Forum Replies Created

Viewing 15 replies - 16 through 30 (of 40 total)
  • Thread Starter gagomap

    (@gagomap)

    This is log:

    5.178.68.242 0.017 BYPASS [27/Nov/2015:07:02:23 +0700] dautu365.com "GET /?author=1 HTTP/1.1" 500 2985 "https://dautu365.com/?author=1" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.57 Safari/537.36"
    5.61.38.9 0.026 BYPASS [29/Nov/2015:05:13:19 +0700] dautu365.com "GET /?author=1 HTTP/1.1" 500 2985 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.54u1 [en]"
    195.154.191.156 0.057 BYPASS [02/Dec/2015:14:38:02 +0700] dautu365.com "GET /?author=0 HTTP/1.0" 500 2973 "-" "-"
    5.178.68.242 0.017 BYPASS [27/Nov/2015:07:02:23 +0700] dautu365.com "GET /?author=1 HTTP/1.1" 500 2985 "https://dautu365.com/?author=1" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.57 Safari/537.36"
    5.61.38.9 0.026 BYPASS [29/Nov/2015:05:13:19 +0700] dautu365.com "GET /?author=1 HTTP/1.1" 500 2985 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.54u1 [en]"
    14.171.201.123 - BYPASS [30/Nov/2015:20:11:43 +0700] dautu365.com "GET /author/xxx HTTP/1.1" 301 178 "https://dautu365.com/wp-admin/admin.php?page=td_theme_panel" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.86 Safari/537.36"
    195.154.191.156 0.057 BYPASS [02/Dec/2015:14:38:02 +0700] dautu365.com "GET /?author=0 HTTP/1.0" 500 2973 "-" "-"
    5.178.68.242 0.017 BYPASS [27/Nov/2015:07:02:23 +0700] dautu365.com "GET /?author=1 HTTP/1.1" 500 2985 "https://dautu365.com/?author=1" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.57 Safari/537.36"

    NF didn’t block them.

    Thread Starter gagomap

    (@gagomap)

    I have tried it code, by repace “fake ip” code in antispamm-bee.php. It make my website down, 500 server error.

    Thread Starter gagomap

    (@gagomap)

    No, i’m using IPv4

    But how do i try it ? Paste this code into function.php ?

    Thread Starter gagomap

    (@gagomap)

    I did everything follow your turtorial
    Then i insert [recaptcha] to default contact form, there is no custom.
    When press “Submit”, it show “Failed to send your message. Please try later or contact the administrator by another method.”
    I have disable your captcha and installed wp-recaptcha-integration and it works fine.

    Thread Starter gagomap

    (@gagomap)

    Thank you, Lukas ??

    Thread Starter gagomap

    (@gagomap)

    Thanks,

    Thread Starter gagomap

    (@gagomap)

    Thanks,

    Thread Starter gagomap

    (@gagomap)

    Thanks,

    Thread Starter gagomap

    (@gagomap)

    Thanks,

    But what do you think about my first post ?

    Is it 2 request in one second ? One hit nginx, one hit NF ?

    Thread Starter gagomap

    (@gagomap)

    And i see a lot of request in access.log. May be NF don’t stop them. And they was blocked by nginx server block.

    95.211.199.202 - - [25/Oct/2015:05:12:57 +0700] "GET / HTTP/1.1" 200 826 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12 ( .NET CLR 3.5.30729)"
    157.55.39.242 - - [25/Oct/2015:08:21:12 +0700] "GET /so-tay-cho-chuyen-du-lich-sapa-hoan-hao.html HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +https://www.bing.com/bingbot.htm)"
    68.180.228.151 - - [25/Oct/2015:09:01:23 +0700] "GET /bo-suu-tap-banh-sinh-nhat-dep-moi-la.html HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp; https://help.yahoo.com/help/us/ysearch/slurp)"
    207.46.13.142 - - [25/Oct/2015:09:03:26 +0700] "GET /author/nhungnguyen HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +https://www.bing.com/bingbot.htm)"
    207.46.13.142 - - [25/Oct/2015:09:17:54 +0700] "GET /robots.txt HTTP/1.1" 404 162 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +https://www.bing.com/bingbot.htm)"
    207.46.13.142 - - [25/Oct/2015:09:18:08 +0700] "GET /di-du-lich-ha-long-cho-quen-ghe-qua-pho-hai-san.html HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +https://www.bing.com/bingbot.htm)"
    62.210.148.233 - - [25/Oct/2015:09:22:04 +0700] "GET /robots.txt HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)"
    62.210.148.233 - - [25/Oct/2015:09:22:06 +0700] "GET /binh-minh-tren-bien-nha-trang-khoa%CC%89ng-khac-kho-quen.html/feed HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)"
    68.180.228.151 - - [25/Oct/2015:09:57:36 +0700] "GET /nhung-dac-san-dat-mo-di-du-lich-ha-long-khong-the-bo-qua.html HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp; https://help.yahoo.com/help/us/ysearch/slurp)"
    76.29.80.211 - - [25/Oct/2015:13:39:38 +0700] "GET /robots.txt HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)"
    76.29.80.211 - - [25/Oct/2015:13:39:40 +0700] "GET / HTTP/1.0" 200 826 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)"
    51.254.97.219 - - [25/Oct/2015:13:59:47 +0700] "GET /robots.txt HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)"
    51.254.97.219 - - [25/Oct/2015:13:59:50 +0700] "GET /gia%CC%89i-nhie%CC%A3t-nang-he-voi-bai-tam-quan-lan-hoang-so-hung-vi%CC%83.html HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)"
    51.254.97.219 - - [25/Oct/2015:13:59:52 +0700] "GET /khong-cho-tien-6-thanh-nien-giam-doc-mo-titan-bi-danh-chet.html HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)"
    51.254.97.219 - - [25/Oct/2015:13:59:53 +0700] "GET /vao-tu-vi-ban-giam-dinh-phap-y-oan-trai.html HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)"
    68.180.228.151 - - [25/Oct/2015:14:31:52 +0700] "GET /chuan-doan-doanh-thu-lg-sut-giam-tang-truong-g4-thap.html HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp; https://help.yahoo.com/help/us/ysearch/slurp)"
    46.165.197.142 - - [25/Oct/2015:14:33:35 +0700] "GET /robots.txt HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)"
    46.165.197.142 - - [25/Oct/2015:14:33:37 +0700] "GET /tag/du-li%CC%A3ch-quan-da%CC%89o-ba-lu%CC%A3a/feed HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)"
    46.165.197.142 - - [25/Oct/2015:14:33:39 +0700] "GET /tag/nhiep-a%CC%89nh-gia-nguoi-y/feed HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)"
    46.165.197.142 - - [25/Oct/2015:14:33:41 +0700] "GET /tag/pho-ha%CC%89i-sa%CC%89n HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)"
    46.165.197.142 - - [25/Oct/2015:14:33:42 +0700] "GET /tag/pho-ha%CC%89i-sa%CC%89n/feed HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)"
    216.145.11.94 - - [25/Oct/2015:16:25:34 +0700] "GET /robots.txt HTTP/1.0" 404 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en; rv:1.9.0.13) Gecko/2009073022 Firefox/3.5.2 (.NET CLR 3.5.30729) SurveyBot/2.3 (DomainTools)"
    216.145.11.94 - - [25/Oct/2015:16:25:35 +0700] "GET / HTTP/1.1" 200 509 "https://whois.domaintools.com/tienichmoingay.com" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en; rv:1.9.0.13) Gecko/2009073022 Firefox/3.5.2 (.NET CLR 3.5.30729) SurveyBot/2.3 (DomainTools)"
    203.113.152.1 - - [25/Oct/2015:16:42:52 +0700] "GET / HTTP/1.1" 200 509 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0"
    203.113.152.1 - - [25/Oct/2015:16:42:52 +0700] "GET /bo-suu-tap-banh-sinh-nhat-dep-moi-la.html HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0"
    66.249.65.200 - - [25/Oct/2015:18:56:07 +0700] "GET /robots.txt HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +https://www.google.com/bot.html)"
    66.249.65.214 - - [25/Oct/2015:18:56:08 +0700] "GET / HTTP/1.1" 200 509 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_3 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12F70 Safari/600.1.4 (compatible; Googlebot/2.1; +https://www.google.com/bot.html)"
    136.243.73.82 - - [25/Oct/2015:19:40:40 +0700] "GET /robots.txt HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)"
    136.243.73.82 - - [25/Oct/2015:19:40:42 +0700] "GET /tag/du-li%CC%A3ch-quan-da%CC%89o-ba-lu%CC%A3a HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)"

    You can use fail2ban to block it.

    Thread Starter gagomap

    (@gagomap)

    Thanks,
    I will check all my nginx blacklist. May be i forget to add it.

    Thread Starter gagomap

    (@gagomap)

    No, i don’t see anything like that sample in NF’s log.

    This is my nginx’s log
    188.165.15.41 - HIT [22/Oct/2015:15:42:30 +0700] dautu365.com "GET /robots.txt HTTP/1.1" 200 66 "-" "Mozilla/5.0 (compatible; AhrefsBot/5.0; +https://ahrefs.com/robot/)"

    Thread Starter gagomap

    (@gagomap)

    Thanks,
    But NF don’t blockk ahref bot, i still see it in nginx log (HIT)

Viewing 15 replies - 16 through 30 (of 40 total)