Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I checked the core rules set in the mod-security but it's didn't contain the rules related to Brute-Force Attack!!! Did anyone know how to write the rules or the existing rules for this kind of Attack!

Thanks in advanced,

share|improve this question

migrated from stackoverflow.com Sep 7 '09 at 8:23

This question came from our site for professional and enthusiast programmers.

add comment

2 Answers

It's a better idea to have some daemon monitoring the logs and taking action. Fail2Ban works wonders for me. Alternatives exist.

share|improve this answer
add comment

Check is post: http://www.dongit.nl/tech/modsecurity-brute-force-protection

share|improve this answer
Link-and-run answers are discouraged here on ServerFault. It is polite to include at least a summary of what the article contains, even if it is just the very broad steps. If they need detail, they can click. –  sysadmin1138 Jun 8 '11 at 11:26
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.