首先感谢宝塔各位开发者的辛苦努力,面板确实用着很不错!
最近一个站总是被人恶意cc攻击
日志里都是这样的恶意ip
113.250.244.29 - - [07/Jan/2018:15:55:56 +0800] "GET /favicon.ico HTTP/1.1" 444 0 "-" "\xE7\x99\xBE\xE5\xBA\xA6HD 5.4.0 rv:5.4.0.0 (iPad; iPhone OS 7.1.2; zh_CN)"
113.250.244.29 - - [07/Jan/2018:15:55:57 +0800] "GET /favicon.ico HTTP/1.1" 444 0 "-" "\xE7\x99\xBE\xE5\xBA\xA6HD 5.4.0 rv:5.4.0.0 (iPad; iPhone OS 7.1.2; zh_CN)"
113.250.244.29 - - [07/Jan/2018:15:55:57 +0800] "GET /favicon.ico HTTP/1.1" 444 0 "-" "\xE7\x99\xBE\xE5\xBA\xA6HD 5.4.0 rv:5.4.0.0 (iPad; iPhone OS 7.1.2; zh_CN)"
113.250.244.29 - - [07/Jan/2018:15:55:57 +0800] "GET /favicon.ico HTTP/1.1" 444 0 "-" "\xE7\x99\xBE\xE5\xBA\xA6HD 5.4.0 rv:5.4.0.0 (iPad; iPhone OS 7.1.2; zh_CN)"
113.250.244.29 - - [07/Jan/2018:15:55:57 +0800] "GET /favicon.ico HTTP/1.1" 444 0 "-" "\xE7\x99\xBE\xE5\xBA\xA6HD 5.4.0 rv:5.4.0.0 (iPad; iPhone OS 7.1.2; zh_CN)"
113.250.244.29 - - [07/Jan/2018:15:55:57 +0800] "GET /favicon.ico HTTP/1.1" 444 0 "-" "\xE7\x99\xBE\xE5\xBA\xA6HD 5.4.0 rv:5.4.0.0 (iPad; iPhone OS 7.1.2; zh_CN)"
半天功夫筛选出来几千条 但是在防火墙那里一看傻眼了 只能一条一条添加 几千上万条的话 不知道能不能批量加进去?
另外nginx设置那里 开了waf防火墙 默认设置 勾选了防护cc攻击 似乎对恶意攻击没法防御啊 半天没看到屏蔽一条黑名单ip,请问这是怎么回事?
有知道的望指教,谢谢!
|
|