HTTP Anti Flood/DoS Security Module v1.7 - Detect Flooder IPs, Protect any Script Against HTTP Flood Attacks

This module provides additional security enhancements against (HTTP) Flood & Brute Force Attacks for native PHP or .NET scripts at web application level. Massive crawling/scanning tools, HTTP Flood tools can be detected and blocked by this module via htaccess or iptables, etc.

You can use this module by including "iosec.php" to any PHP file which wants to be protected.

You can test module here: http://www.iosec.org/test.php (demo)

Wordpress Plugin http://wordpress.org/extend/plugins/iosec-anti-flood-security-gateway-module

CHANGES v.1.7
- Iptables Auto Ban Bash Script Included
- Request Cache Size Option
- Improved Implicit Deny Mode
- Excluded Files Support
- Admin GUI Removed
- Config File Removed
- Connection Limit Support
- Whitelist Support
- Reverse Proxy Support
- reCAPTCHA Support

You can use IOSEC under .NET see. http://phalanger.codeplex.com/

Features

This is a unique project and it is the world's first web application flood guard script.
At web application (scripting) level you can,
- Block proxies. (only via HTTP header)
- Detect flooding IP addresses.
- Slow down or restrict access for automated tools (HTTP flood, brute force tools, vulnerability scanners, etc.)
- Save your server resources (database, cpu, ram, etc.) under an attack.
- Restrict access permanently or temporarily for listed IP addresses in "banlist" file.
- Notify yourself via email alerts when attacks begin.
- Implicit deny for DDoS attacks