Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I checked the core rules set in the mod-security but it's didn't contain the rules related to Brute-Force Attack!!! Did anyone know how to write the rules or the existing rules for this kind of Attack!

Thanks in advanced,

share|improve this question

migrated from Sep 7 '09 at 8:23

This question came from our site for professional and enthusiast programmers.

It's a better idea to have some daemon monitoring the logs and taking action. Fail2Ban works wonders for me. Alternatives exist.

share|improve this answer

Check is post:

share|improve this answer
Link-and-run answers are discouraged here on ServerFault. It is polite to include at least a summary of what the article contains, even if it is just the very broad steps. If they need detail, they can click. – sysadmin1138 Jun 8 '11 at 11:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.