is a huge improvement, if you catch offending IPs early, they never hit any app.