Comment Re:How about subversion? (Score 3) 64
FWIW, we tried fail2ban and the bots circumvented it in days - instead of dozens of requests coming from one IP, they went down to one request from each IP, and swarms of IPs coming from all over the place (not within an easy-to-define CIDR range).
The first thing that's been effective for us is Turnstile. A colleague of mine wrote up a general approach in Rails https://bibwild.wordpress.com/... and we wrote up our version of that using Trafik https://github.com/pulibrary/p...