gagomap
Forum Replies Created
-
This is log:
5.178.68.242 0.017 BYPASS [27/Nov/2015:07:02:23 +0700] dautu365.com "GET /?author=1 HTTP/1.1" 500 2985 "https://dautu365.com/?author=1" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.57 Safari/537.36" 5.61.38.9 0.026 BYPASS [29/Nov/2015:05:13:19 +0700] dautu365.com "GET /?author=1 HTTP/1.1" 500 2985 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.54u1 [en]" 195.154.191.156 0.057 BYPASS [02/Dec/2015:14:38:02 +0700] dautu365.com "GET /?author=0 HTTP/1.0" 500 2973 "-" "-" 5.178.68.242 0.017 BYPASS [27/Nov/2015:07:02:23 +0700] dautu365.com "GET /?author=1 HTTP/1.1" 500 2985 "https://dautu365.com/?author=1" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.57 Safari/537.36" 5.61.38.9 0.026 BYPASS [29/Nov/2015:05:13:19 +0700] dautu365.com "GET /?author=1 HTTP/1.1" 500 2985 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.54u1 [en]" 14.171.201.123 - BYPASS [30/Nov/2015:20:11:43 +0700] dautu365.com "GET /author/xxx HTTP/1.1" 301 178 "https://dautu365.com/wp-admin/admin.php?page=td_theme_panel" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.86 Safari/537.36" 195.154.191.156 0.057 BYPASS [02/Dec/2015:14:38:02 +0700] dautu365.com "GET /?author=0 HTTP/1.0" 500 2973 "-" "-" 5.178.68.242 0.017 BYPASS [27/Nov/2015:07:02:23 +0700] dautu365.com "GET /?author=1 HTTP/1.1" 500 2985 "https://dautu365.com/?author=1" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.57 Safari/537.36"
NF didn’t block them.
Forum: Plugins
In reply to: [Antispam Bee] Antispam -bee block my IPI have tried it code, by repace “fake ip” code in antispamm-bee.php. It make my website down, 500 server error.
Forum: Plugins
In reply to: [Antispam Bee] Antispam -bee block my IPNo, i’m using IPv4
But how do i try it ? Paste this code into function.php ?
Forum: Plugins
In reply to: [Contact Form 7] reCaptcha doesn't workI did everything follow your turtorial
Then i insert [recaptcha] to default contact form, there is no custom.
When press “Submit”, it show “Failed to send your message. Please try later or contact the administrator by another method.”
I have disable your captcha and installed wp-recaptcha-integration and it works fine.Forum: Reviews
In reply to: [Maintenance Mode] Simple and very simpleThank you, Lukas ??
Thanks,
Forum: Reviews
In reply to: [Stop User Enumeration] Work great !Thanks,
Thanks,
Thanks,
But what do you think about my first post ?
Is it 2 request in one second ? One hit nginx, one hit NF ?
And i see a lot of request in access.log. May be NF don’t stop them. And they was blocked by nginx server block.
95.211.199.202 - - [25/Oct/2015:05:12:57 +0700] "GET / HTTP/1.1" 200 826 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12 ( .NET CLR 3.5.30729)" 157.55.39.242 - - [25/Oct/2015:08:21:12 +0700] "GET /so-tay-cho-chuyen-du-lich-sapa-hoan-hao.html HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +https://www.bing.com/bingbot.htm)" 68.180.228.151 - - [25/Oct/2015:09:01:23 +0700] "GET /bo-suu-tap-banh-sinh-nhat-dep-moi-la.html HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp; https://help.yahoo.com/help/us/ysearch/slurp)" 207.46.13.142 - - [25/Oct/2015:09:03:26 +0700] "GET /author/nhungnguyen HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +https://www.bing.com/bingbot.htm)" 207.46.13.142 - - [25/Oct/2015:09:17:54 +0700] "GET /robots.txt HTTP/1.1" 404 162 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +https://www.bing.com/bingbot.htm)" 207.46.13.142 - - [25/Oct/2015:09:18:08 +0700] "GET /di-du-lich-ha-long-cho-quen-ghe-qua-pho-hai-san.html HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +https://www.bing.com/bingbot.htm)" 62.210.148.233 - - [25/Oct/2015:09:22:04 +0700] "GET /robots.txt HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)" 62.210.148.233 - - [25/Oct/2015:09:22:06 +0700] "GET /binh-minh-tren-bien-nha-trang-khoa%CC%89ng-khac-kho-quen.html/feed HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)" 68.180.228.151 - - [25/Oct/2015:09:57:36 +0700] "GET /nhung-dac-san-dat-mo-di-du-lich-ha-long-khong-the-bo-qua.html HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp; https://help.yahoo.com/help/us/ysearch/slurp)" 76.29.80.211 - - [25/Oct/2015:13:39:38 +0700] "GET /robots.txt HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)" 76.29.80.211 - - [25/Oct/2015:13:39:40 +0700] "GET / HTTP/1.0" 200 826 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)" 51.254.97.219 - - [25/Oct/2015:13:59:47 +0700] "GET /robots.txt HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)" 51.254.97.219 - - [25/Oct/2015:13:59:50 +0700] "GET /gia%CC%89i-nhie%CC%A3t-nang-he-voi-bai-tam-quan-lan-hoang-so-hung-vi%CC%83.html HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)" 51.254.97.219 - - [25/Oct/2015:13:59:52 +0700] "GET /khong-cho-tien-6-thanh-nien-giam-doc-mo-titan-bi-danh-chet.html HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)" 51.254.97.219 - - [25/Oct/2015:13:59:53 +0700] "GET /vao-tu-vi-ban-giam-dinh-phap-y-oan-trai.html HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)" 68.180.228.151 - - [25/Oct/2015:14:31:52 +0700] "GET /chuan-doan-doanh-thu-lg-sut-giam-tang-truong-g4-thap.html HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp; https://help.yahoo.com/help/us/ysearch/slurp)" 46.165.197.142 - - [25/Oct/2015:14:33:35 +0700] "GET /robots.txt HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)" 46.165.197.142 - - [25/Oct/2015:14:33:37 +0700] "GET /tag/du-li%CC%A3ch-quan-da%CC%89o-ba-lu%CC%A3a/feed HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)" 46.165.197.142 - - [25/Oct/2015:14:33:39 +0700] "GET /tag/nhiep-a%CC%89nh-gia-nguoi-y/feed HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)" 46.165.197.142 - - [25/Oct/2015:14:33:41 +0700] "GET /tag/pho-ha%CC%89i-sa%CC%89n HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)" 46.165.197.142 - - [25/Oct/2015:14:33:42 +0700] "GET /tag/pho-ha%CC%89i-sa%CC%89n/feed HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)" 216.145.11.94 - - [25/Oct/2015:16:25:34 +0700] "GET /robots.txt HTTP/1.0" 404 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en; rv:1.9.0.13) Gecko/2009073022 Firefox/3.5.2 (.NET CLR 3.5.30729) SurveyBot/2.3 (DomainTools)" 216.145.11.94 - - [25/Oct/2015:16:25:35 +0700] "GET / HTTP/1.1" 200 509 "https://whois.domaintools.com/tienichmoingay.com" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en; rv:1.9.0.13) Gecko/2009073022 Firefox/3.5.2 (.NET CLR 3.5.30729) SurveyBot/2.3 (DomainTools)" 203.113.152.1 - - [25/Oct/2015:16:42:52 +0700] "GET / HTTP/1.1" 200 509 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0" 203.113.152.1 - - [25/Oct/2015:16:42:52 +0700] "GET /bo-suu-tap-banh-sinh-nhat-dep-moi-la.html HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0" 66.249.65.200 - - [25/Oct/2015:18:56:07 +0700] "GET /robots.txt HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +https://www.google.com/bot.html)" 66.249.65.214 - - [25/Oct/2015:18:56:08 +0700] "GET / HTTP/1.1" 200 509 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_3 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12F70 Safari/600.1.4 (compatible; Googlebot/2.1; +https://www.google.com/bot.html)" 136.243.73.82 - - [25/Oct/2015:19:40:40 +0700] "GET /robots.txt HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)" 136.243.73.82 - - [25/Oct/2015:19:40:42 +0700] "GET /tag/du-li%CC%A3ch-quan-da%CC%89o-ba-lu%CC%A3a HTTP/1.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.5; https://www.majestic12.co.uk/bot.php?+)"
You can use fail2ban to block it.
Thanks,
I will check all my nginx blacklist. May be i forget to add it.No, i don’t see anything like that sample in NF’s log.
This is my nginx’s log
188.165.15.41 - HIT [22/Oct/2015:15:42:30 +0700] dautu365.com "GET /robots.txt HTTP/1.1" 200 66 "-" "Mozilla/5.0 (compatible; AhrefsBot/5.0; +https://ahrefs.com/robot/)"
Thanks,
But NF don’t blockk ahref bot, i still see it in nginx log (HIT)