We need a new protection against automated requests

We currently have a flood of automated requests which produce thousands of requests each day. They all have a different origin, different refferers and different searches which makes it hard for fail2ban to detect it.

We will need a protection on top of fail2ban which is able to catch those requests.