I've been noticing in my site logs that I'm getting a lot of notices of
access denied 2015-04-22 15:20 node/add Anonymous (not verified)
Most of which are coming from a set of IPs, and in quick succession (we're talking milliseconds). Clearly, these are bots that are trying to add their spam to my site.
Is there anything out there I can use to track and block users if they try to illegally add nodes? I have become familiar with D7's flood table after a series of bruit force attacks. So I feel like it should be possible to do something similar to that with access denied errors for node/add. The question is, has anyone every done that? Or is that something that would require a custom module?
The ideal functionality of this solution would to be ban (ether permanently or temporarily) an IP after x attempts resulting in access denied in x time period. Probably something like 5 access denied notices in a second or so.