NAME

Apache::BruteWatch - Watch the Apache logs and notify of bruteforce password attacks

VERSION

$Revision: 1.1.1.1 $

SYNOPSIS

Place the following in your httpd.conf

PerlLogHandler Apache::BruteWatch

PerlSetVar BruteDatabase     DBI::mysql::brutelog
PerlSetVar BruteDataUser     username
PerlSetVar BruteDataPassword password

PerlSetVar BruteMaxTries     10
PerlSetVar BruteMaxTime      30
PerlSetVar BruteNotify       rbowen@example.com
PerlSetVar BruteForgive      86400

DESCRIPTION

mod_perl log handler for warning you when someone is attempting a brute-force password attack on your web site.

Database

CREATE TABLE bruteattempt (
 ID int(11) NOT NULL auto_increment,
 ts int(11) default NULL,
 username varchar(255) default NULL,
 PRIMARY KEY  (ID)
) TYPE=MyISAM;

CREATE TABLE brutenotified (
 ID int(11) NOT NULL auto_increment,
 username varchar(255) default NULL,
 ts int(11) default NULL,
 PRIMARY KEY  (ID)
) TYPE=MyISAM;

AUTHOR

	Rich Bowen
	rbowen@rcbowen.com
	http://www.cre8tivegroup.com
 

DATE

$Date: 2002/04/03 03:04:37 $