[Firewall] Possible to Block POST Attacks by User Agent String?

Gene Cooper gcooper at sonoracomm.com
Thu Sep 12 19:24:22 CEST 2013

Hi folks,

Our web server is under an attack by a botnet with this string showing 
up the the Apache access log (from many IP addresses):

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Can anyone clue me in as to how we might block this attack?

Thanks in advance,



Gene Cooper
Sonora Communications, Inc.
936 W. Prince Road
Tucson, AZ 85705

(520)407-2000 x101
(520)888-4060 fax

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4258 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://rocky.eld.leidenuniv.nl/pipermail/firewall/attachments/20130912/b3a7ca00/attachment.bin>

More information about the Firewall mailing list