AWS, Technology

Block admin login page attack using Fail2ban

Recently on my project, someone did brute force attack over the login page of WordPress with multiple IPs. In the first response, we have blocked those IP on Nginx conf and later we realized, it would be better if we do it through IPtables. However, this was not enough as we need the manual intervention on the daily basis, hence things...

by Prashant Sharma
Tag: fail2ban nginx
29-Jul-2015

AWS

Fail2Ban Port 80 to protect sites from DOS Attacks

FAIL2BAN Port 80 is used to protect sites from DOS Attacks. Fail2ban scans log files (e.g. /var/log/apache/error_log) and bans IPs that show the malicious signs -- too many password failures, seeking for exploits, etc. Generally Fail2Ban is then used to update firewall rules to reject the IP addresses for a specified amount of time,...

by Mohit Dayal Gupta
Tag: fail2ban nginx
23-Mar-2015