PDA

View Full Version : Diễn đàn bị rất nhiều IP ddos tại cùng 1 thời điểm



supermod
19-08-2012, 01:07 PM
hôm nay diễn đàn mình bị ddos bởi các địa chỉ IP động khác nhau,có hàng trăm IP cùng tấn công,nên mình ko thể block hết được

File log dạng như sau:



122.72.0.227 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
186.101.17.27 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
119.97.146.148 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
190.203.11.41 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
187.92.101.59 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
109.74.55.50 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
177.36.243.7 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
114.113.157.235 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
41.164.142.154 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
180.94.83.194 - - [19/Aug/2012:12:34:11 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
91.213.87.3 - - [19/Aug/2012:12:34:11 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
202.98.223.74 - - [19/Aug/2012:12:34:11 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
203.97.144.26 - - [19/Aug/2012:12:34:11 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
119.254.86.240 - - [19/Aug/2012:12:34:11 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
190.14.247.219 - - [19/Aug/2012:12:34:12 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
190.190.180.107 - - [19/Aug/2012:12:34:12 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
222.124.178.98 - - [19/Aug/2012:12:34:12 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
119.1.174.28 - - [19/Aug/2012:12:34:13 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
200.31.107.98 - - [19/Aug/2012:12:34:13 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
60.28.219.218 - - [19/Aug/2012:12:34:13 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
195.178.34.206 - - [19/Aug/2012:12:34:13 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
200.63.66.162 - - [19/Aug/2012:12:34:13 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
41.164.142.154 - - [19/Aug/2012:12:34:14 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
180.245.115.148 - - [19/Aug/2012:12:34:14 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
113.190.15.236 - - [19/Aug/2012:12:34:12 +0700] "GET / HTTP/1.1" 200 68 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.79 Safari/537.1"
195.8.126.22 - - [19/Aug/2012:12:34:14 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
222.134.74.30 - - [19/Aug/2012:12:34:14 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
124.40.252.142 - - [19/Aug/2012:12:34:14 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
218.94.1.72 - - [19/Aug/2012:12:34:15 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
89.238.154.124 - - [19/Aug/2012:12:34:15 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"




Cho hỏi các Block các IP này như thế nào?
Cách khắc phục,xin cảm ơn rất nhiều.

tieudao01234
20-08-2012, 09:04 AM
vậy là đúng rồi doss thì nó cũng đã đổi ip hết rồi tìm sao được bạn ơi

Cơn Gió
20-08-2012, 08:41 PM
bạn cài firewall lên mình không nhớ rõ lắm nó chặn IP nếu ta F5 quá 5 lần.

skumfuk
24-08-2012, 02:54 PM
bạn bật DnP firewwall lên xem chống đc ko :|