Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: mod_evasive named virtual hosts |
|
| Author |
|
sailor
Joined: 17 Apr 2015
Posts: 86
Location: US
|
 Posted: Tue 16 Dec '25 16:04 Post subject: mod_evasive named virtual hosts |
 |
|
This module doesn't seem to always pick up rapid fire attempts (DOSPageCount). I've only had a couple the last month or so that it blocked when it should of blocked quite a few.
In the config I have:
LoadModule evasive_module modules/mod_evasive.so
<IfModule evasive_module>
DOSEnabled true
DOSHashTableSize 3097
DOSPageCount 4
DOSSiteCount 6
DOSPageInterval 1
DOSSiteInterval 1
DOSBlockingPeriod 10
DOSWhitelist 127.0.0.1
DOSLogDir d:/logs
DOSSystemCommand "d:/jobs/ftp_ban/banip.cmd %s"
</IfModule>
Then I have about 10 hosts that are:
<VirtualHost *:443>
SSLEngine on
ServerName host1.com
ServerAlias www.host1.com
CustomLog "|D:/Apache_files/cronolog.exe D:/logs/host1.com/access_%Y-%m-%d.log" combined
ErrorLog "|D:/Apache_Files/cronolog.exe D:/logs/host1.com/error_%Y-%m-%d.log"
Rewriterule ^/(.*)$ https://otherhost.com [NC,R=301]
</VirtualHost>
From the log
| Code: |
20.196.91.230 - - [16/Dec/2025:08:52:55 -0500] "GET /wp-includes/js/ HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/0"
20.196.91.230 - - [16/Dec/2025:08:52:55 -0500] "GET /wp-includes/js/crop/ HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/0"
20.196.91.230 - - [16/Dec/2025:08:52:56 -0500] "GET /wp-includes/js/crop/index.php HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/0"
20.196.91.230 - - [16/Dec/2025:08:52:56 -0500] "GET /wp-includes/js/dist/ HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/0"
20.196.91.230 - - [16/Dec/2025:08:52:57 -0500] "GET /wp-includes/php-compat/ HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/0"
20.196.91.230 - - [16/Dec/2025:08:52:57 -0500] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/0"
20.196.91.230 - - [16/Dec/2025:08:52:57 -0500] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/0"
20.196.91.230 - - [16/Dec/2025:08:52:58 -0500] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/0"
20.196.91.230 - - [16/Dec/2025:08:52:58 -0500] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/0"
20.196.91.230 - - [16/Dec/2025:08:52:58 -0500] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/0"
20.196.91.230 - - [16/Dec/2025:08:52:59 -0500] "GET /wp-includes/style-engine/ HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/0"
20.196.91.230 - - [16/Dec/2025:08:52:59 -0500] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/0"
20.196.91.230 - - [16/Dec/2025:08:53:00 -0500] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/988"
20.196.91.230 - - [16/Dec/2025:08:53:00 -0500] "GET /wp-signin.php HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/0"
20.196.91.230 - - [16/Dec/2025:08:53:00 -0500] "GET /wp-user.php HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/1003"
20.196.91.230 - - [16/Dec/2025:08:53:01 -0500] "GET /wp.php HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/0"
20.196.91.230 - - [16/Dec/2025:08:53:01 -0500] "GET /ws.php HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/998"
20.196.91.230 - - [16/Dec/2025:08:53:02 -0500] "GET /xmrlpc.php HTTP/1.1" 301 237 host1.com "-" "-" "-" "- -" "0/0"
|
|
|
| Back to top |
|
|
|
|
|
|
