modsecurity

The comment you are replying to does not exist.

Triple Sure Your Web Servers Are NOT the Open Proxy

When examining the log for one of my clients, I noticed there are quite a few entries like:

Connection attempts using mod_proxy:
   212.247.120.50 -> 205.188.251.43:443: 6 Time(s)
   212.247.120.50 -> 64.12.202.116:443: 6 Time(s)

Since they do use proxy module on those apache servers, looks like someone are trying to use the servers as open proxy. Hmmm, worth to find more detail behind.

ModSecurity Community Console Application Tips

ModSecurity is a open source web application firewall. "With over 70% of all attacks now carried out over the web application level, organisations need every help they can get in making their systems secure. Web application firewalls are deployed to establish an external security layer that increases security, detects, and prevents attacks before they reach web applications."

Syndicate content