Приветствую, сайт начали атаковать ddos, запросы идут на многочисленные картинки на сайте. Защитный код в index.php (после нескольких запросов банит на некоторое время) не помогает, так как хватает одной загрузки страницы на которой много элементов в которым и идут обращения. IP как понимаете разные, выложу часть лога с одним ип. Подскажите люди добрые как жить) *****-скрытый url сайта.
83.220.238.11 - - [27/Nov/2016:14:58:05 +0300] "GET /numbers/1647.png HTTP/1.1" 200 2257 "http://*****.ru/" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:05 +0300] "GET /phones/8%20(911)%20754-69-22.png HTTP/1.1" 200 1313 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:05 +0300] "GET /numbers/453.png HTTP/1.1" 200 2343 "http://*****.ru/" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:06 +0300] "GET /numbers/2894.png HTTP/1.1" 200 2359 "http://*****.ru/" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:06 +0300] "GET /phones/8%20(962)%20621-68-20.png HTTP/1.1" 200 1222 "
http://autonomera777.ru/" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:06 +0300] "GET /numbers/3241.png HTTP/1.1" 200 2398 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:06 +0300] "GET /numbers/1248.png HTTP/1.1" 200 2430 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /numbers/4077.png HTTP/1.1" 200 3709 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /numbers/4063.png HTTP/1.1" 200 3755 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /phones/8%20(917)%20581-03-44.png HTTP/1.1" 200 1301 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /phones/8%20(792)%20770-51-81.png HTTP/1.1" 200 1266 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /phones/+79039689960.png HTTP/1.1" 200 1098 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /numbers/4030.png HTTP/1.1" 200 3642 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /numbers/4003.png HTTP/1.1" 200 3737 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /numbers/3988.png HTTP/1.1" 200 3736 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /phones/89175255392.png HTTP/1.1" 200 1085 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /phones/8%20(926)%20451-11-20.png HTTP/1.1" 200 1292 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /numbers/3968.png HTTP/1.1" 200 3612 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /numbers/3958.png HTTP/1.1" 200 3756 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /numbers/3966.png HTTP/1.1" 200 3255 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /phones/8%20(918)%20260-07-07.png HTTP/1.1" 200 1258 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /numbers/3953.png HTTP/1.1" 200 3661 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /phones/8%20(905)%20743-45-67.png HTTP/1.1" 200 1363 "
http://autonomera777.ru/" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /numbers/3857.png HTTP/1.1" 200 2283 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /numbers/3949.png HTTP/1.1" 200 2637 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /phones/8%20(968)%20062-25-06.png HTTP/1.1" 200 1261 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /phones/8%20(903)%20516-13-13.png HTTP/1.1" 200 1279 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /numbers/3827.png HTTP/1.1" 200 2505 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /phones/8%20(977)%20813-55-83.png HTTP/1.1" 200 1186 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:07 +0300] "GET /numbers/3843.png HTTP/1.1" 200 2620 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:08 +0300] "GET /phones/8%20(926)%20263-96-47.png HTTP/1.1" 200 1292 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"
83.220.238.11 - - [27/Nov/2016:14:58:08 +0300] "GET /phones/8%20(985)%20816-02-02.png HTTP/1.1" 200 1283 "*****" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/14A456 Safari/600.1.4"