How to completely stop mod_proxy and probing on nginx?

Originally Posted by newbie14 Hi Sean, Where should I run it via a cron job it will need to read from nginx access or error log to find which ip right?

I don't run it from cron. I just run it at the command line when I want to add an IP I've noticed in the logs as being particularly abusive. I wouldn't try to automate it. It's pretty heavy-handed.

Originally Posted by newbie14 Hi rnturn, Basically I am not centos 7 with firewalld and fail2ban enable. Is there anything I can further tweak on firewalld? Thank you.

I'm running iptables but not via firewalld -- or fail2ban -- so I'm not sure how to tweak either of those to deal with these requests. (My firewall is running Slackware using some customized iptables commands set up in a script I wrote ages ago.)

In general, I filter some incoming addresses using a command like:

# iptables --insert FORWARD --protocol tcp --source ${ADDR} --jump DROP

This could be modified to only drop packets headed to port 80 but I think the above command gives the basic idea.

HTH...