<div>Здравствуйте.<br clear="all"></div><div><br></div><div>Заметил на графиках аплинков аномальные всплески трафика. решил поглядеть, что, собственно, происходит.</div><div>в конечном итоге - обнаружил:</div><div><br></div>
<div>на одном из фронтендов во множестве валяться в лог следующие запросы:</div><div><br></div><div>----</div><div>109.72.73.10    localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>
109.72.73.10    localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>84.237.183.88   localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>
109.108.251.2   localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>109.108.251.2   localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>
95.83.139.9     localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>91.200.200.6    localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>
91.200.200.6    localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>91.200.200.6    localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>
91.200.200.6    localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>91.200.200.6    localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>
91.200.200.6    localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>95.83.139.9     localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>
95.83.139.9     localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>95.83.139.9     localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>
95.83.139.9     localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>78.85.189.236   localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>
178.163.84.217  localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>93.125.121.208  localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>
93.125.121.208  localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>87.68.72.170    localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>
77.122.63.55    localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>77.122.63.55    localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>
94.244.18.127   localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>94.244.18.127   localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>
94.244.18.127   localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>84.237.183.88   localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br>
109.72.73.10    localhost       &quot;-&quot;     400     0       &quot;-&quot;     &quot;-&quot;     &quot;-&quot;     -<br></div><div>----</div><div>формат лога:</div><div>log_format  custom &#39;$remote_addr\t$host\t&quot;$request&quot;\t$status\t$body_bytes_sent\t&quot;$http_referer&quot;\t&quot;$http_user_agent&quot;\t&quot;$http_x_forwarded_for&quot;\t$upstream_response_time&#39;;<br>
</div><div><br></div><div><br></div><div>насколько я понимаю, это боты специально шлющие мне &quot;мусорные&quot; запросы?</div><div>что делать с ними? жаловаться провайдеру в ДЦ или, все таки, резать на стороне сервера?</div>
<div><br></div>-- <br>WBR, Andriy Tovstik<br>UNIX System Administrator<br>nick-handle: SQ22-UANIC<br>