ConfigServer Community Forum

I am hosting sites with inmotionhosting, and have used up 2 hours of paid support, and they cannot configure CSF to ban IP's that request over 100 404 pages.

I am getting attacked daily from thousands of IP's requesting a file called chrqd.php, here is an example
There are 10 other lines of IP's doing 679 requests to that file against my VPS and other domains I manage.

I can only think of using CSF to ban these IP's.

Is there a better solution?

It's surprising (and actually disheartening) that Inmotion's support couldn't help, especially within the time frame of 2 hours.

CSF has "LF_APACHE_404" where you can limit the number of 404's hit by any one IP. Mod Security also does very well at blocking requests to specific non-existant pages (as part of a brute force attempt).

The combination of the 2, CSF and ModSec, works very well.