I have an CentOS/Apache server with a classical .htaccess system of login/password (authtype basic etc...)
I have fail2ban and my iptables are setup to prevent sshd attacks, but I don't know what to do against regular http post requests attempting to force the authentication to my docroot.
AFAIK, (am I wrong?) these attempts do not appear in
lastb so fail2ban cannot really do much is the amount of requests is reasonable