ModSecurity Breach

Related Apache Modules

Here is a list of similar modules I have found, in no particular order:

  • mod_throttle; intended to reduce the load on your server & bandwidth generated by popular virtual hosts, directories, locations, or users according to supported polices (see below) that decide when to delay or refuse requests.

  • mod_bandwidth; enable the setting of server-wide or per connection bandwidth limits, based on the directory, size of files and remote IP/domain.

  • mod_require_host; This module will reject requests that fail to provide either a Host: header or an absolute URI as required by RFC 2616 section 5.1.2.

  • mod_ibl; allows certain requests.

  • mod_id; blocks certain requests.

  • mod_wormwall, mod_fortress fork; blocks and logs certain requests.

  • mod_dosevasive; Maintains an internal table of IP addresses and URLs and denies repeated requests for the same URL from the same IP address, blacklisting the address for 10-seconds per extraneous request.

  • mod_protection, homepage unavailable, can be downloaded from http://packetstormsecurity.nl/groups/twlc/mod_protection-0.0.2.tar.gz

  • mod_fortress; blocks and logs certain requests..

  • mod_iprotect, closed source; prevents many clients from using the same username & password for authentication. Also protects from brute force password cracking.

  • mod_refprotect, commercial (delivered with source code); allows access only from a selected list of referrers.

  • mod_hackprotect , commercial (delivered with source code); Detects brute-force attempts to guess passwords.

  • mod_hackdetect, commercial (delivered with source code); Detects user accounts which have been hacked or for which passwords have been leaked, and then runs a custom script to de-activate the user account and/or notify the webmaster.