Is this Apache DDOS attack?

unSpawn · 06-13-2011, 06:55 PM

Quote:

Originally Posted by saharabear

I do not think fail2ban should solve these type of ip address.

Indeed it shouldn't. Try using a regex like

Code:

failregex = ^(?:(?![0-9\.]* -.*"[A-Z]* /)<HOST>)

as listed in the fail2ban wiki HOWTO_apache_proxy_filter and please do post information about listening local services and their configuration (as in 'grep ^# /path/to/configurationfile|grep .').

colucix · 06-15-2011, 10:09 AM

Moved: This thread is more suitable in Linux - Security and has been moved accordingly to help your thread/question get the exposure it deserves.