Welcome! Log In Create A New Profile

Advanced

Flood HTTP from random referrer

Posted by Arkos 
Flood HTTP from random referrer
July 02, 2013 05:20AM
Hello,

I don't know if I misconfigured Nginx or if it's a kind of DDOS but my server is spammed with requests like that :

84.208.117.194 - - [02/Jul/2013:11:12:46 +0200] "GET / HTTP/1.1" 499 0 "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=deckvilla&cat=472&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=1&sub=&text_only=0&sho" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MAEM; .NET4.0C; AskTbFWV5/5.13.2.19379)"
187.194.58.157 - - [02/Jul/2013:11:12:46 +0200] "GET / HTTP/1.1" 499 0 "http://trjbbyqnxfmfd.pl/" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET CLR 2.0.50727; AskTbATU2/5.17.0.25589)"
197.35.92.171 - - [02/Jul/2013:11:12:46 +0200] "GET / HTTP/1.1" 200 6520 "https://liteapps.mcafee.com/apps/mss/3.0/default.asp?auto=1&cver=3.0.318.3&lang=en-au&langOverride=0&eula=1&eula=1&affid=739&rid=" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
84.208.117.194 - - [02/Jul/2013:11:12:46 +0200] "GET / HTTP/1.1" 499 0 "http://syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=deckvilla&cat=472&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=1&sub=&text_only=0&sho" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MAEM; .NET4.0C; AskTbFWV5/5.13.2.19379)"
223.206.68.185 - - [02/Jul/2013:11:12:46 +0200] "GET / HTTP/1.1" 499 0 "https://blu177.afx.ms/att/GetAttachment.aspx?file=aa090c13-9514-4d87-a2cd-83ae999b4dcc.xls&ct=YXBwbGljYXRpb24vdm5kLm1zLWV4Y2Vs&name=4Liq4LmI4LiH4LmA4LiC4LiVX_2bC5guC4hC4uLnhscw_3d_3d&inline=0&rfc=0&empty=False&imgsrc=&cid=dfd74f99d62a755e&shared=1&entryPt=do" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E; AskTbSGT/5.17.3.36670)"
197.35.92.171 - - [02/Jul/2013:11:12:46 +0200] "GET / HTTP/1.1" 200 6473 "http://domanslocksde.info/jbbv1M0cmY20nSOX0pEGg0Y7LH0paaJ0fhsD04N8F0piCJ0UoDn0ogTl0Fu0Q0hXRc0P2a10K4t50wvxH0cW5V0yH500GH6J016zP07zjt0HlU40eQGE09mOf08H5100WSf12GT10s9U50cwYp0yvCC0w8xn0cr8y0iiMI0Tbp110wBg0tFbv07QeR0lKsT09jxE0r2pE0izNc0I2J20ie1f0ofc90lltq0CzFJ0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"


Do you know more about this problem ?
Thank you !
Arkos
Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 132
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready