supermod
19-08-2012, 01:07 PM
hôm nay diễn đàn mình bị ddos bởi các địa chỉ IP động khác nhau,có hàng trăm IP cùng tấn công,nên mình ko thể block hết được
File log dạng như sau:
122.72.0.227 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
186.101.17.27 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
119.97.146.148 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
190.203.11.41 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
187.92.101.59 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
109.74.55.50 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
177.36.243.7 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
114.113.157.235 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
41.164.142.154 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
180.94.83.194 - - [19/Aug/2012:12:34:11 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
91.213.87.3 - - [19/Aug/2012:12:34:11 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
202.98.223.74 - - [19/Aug/2012:12:34:11 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
203.97.144.26 - - [19/Aug/2012:12:34:11 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
119.254.86.240 - - [19/Aug/2012:12:34:11 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
190.14.247.219 - - [19/Aug/2012:12:34:12 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
190.190.180.107 - - [19/Aug/2012:12:34:12 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
222.124.178.98 - - [19/Aug/2012:12:34:12 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
119.1.174.28 - - [19/Aug/2012:12:34:13 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
200.31.107.98 - - [19/Aug/2012:12:34:13 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
60.28.219.218 - - [19/Aug/2012:12:34:13 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
195.178.34.206 - - [19/Aug/2012:12:34:13 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
200.63.66.162 - - [19/Aug/2012:12:34:13 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
41.164.142.154 - - [19/Aug/2012:12:34:14 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
180.245.115.148 - - [19/Aug/2012:12:34:14 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
113.190.15.236 - - [19/Aug/2012:12:34:12 +0700] "GET / HTTP/1.1" 200 68 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.79 Safari/537.1"
195.8.126.22 - - [19/Aug/2012:12:34:14 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
222.134.74.30 - - [19/Aug/2012:12:34:14 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
124.40.252.142 - - [19/Aug/2012:12:34:14 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
218.94.1.72 - - [19/Aug/2012:12:34:15 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
89.238.154.124 - - [19/Aug/2012:12:34:15 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
Cho hỏi các Block các IP này như thế nào?
Cách khắc phục,xin cảm ơn rất nhiều.
File log dạng như sau:
122.72.0.227 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
186.101.17.27 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
119.97.146.148 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
190.203.11.41 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
187.92.101.59 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
109.74.55.50 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
177.36.243.7 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
114.113.157.235 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
41.164.142.154 - - [19/Aug/2012:12:34:10 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
180.94.83.194 - - [19/Aug/2012:12:34:11 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
91.213.87.3 - - [19/Aug/2012:12:34:11 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
202.98.223.74 - - [19/Aug/2012:12:34:11 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
203.97.144.26 - - [19/Aug/2012:12:34:11 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
119.254.86.240 - - [19/Aug/2012:12:34:11 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
190.14.247.219 - - [19/Aug/2012:12:34:12 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
190.190.180.107 - - [19/Aug/2012:12:34:12 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
222.124.178.98 - - [19/Aug/2012:12:34:12 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
119.1.174.28 - - [19/Aug/2012:12:34:13 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
200.31.107.98 - - [19/Aug/2012:12:34:13 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
60.28.219.218 - - [19/Aug/2012:12:34:13 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
195.178.34.206 - - [19/Aug/2012:12:34:13 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
200.63.66.162 - - [19/Aug/2012:12:34:13 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
41.164.142.154 - - [19/Aug/2012:12:34:14 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
180.245.115.148 - - [19/Aug/2012:12:34:14 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
113.190.15.236 - - [19/Aug/2012:12:34:12 +0700] "GET / HTTP/1.1" 200 68 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.79 Safari/537.1"
195.8.126.22 - - [19/Aug/2012:12:34:14 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
222.134.74.30 - - [19/Aug/2012:12:34:14 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
124.40.252.142 - - [19/Aug/2012:12:34:14 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
218.94.1.72 - - [19/Aug/2012:12:34:15 +0700] "GET /forum.php HTTP/1.1" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
89.238.154.124 - - [19/Aug/2012:12:34:15 +0700] "GET /forum.php HTTP/1.0" 200 68 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
Cho hỏi các Block các IP này như thế nào?
Cách khắc phục,xin cảm ơn rất nhiều.