How to view and edit List of Blacklisted IPs on Apache?

13 views
Skip to first unread message

Raymond Otti

unread,
Aug 19, 2010, 6:10:50 PM8/19/10
to Computer Tech Support
Hi,

I'm using Apache server's dos_evasive module to block DoS attacks in
ubuntu linux. How do I see the list of blacklisted IPs? because I want
to delete from time to time to monitor the IPs that are blacklisted,
but do not know how to. Does anyone have an idea?

Thanks,
Ray

KwikOne

unread,
Aug 19, 2010, 6:23:53 PM8/19/10
to Computer Tech Support
Actually - is it not mod_dosevasive?
In actual fact this module is...
A replacement mod_access module adding special resistance to a DoS/
DDoS attack

As for seeing the blacklisted ip's - sorry but the info I have
about this module is such that the module does not blacklist
an ip but does the following
The user will receive a 403 (Forbidden) when blocked, and the
timer will be reset each time the site gets hit when the user is still
blocked.
In the log will be the ip address that gets the 403.

for more info see:
http://www.theserverpages.com/articles/servers/linux/apache/mod_dosevasive_Apache_Module_How-To.html
http://amshameer.wordpress.com/2009/04/22/mod-dosevasive-install-and-configure/

Raymond Otti

unread,
Aug 20, 2010, 11:10:00 PM8/20/10
to Computer Tech Support

Thank you for your response;
Yes it is mod_evasive but when it checks the IP against the directives
such as DOSPageCount, DOSSiteInterval and so on if the client defys
those directives, it responds with a 403 forbidden and later blocks
the IP for longer(depending on what value is set) if the IP
persistently keeps sending those requests. I want to know how I can
check those IPs that are beings sent the forbidden or even blacklisted
on the Server in Ubuntu.
Thanks

Mohammad AbuShady

unread,
Aug 21, 2010, 8:21:31 PM8/21/10
to computer-t...@googlegroups.com
maybe it generates an .htaccess file? i don't know if that's even
possible, but you can deny ip's by .htaccess right? so maybe you
should check that.

> --
> You received this message because you are subscribed to the Google Groups
> "Computer Tech Support" group.
> To post to this group, send email to computer-t...@googlegroups.com.
> To unsubscribe from this group, send email to
> computer-tech-su...@googlegroups.com.
> For more options, visit this group at
> http://groups.google.com/group/computer-tech-support?hl=en.
>
>

Reply all
Reply to author
Forward
0 new messages