Nginx GET atack

0

como posso bloquear este pedido methoh, porque eu consome todos os meus limites em vps, e o site se torna indisponível. Eu configurei mas ele não conta no nginx.conf

    map $request_method $limit {
    default         "";
    POST            $binary_remote_addr;
}

limit_req_zone $binary_remote_addr zone=perip:10m rate=1r/s;
limit_req_zone $server_name zone=perserver:10m rate=10r/s;

e no common_http.conf

if ($request_method !~ ^(GET|HEAD|POST)$ ) {
return 405;
}
try_files $uri $uri/ @backend;

pedido do nginx access.log

 200.98.247.2 - - [02/Oct/2018:00:37:50 +0000] "GET / HTTP/1.1" 302 5 "-" "-"
    187.17.96.25 - - [02/Oct/2018:00:37:50 +0000] "GET / HTTP/1.1" 302 5 "-" "-"
    184.168.46.123 - - [02/Oct/2018:00:37:50 +0000] "GET / HTTP/1.0" 302 0 "-" "-"
    187.17.96.29 - - [02/Oct/2018:00:37:50 +0000] "GET / HTTP/1.1" 302 5 "-" "-"
    200.98.247.2 - - [02/Oct/2018:00:37:51 +0000] "GET / HTTP/1.1" 302 5 "-" "-"
    85.31.185.2 - - [02/Oct/2018:00:37:51 +0000] "GET / HTTP/1.1" 302 5 "-" "-"
    94.73.148.10 - - [02/Oct/2018:00:37:52 +0000] "GET / HTTP/1.1" 499 0 "-" "-"
    94.73.148.10 - - [02/Oct/2018:00:37:52 +0000] "GET / HTTP/1.1" 499 0 "-" "-"
    94.73.148.10 - - [02/Oct/2018:00:37:52 +0000] "GET / HTTP/1.1" 499 0 "-" "-"
    94.73.148.10 - - [02/Oct/2018:00:37:52 +0000] "GET / HTTP/1.1" 499 0 "-" "-"
    200.98.247.2 - - [02/Oct/2018:00:37:52 +0000] "GET / HTTP/1.1" 302 5 "-" "-"
    
por MariusCatalin 02.10.2018 / 02:43

0 respostas

Tags