共计 5379 个字符，预计需要花费 14 分钟才能阅读完成。
今天论坛一直被攻击，让我很疑惑的是攻击 ip 一直是 cloudflare 的 ip。
这种通过 cloudflare 发起的 cc 攻击是怎么实现的呢？
162.158.134.28 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
172.69.235.153 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.134.135 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.134.28 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.134.134 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
172.69.235.158 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.134.135 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.222.227 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
172.69.235.148 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.222.146 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.222.40 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
172.69.235.147 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.222.152 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
172.69.235.149 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.134.38 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
172.69.235.158 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.222.146 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.134.135 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.134.38 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.222.152 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.222.226 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.134.134 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.222.226 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.222.227 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
172.69.235.159 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.222.227 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.134.135 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
162.158.222.147 – – [21/Feb/2024:16:58:35 +0800] ＂GET / HTTP/1.1＂ 444 0 ＂https://www.nodeloc.com/＂ ＂Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36＂
复制代码
