https://github.com/fail2ban/fail2ban
You can set dbpurgeage
to 30d
and pretty much just run it–or you can setup jail.conf
with a bantime.factor
. Its appeal is that you basically can download it, enable it, and it just works for you. It depends on your environment, though. If you have incoming authorized requests from other services it might be a pain to configure, but I’ve never used anything easier to protect you from bad actors.
Yes, you just have to enable the built-in plugin for cloudflared: https://github.com/fail2ban/fail2ban/blob/master/config/action.d/cloudflare.conf