基于nginx配置的WordPress网站防御17ce等测速网站攻击指南

本文原文:基于宝塔面板nginx配置的WordPress网站防御攻击指南-奇它博客
免插件实现WordPress网站屏蔽后台搜索词广告
WordPress网站批量更换文章固定链接(百度收录自动301跳转)

之前奇它博客@老白分享过一篇利用17ce测速网站攻击小型WordPress网站的文章,一直没来得及写相关的防御教程。今天便和大家分享一下两种WordPress网站防御攻击指南:一个是利用宝塔面板nginx防火墙添加ip黑名单实现的,另外一种则是通过更改服务器nginx配置实现的,后者除了能防御来自17ce等测速网站的攻击外,还能实现防止SQL注入、XSS攻击的功能。

基于宝塔面板nginx配置的WordPress网站防御攻击指南

前言

17ce测速网站(https://www.17ce.com/)是一个面向站长的网站速度测试网站,可以获取网站在国内不同地区、世界各地的访问情况,因此该网站在世界各地都有大量的服务器用于测速。这些服务器在同时对小型网站进行访问测试时,便会加大服务器的负载。对于小型网站(121)其实也没有多大的影响,但是有心人利用17的漏洞便会让小型网站服务器负载百分百,甚至可以实现大型论坛服务器关机。因此,无论是个人小站还是大型论坛,防御17ce攻击,提高网站安全防护能力都是非常有必要的。

 

利用17ce攻击网站,来试试你的网站抗压能力有多强

nginx防火墙添加ip黑名单

基本原理:通过ip黑名单添加17ce等测速网站服务器ip地址,禁止其访问即可。缺点—ip地址可能随时会有更新

关于宝塔面板的nginx防火墙奇它博客@老白我之前分享过,但是现在宝塔官方免费防火墙已经下架了,换成付费插件了,不过第三方里面还有免费的

宝塔面板Nginx免费防火墙 5.0,有效抵御CC

1.打开nginx免费防火墙,点击全局配置

基于宝塔面板nginx配置的WordPress网站防御攻击指南

 

2.选择ip黑名单

 

基于宝塔面板nginx配置的WordPress网站防御攻击指南

3.添加如下ip即可(此为针对宝塔面板格式的ip地址:2020.7.25)

 
 
  1. [
  2. [[47,90,98,206],[47,90,98,206]],
  3. [[120,239,81,196],[120,239,81,196]],
  4. [[103,246,10,75],[103,246,10,75]],
  5. [[112,118,170,196],[112,118,170,196]],
  6. [[61,172,243,6],[61,172,243,6]],
  7. [[120,85,94,98],[120,85,94,98]],
  8. [[125,31,23,243],[125,31,23,243]],
  9. [[120,197,165,86],[120,197,165,86]],
  10. [[112,123,159,2],[112,123,159,2]],
  11. [[183,134,218,148],[183,134,218,148]],
  12. [[14,17,114,193],[14,17,114,193]],
  13. [[183,2,247,137],[183,2,247,137]],
  14. [[36,148,125,40],[36,148,125,40]],
  15. [[162,219,32,82],[162,219,32,82]],
  16. [[117,166,67,105],[117,166,67,105]],
  17. [[122,226,181,86],[122,226,181,86]],
  18. [[43,225,181,22],[43,225,181,22]],
  19. [[223,198,133,107],[223,198,133,107]],
  20. [[218,29,128,229],[218,29,128,229]],
  21. [[219,138,163,114],[219,138,163,114]],
  22. [[36,250,94,218],[36,250,94,218]],
  23. [[180,162,166,149],[180,162,166,149]],
  24. [[61,54,25,100],[61,54,25,100]],
  25. [[39,177,152,208],[39,177,152,208]],
  26. [[122,193,54,180],[122,193,54,180]],
  27. [[180,140,11,182],[180,140,11,182]],
  28. [[112,32,206,126],[112,32,206,126]],
  29. [[111,19,132,243],[111,19,132,243]],
  30. [[180,97,195,70],[180,97,195,70]],
  31. [[123,147,79,106],[123,147,79,106]],
  32. [[117,183,111,174],[117,183,111,174]],
  33. [[222,217,213,201],[222,217,213,201]],
  34. [[140,240,62,194],[140,240,62,194]],
  35. [[223,111,161,228],[223,111,161,228]],
  36. [[58,19,228,123],[58,19,228,123]],
  37. [[119,36,8,210],[119,36,8,210]],
  38. [[112,32,180,60],[112,32,180,60]],
  39. [[110,185,54,252],[110,185,54,252]],
  40. [[123,127,77,124],[123,127,77,124]],
  41. [[110,229,45,7],[110,229,45,7]],
  42. [[112,47,217,56],[112,47,217,56]],
  43. [[60,26,215,203],[60,26,215,203]],
  44. [[120,242,166,72],[120,242,166,72]],
  45. [[36,155,93,20],[36,155,93,20]],
  46. [[117,181,57,154],[117,181,57,154]],
  47. [[114,251,216,139],[114,251,216,139]],
  48. [[61,174,253,11],[61,174,253,11]],
  49. [[171,34,222,206],[171,34,222,206]],
  50. [[218,68,229,40],[218,68,229,40]],
  51. [[117,27,142,38],[117,27,142,38]],
  52. [[119,188,249,195],[119,188,249,195]],
  53. [[111,19,77,147],[111,19,77,147]],
  54. [[153,36,240,125],[153,36,240,125]],
  55. [[14,204,180,116],[14,204,180,116]],
  56. [[36,231,205,193],[36,231,205,193]],
  57. [[124,163,211,132],[124,163,211,132]],
  58. [[112,123,109,128],[112,123,109,128]],
  59. [[113,18,195,25],[113,18,195,25]],
  60. [[222,129,59,128],[222,129,59,128]],
  61. [[182,90,201,49],[182,90,201,49]],
  62. [[182,117,126,235],[182,117,126,235]],
  63. [[60,9,4,3],[60,9,4,3]],
  64. [[120,192,38,196],[120,192,38,196]],
  65. [[39,104,24,18],[39,104,24,18]],
  66. [[42,236,211,72],[42,236,211,72]],
  67. [[112,50,67,158],[112,50,67,158]],
  68. [[119,181,139,40],[119,181,139,40]],
  69. [[61,132,226,210],[61,132,226,210]],
  70. [[116,255,133,152],[116,255,133,152]],
  71. [[59,63,224,178],[59,63,224,178]],
  72. [[103,235,226,133],[103,235,226,133]],
  73. [[119,181,139,55],[119,181,139,55]],
  74. [[171,37,86,62],[171,37,86,62]],
  75. [[58,22,1,21],[58,22,1,21]],
  76. [[122,118,214,164],[122,118,214,164]],
  77. [[221,12,127,75],[221,12,127,75]],
  78. [[218,201,242,50],[218,201,242,50]],
  79. [[42,86,98,3],[42,86,98,3]],
  80. [[124,236,95,79],[124,236,95,79]],
  81. [[117,183,196,97],[117,183,196,97]],
  82. [[117,27,142,37],[117,27,142,37]],
  83. [[115,218,213,223],[115,218,213,223]],
  84. [[120,235,192,204],[120,235,192,204]],
  85. [[119,85,163,231],[119,85,163,231]],
  86. [[124,126,212,104],[124,126,212,104]],
  87. [[183,199,133,51],[183,199,133,51]],
  88. [[223,242,176,127],[223,242,176,127]],
  89. [[120,201,2,181],[120,201,2,181]],
  90. [[113,6,248,37],[113,6,248,37]],
  91. [[60,222,193,17],[60,222,193,17]],
  92. [[112,38,193,170],[112,38,193,170]],
  93. [[112,64,1,69],[112,64,1,69]],
  94. [[111,29,90,205],[111,29,90,205]],
  95. [[60,223,115,7],[60,223,115,7]],
  96. [[124,236,58,147],[124,236,58,147]],
  97. [[183,226,69,171],[183,226,69,171]],
  98. [[113,58,15,137],[113,58,15,137]],
  99. [[220,202,200,152],[220,202,200,152]],
  100. [[112,54,25,185],[112,54,25,185]],
  101. [[58,16,138,106],[58,16,138,106]],
  102. [[61,150,69,77],[61,150,69,77]],
  103. [[14,111,54,141],[14,111,54,141]],
  104. [[58,21,118,155],[58,21,118,155]],
  105. [[27,13,165,40],[27,13,165,40]],
  106. [[36,49,31,231],[36,49,31,231]],
  107. [[101,206,62,62],[101,206,62,62]],
  108. [[39,104,56,16],[39,104,56,16]],
  109. [[1,81,7,229],[1,81,7,229]],
  110. [[123,181,86,235],[123,181,86,235]],
  111. [[111,34,92,113],[111,34,92,113]],
  112. [[36,33,203,132],[36,33,203,132]],
  113. [[113,6,248,38],[113,6,248,38]],
  114. [[222,34,49,20],[222,34,49,20]],
  115. [[36,103,227,235],[36,103,227,235]],
  116. [[223,11,143,37],[223,11,143,37]],
  117. [[39,158,142,108],[39,158,142,108]],
  118. [[222,163,115,137],[222,163,115,137]],
  119. [[223,95,183,152],[223,95,183,152]],
  120. [[123,160,10,234],[123,160,10,234]],
  121. [[121,206,166,43],[121,206,166,43]],
  122. [[183,225,202,67],[183,225,202,67]],
  123. [[122,115,226,201],[122,115,226,201]],
  124. [[106,5,235,216],[106,5,235,216]],
  125. [[111,26,40,211],[111,26,40,211]],
  126. [[61,160,200,66],[61,160,200,66]],
  127. [[39,154,128,150],[39,154,128,150]],
  128. [[14,204,161,104],[14,204,161,104]],
  129. [[222,169,54,30],[222,169,54,30]],
  130. [[36,148,68,173],[36,148,68,173]],
  131. [[42,63,48,93],[42,63,48,93]],
  132. [[60,15,210,207],[60,15,210,207]],
  133. [[123,161,150,190],[123,161,150,190]],
  134. [[180,130,236,61],[180,130,236,61]],
  135. [[139,9,227,242],[139,9,227,242]],
  136. [[42,122,137,249],[42,122,137,249]],
  137. [[14,134,76,127],[14,134,76,127]],
  138. [[42,91,157,177],[42,91,157,177]],
  139. [[223,198,148,4],[223,198,148,4]],
  140. [[112,101,100,57],[112,101,100,57]],
  141. [[221,199,37,35],[221,199,37,35]],
  142. [[117,179,160,50],[117,179,160,50]],
  143. [[59,63,203,138],[59,63,203,138]],
  144. [[111,25,84,195],[111,25,84,195]],
  145. [[39,154,166,215],[39,154,166,215]],
  146. [[36,157,225,239],[36,157,225,239]],
  147. [[36,148,68,205],[36,148,68,205]],
  148. [[112,103,213,87],[112,103,213,87]],
  149. [[223,221,37,112],[223,221,37,112]],
  150. [[223,95,57,79],[223,95,57,79]],
  151. [[59,47,37,58],[59,47,37,58]],
  152. [[118,180,52,69],[118,180,52,69]],
  153. [[117,188,36,60],[117,188,36,60]],
  154. [[117,157,39,244],[117,157,39,244]],
  155. [[223,9,11,229],[223,9,11,229]],
  156. [[111,44,183,215],[111,44,183,215]],
  157. [[111,30,237,161],[111,30,237,161]],
  158. [[111,44,130,215],[111,44,130,215]],
  159. [[120,211,142,41],[120,211,142,41]],
  160. [[182,200,61,61],[182,200,61,61]],
  161. [[117,157,203,21],[117,157,203,21]],
  162. [[113,138,171,130],[113,138,171,130]],
  163. [[111,26,40,230],[111,26,40,230]],
  164. [[101,249,10,13],[101,249,10,13]],
  165. [[112,44,139,100],[112,44,139,100]],
  166. [[211,93,1,10],[211,93,1,10]],
  167. [[183,198,123,108],[183,198,123,108]],
  168. [[101,249,67,235],[101,249,67,235]],
  169. [[36,107,229,198],[36,107,229,198]],
  170. [[124,118,241,76],[124,118,241,76]],
  171. [[36,188,244,11],[36,188,244,11]],
  172. [[112,209,113,7],[112,209,113,7]],
  173. [[222,80,203,11],[222,80,203,11]],
  174. [[36,162,179,250],[36,162,179,250]],
  175. [[120,69,45,81],[120,69,45,81]],
  176. [[183,195,86,231],[183,195,86,231]],
  177. [[117,179,80,102],[117,179,80,102]],
  178. [[23,236,103,210],[23,236,103,210]],
  179. [[183,206,78,95],[183,206,78,95]],
  180. [[223,116,178,79],[223,116,178,79]],
  181. [[122,97,220,88],[122,97,220,88]],
  182. [[111,44,237,187],[111,44,237,187]],
  183. [[114,236,137,244],[114,236,137,244]],
  184. [[223,104,178,167],[223,104,178,167]],
  185. [[111,49,9,179],[111,49,9,179]],
  186. [[59,102,125,14],[59,102,125,14]],
  187. [[123,139,159,98],[123,139,159,98]],
  188. [[36,113,98,61],[36,113,98,61]],
  189. [[210,47,163,73],[210,47,163,73]],
  190. [[223,128,111,60],[223,128,111,60]],
  191. [[120,227,136,39],[120,227,136,39]],
  192. [[113,210,69,1],[113,210,69,1]],
  193. [[219,219,12,98],[219,219,12,98]],
  194. [[113,210,59,116],[113,210,59,116]],
  195. [[41,60,100,56],[41,60,100,56]],
  196. [[221,234,40,20],[221,234,40,20]],
  197. [[183,63,47,223],[183,63,47,223]],
  198. [[42,122,172,212],[42,122,172,212]],
  199. [[117,152,241,26],[117,152,241,26]],
  200. [[59,53,95,157],[59,53,95,157]],
  201. [[124,238,65,22],[124,238,65,22]],
  202. [[1,25,46,149],[1,25,46,149]],
  203. [[117,176,185,93],[117,176,185,93]],
  204. [[223,104,178,185],[223,104,178,185]],
  205. [[106,115,176,220],[106,115,176,220]],
  206. [[192,225,226,164],[192,225,226,164]],
  207. [[116,98,26,171],[116,98,26,171]],
  208. [[124,244,129,92],[124,244,129,92]],
  209. [[106,58,168,215],[106,58,168,215]],
  210. [[223,88,252,181],[223,88,252,181]],
  211. [[27,36,131,248],[27,36,131,248]],
  212. [[183,254,238,177],[183,254,238,177]],
  213. [[61,153,111,130],[61,153,111,130]],
  214. [[58,20,145,28],[58,20,145,28]],
  215. [[122,226,182,198],[122,226,182,198]],
  216. [[116,1,31,170],[116,1,31,170]],
  217. [[120,85,94,128],[120,85,94,128]],
  218. [[223,166,144,225],[223,166,144,225]],
  219. [[58,16,47,196],[58,16,47,196]],
  220. [[58,53,128,194],[58,53,128,194]],
  221. [[171,34,176,210],[171,34,176,210]],
  222. [[171,34,216,135],[171,34,216,135]],
  223. [[58,22,0,222],[58,22,0,222]],
  224. [[27,37,52,12],[27,37,52,12]],
  225. [[36,250,169,105],[36,250,169,105]],
  226. [[183,254,79,208],[183,254,79,208]],
  227. [[119,36,30,15],[119,36,30,15]],
  228. [[125,37,191,92],[125,37,191,92]],
  229. [[223,73,43,199],[223,73,43,199]],
  230. [[223,198,48,205],[223,198,48,205]],
  231. [[175,181,157,121],[175,181,157,121]],
  232. [[118,161,149,155],[118,161,149,155]],
  233. [[171,37,85,128],[171,37,85,128]],
  234. [[117,188,209,235],[117,188,209,235]],
  235. [[171,35,156,47],[171,35,156,47]],
  236. [[27,50,165,37],[27,50,165,37]],
  237. [[183,195,84,158],[183,195,84,158]],
  238. [[122,191,239,110],[122,191,239,110]],
  239. [[223,198,65,60],[223,198,65,60]],
  240. [[111,58,253,97],[111,58,253,97]],
  241. [[120,242,244,15],[120,242,244,15]],
  242. [[120,242,156,11],[120,242,156,11]],
  243. [[113,205,158,18],[113,205,158,18]],
  244. [[113,94,25,230],[113,94,25,230]],
  245. [[112,50,71,213],[112,50,71,213]],
  246. [[116,171,248,32],[116,171,248,32]],
  247. [[180,136,100,177],[180,136,100,177]],
  248. [[223,150,124,19],[223,150,124,19]],
  249. [[59,63,204,146],[59,63,204,146]],
  250. [[120,202,149,39],[120,202,149,39]],
  251. [[180,123,215,140],[180,123,215,140]],
  252. [[112,49,154,44],[112,49,154,44]],
  253. [[27,155,235,232],[27,155,235,232]],
  254. [[60,25,10,219],[60,25,10,219]],
  255. [[223,91,32,1],[223,91,32,1]],
  256. [[175,155,250,51],[175,155,250,51]],
  257. [[221,193,57,217],[221,193,57,217]],
  258. [[120,239,158,101],[120,239,158,101]],
  259. [[183,199,195,86],[183,199,195,86]],
  260. [[36,148,77,125],[36,148,77,125]],
  261. [[116,177,5,12],[116,177,5,12]],
  262. [[171,44,109,27],[171,44,109,27]],
  263. [[106,47,4,121],[106,47,4,121]],
  264. [[183,199,124,155],[183,199,124,155]],
  265. [[60,27,193,212],[60,27,193,212]],
  266. [[125,68,94,139],[125,68,94,139]],
  267. [[182,246,160,71],[182,246,160,71]],
  268. [[182,90,207,26],[182,90,207,26]],
  269. [[117,166,110,227],[117,166,110,227]],
  270. [[114,104,69,107],[114,104,69,107]],
  271. [[106,87,10,177],[106,87,10,177]],
  272. [[120,43,202,84],[120,43,202,84]],
  273. [[111,121,82,23],[111,121,82,23]],
  274. [[112,12,48,9],[112,12,48,9]],
  275. [[183,228,24,47],[183,228,24,47]],
  276. [[182,54,49,253],[182,54,49,253]],
  277. [[112,13,92,120],[112,13,92,120]],
  278. [[39,162,224,127],[39,162,224,127]],
  279. [[111,18,72,22],[111,18,72,22]],
  280. [[117,188,230,12],[117,188,230,12]],
  281. [[120,243,155,169],[120,243,155,169]],
  282. [[222,163,114,62],[222,163,114,62]],
  283. [[122,115,226,162],[122,115,226,162]],
  284. [[117,157,217,228],[117,157,217,228]],
  285. [[14,205,140,71],[14,205,140,71]],
  286. [[112,194,104,1],[112,194,104,1]],
  287. [[110,180,255,249],[110,180,255,249]],
  288. [[111,50,51,84],[111,50,51,84]],
  289. [[112,42,216,36],[112,42,216,36]],
  290. [[182,241,54,52],[182,241,54,52]],
  291. [[111,50,238,4],[111,50,238,4]],
  292. [[120,8,26,167],[120,8,26,167]],
  293. [[111,25,67,223],[111,25,67,223]],
  294. [[1,27,76,198],[1,27,76,198]],
  295. [[1,58,142,103],[1,58,142,103]],
  296. [[123,185,11,189],[123,185,11,189]],
  297. [[112,116,209,24],[112,116,209,24]],
  298. [[222,140,21,93],[222,140,21,93]],
  299. [[123,139,159,125],[123,139,159,125]],
  300. [[112,98,238,54],[112,98,238,54]],
  301. [[42,88,179,174],[42,88,179,174]],
  302. [[123,139,159,122],[123,139,159,122]],
  303. [[183,202,148,29],[183,202,148,29]],
  304. [[183,227,122,49],[183,227,122,49]],
  305. [[117,179,70,154],[117,179,70,154]],
  306. [[183,225,65,53],[183,225,65,53]],
  307. [[124,88,168,242],[124,88,168,242]],
  308. [[36,48,4,149],[36,48,4,149]],
  309. [[175,155,255,20],[175,155,255,20]],
  310. [[183,202,37,191],[183,202,37,191]],
  311. [[59,45,115,27],[59,45,115,27]],
  312. [[175,30,228,28],[175,30,228,28]],
  313. [[223,116,146,20],[223,116,146,20]],
  314. [[117,181,117,174],[117,181,117,174]],
  315. [[223,104,178,177],[223,104,178,177]],
  316. [[223,104,178,171],[223,104,178,171]],
  317. [[115,132,179,234],[115,132,179,234]],
  318. [[117,132,194,249],[117,132,194,249]],
  319. [[218,84,24,87],[218,84,24,87]],
  320. [[223,104,178,165],[223,104,178,165]],
  321. [[36,102,238,154],[36,102,238,154]],
  322. [[117,132,192,186],[117,132,192,186]],
  323. [[45,43,31,5],[45,43,31,5]],
  324. [[115,164,173,105],[115,164,173,105]],
  325. [[124,67,21,79],[124,67,21,79]],
  326. [[14,205,142,45],[14,205,142,45]],
  327. [[223,128,127,209],[223,128,127,209]],
  328. [[98,126,104,93],[98,126,104,93]],
  329. [[61,160,200,31],[61,160,200,31]],
  330. [[113,222,69,78],[113,222,69,78]],
  331. [[112,42,71,36],[112,42,71,36]],
  332. [[119,119,245,79],[119,119,245,79]],
  333. [[36,102,210,45],[36,102,210,45]],
  334. [[39,154,5,205],[39,154,5,205]],
  335. [[42,236,10,78],[42,236,10,78]],
  336. [[42,236,10,84],[42,236,10,84]],
  337. [[101,89,29,92],[101,89,29,92]],
  338. [[180,163,220,4],[180,163,220,4]]
  339. ]

修改宝塔面板nginx配置:防止SQL注入、XSS攻击

该方法转自明月大佬,配置不解释(水平有限,解释不了),大家只需要将下方代码复制到宝塔面板——网站管理——配置文件——server下方即可

基于宝塔面板nginx配置的WordPress网站防御攻击指南

代码:网站配置文件——server下方

 
 
  1. if ($request_method !~* GET|POST) { return 444; }
  2. #使用444错误代码可以更加减轻服务器负载压力:qitablog.com。
  3. #防止SQL注入:奇它博客
  4. if ($query_string ~* (\$|'|--|[+|(%20)]union[+|(%20)]|[+|(%20)]insert[+|(%20)]|[+|(%20)]drop[+|(%20)]|[+|(%20)]truncate[+|(%20)]|[+|(%20)]update[+|(%20)]|[+|(%20)]from[+|(%20)]|[+|(%20)]grant[+|(%20)]|[+|(%20)]exec[+|(%20)]|[+|(%20)]where[+|(%20)]|[+|(%20)]select[+|(%20)]|[+|(%20)]and[+|(%20)]|[+|(%20)]or[+|(%20)]|[+|(%20)]count[+|(%20)]|[+|(%20)]exec[+|(%20)]|[+|(%20)]chr[+|(%20)]|[+|(%20)]mid[+|(%20)]|[+|(%20)]like[+|(%20)]|[+|(%20)]iframe[+|(%20)]|[\<|%3c]script[\>|%3e]|javascript|alert|webscan|dbappsecurity|style|confirm\(|innerhtml|innertext)(.*)$) { return 555; }
  5. if ($uri ~* (/~).*) { return 501; }
  6. if ($uri ~* (\\x.)) { return 501; }
  7. #防止SQL注入
  8. if ($query_string ~* "[;'<>].*") { return 509; }
  9. if ($request_uri ~ " ") { return 509; }
  10. if ($request_uri ~ (\/\.+)) { return 509; }
  11. if ($request_uri ~ (\.+\/)) { return 509; }
  12.  
  13. #if ($uri ~* (insert|select|delete|update|count|master|truncate|declare|exec|\*|\')(.*)$ ) { return 503; }
  14. #防止SQL注入
  15. if ($request_uri ~* "(cost\()|(concat\()") { return 504; }
  16. if ($request_uri ~* "[+|(%20)]union[+|(%20)]") { return 504; }
  17. if ($request_uri ~* "[+|(%20)]and[+|(%20)]") { return 504; }
  18. if ($request_uri ~* "[+|(%20)]select[+|(%20)]") { return 504; }
  19. if ($request_uri ~* "[+|(%20)]or[+|(%20)]") { return 504; }
  20. if ($request_uri ~* "[+|(%20)]delete[+|(%20)]") { return 504; }
  21. if ($request_uri ~* "[+|(%20)]update[+|(%20)]") { return 504; }
  22. if ($request_uri ~* "[+|(%20)]insert[+|(%20)]") { return 504; }
  23. if ($query_string ~ "(<|%3C).*script.*(>|%3E)") { return 505; }
  24. if ($query_string ~ "GLOBALS(=|\[|\%[0-9A-Z]{0,2})") { return 505; }
  25. if ($query_string ~ "_REQUEST(=|\[|\%[0-9A-Z]{0,2})") { return 505; }
  26. if ($query_string ~ "proc/self/environ") { return 505; }
  27. if ($query_string ~ "mosConfig_[a-zA-Z_]{1,21}(=|\%3D)") { return 505; }
  28. if ($query_string ~ "base64_(en|de)code\(.*\)") { return 505; }
  29. if ($query_string ~ "[a-zA-Z0-9_]=http://") { return 506; }
  30. if ($query_string ~ "[a-zA-Z0-9_]=(\.\.//?)+") { return 506; }
  31. if ($query_string ~ "[a-zA-Z0-9_]=/([a-z0-9_.]//?)+") { return 506; }
  32. if ($query_string ~ "b(ultram|unicauca|valium|viagra|vicodin|xanax|ypxaieo)b") { return 507; }
  33. if ($query_string ~ "b(erections|hoodia|huronriveracres|impotence|levitra|libido)b") {return 507; }
  34. if ($query_string ~ "b(ambien|bluespill|cialis|cocaine|ejaculation|erectile)b") { return 507; }
  35. if ($query_string ~ "b(lipitor|phentermin|pro[sz]ac|sandyauer|tramadol|troyhamby)b") { return 507; }
  36. #这里大家根据自己情况添加删减上述判断参数,cURL、wget这类的屏蔽有点儿极端了,但要“宁可错杀一千,不可放过一个”。
  37. if ($http_user_agent ~* YisouSpider|ApacheBench|WebBench|Jmeter|JoeDog|Havij|GetRight|TurnitinBot|GrabNet|masscan|mail2000|github|wget|curl|Java|python) { return 508; }
  38. #同上,大家根据自己站点实际情况来添加删减下面的屏蔽拦截参数。
  39. if ($http_user_agent ~* "Go-Ahead-Got-It") { return 508; }
  40. if ($http_user_agent ~* "GetWeb!") { return 508; }
  41. if ($http_user_agent ~* "Go!Zilla") { return 508; }
  42. if ($http_user_agent ~* "Download Demon") { return 508; }
  43. if ($http_user_agent ~* "Indy Library") { return 508; }
  44. if ($http_user_agent ~* "libwww-perl") { return 508; }
  45. if ($http_user_agent ~* "Nmap Scripting Engine") { return 508; }
  46. if ($http_user_agent ~* "~17ce.com") { return 508; }
  47. if ($http_user_agent ~* "WebBench*") { return 508; }
  48. if ($http_user_agent ~* "spider") { return 508; } #这个会影响国内某些搜索引擎爬虫,比如:搜狗
  49. #拦截各恶意请求的UA,可以通过分析站点日志文件或者waf日志作为参考配置。
  50. if ($http_referer ~* 17ce.com) { return 509; }
  51. #拦截17ce.com站点测速节点的请求,实现和老白第一种ip黑名单配置一样的功能。
  52. if ($http_referer ~* WebBench*") { return 509; }
  53. #拦截WebBench或者类似压力测试工具,其他工具只需要更换名称即可。

 

测试效果

现在我们再用17ce测速网站进行网站奇它博客测试来看看效果

基于宝塔面板nginx配置的WordPress网站防御攻击指南

关于17ce网站,老白还有个“最快的WordPress网站”小趣闻

最快的WordPress网站,平均访问速度0.09秒(娱乐)

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值