Can You Blacklist IPs from Accessing Your API? Best Practices & How-To or How to Block Unwanted Traff

Hey everyone,

Thanks for all the tips! Tried the Cloudflare method first since it seemed easiest, and it worked like a charm. Blocked a few obvious offenders already.

Quick follow-up: Anyone know how to handle IPs that keep changing? Like, if they’re using proxies or VPNs? Fail2Ban sounds cool, but is it overkill for a small project?

Also, big shoutout for the Nginx snippets—gonna test those next. Y’all saved me hours of Googling.