·设为首页收藏本站📧邮箱修改🎁免费下载专区🔐设置/修改密码👽群雄群聊
12下一页
返回列表 发布新帖

这种使用Cloudflare来发起大量请求的攻击是怎么实现的?

110 10
发表于 2024-2-21 17:36:37 | 查看全部 阅读模式

马上注册,免费下载更多dz插件网资源。

您需要 登录 才可以下载或查看,没有账号?立即注册

×
今天论坛一直被攻击,让我很疑惑的是攻击ip一直是cloudflare的ip。

这种通过 cloudflare 发起的cc攻击是怎么实现的呢?
  1. 162.158.134.28 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"172.69.235.153 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.134.135 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.134.28 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.134.134 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"172.69.235.158 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.134.135 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.222.227 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"172.69.235.148 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.222.146 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.222.40 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"172.69.235.147 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.222.152 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"172.69.235.149 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.134.38 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"172.69.235.158 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.222.146 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.134.135 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.134.38 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.222.152 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.222.226 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.134.134 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.222.226 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.222.227 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"172.69.235.159 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.222.227 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.134.135 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"162.158.222.147 - - [21/Feb/2024:16:58:35 +0800] "GET / HTTP/1.1" 444 0 "https://www.nodeloc.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
复制代码
我要说一句 收起回复

评论10

IT618发布Lv.8 发表于 2024-2-21 17:37:31 | 查看全部
有没有一种可能,你没有配好传递ip的请求头,另外攻击也有可能来自于warp/edt
我要说一句 收起回复
独家记忆Lv.8 发表于 2024-2-21 17:37:39 | 查看全部
不懂帮顶。
我要说一句 收起回复
CrystαlLv.8 发表于 2024-2-21 17:37:49 | 查看全部
挂了warp刷IP?不确定,楼下解答
{:3_46:}


/**
* Linux常用命令:rsync -rogpav --delete /home /tmp 同步两边的目录
* 故事开始便不承认普通
* Link https://greasyfork.org/zh-CN/scripts/396933-hostloc-zsbd
*/
我要说一句 收起回复
IT618发布Lv.8 发表于 2024-2-21 17:38:02 | 查看全部
你套cf了吗这种使用Cloudflare来发起大量请求的攻击是怎么实现的? GET,64,cloudflare,ip
我要说一句 收起回复
TyCodingLv.8 发表于 2024-2-21 17:38:59 | 查看全部
你套cf了,然后CF被穿透了,流量回源到了你机器上
我要说一句 收起回复
TyCodingLv.8 发表于 2024-2-21 17:39:35 | 查看全部
我没套 cf
我要说一句 收起回复
婷姐楼主Lv.8 发表于 2024-2-21 17:40:32 | 查看全部
老哥 ,你这是又得罪了谁
我要说一句 收起回复
独家记忆Lv.8 发表于 2024-2-21 17:41:05 | 查看全部
关键是没套额,所以很奇怪。
我要说一句 收起回复
TyCodingLv.8 发表于 2024-2-21 17:42:05 | 查看全部
有些人见不得别人好的。
我要说一句 收起回复

回复

 懒得打字嘛,点击右侧快捷回复【查看最新发布】   【应用商城享更多资源】
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

投诉/建议联系

discuzaddons@vip.qq.com

未经授权禁止转载,复制和建立镜像,
如有违反,按照公告处理!!!
  • 联系QQ客服
  • 添加微信客服

联系DZ插件网微信客服|最近更新|Archiver|手机版|小黑屋|DZ插件网! ( 鄂ICP备20010621号-1 )|网站地图

您的IP:18.118.16.229,182.106.158.52,GMT+8, 2024-5-15 22:55 , Processed in 0.221986 second(s), 142 queries , Gzip On, Redis On.

Based on Discuz! W1.0 Licensed

© 2001-2024 Discuz! Team.

关灯 在本版发帖
扫一扫添加微信客服
QQ客服返回顶部
快速回复 返回顶部 返回列表