2022-09-21 00:21:38 +00:00
|
|
|
|
--[[
|
|
|
|
|
|
规则名称: anti cc
|
|
|
|
|
|
|
|
|
|
|
|
过滤阶段: 请求阶段
|
|
|
|
|
|
|
|
|
|
|
|
危险等级: 中危
|
|
|
|
|
|
|
|
|
|
|
|
规则描述: 当一分钟访问/api/路径频率超过360次，则在5分钟内拦截该ip访问
|
|
|
|
|
|
--]]
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
local sh = ngx.shared.ipCache
|
2022-09-21 00:32:01 +00:00
|
|
|
|
local c, f = sh:get("cc" .. waf.ip)
|
2022-09-21 00:21:38 +00:00
|
|
|
|
|
2022-09-21 00:32:01 +00:00
|
|
|
|
if not waf.startWith(waf.toLower(waf.uri), "/api/") then
|
2022-09-21 00:21:38 +00:00
|
|
|
|
return false
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
if not c then
|
|
|
|
|
|
sh:set("cc" .. waf.ip, 0, 60, 1)
|
|
|
|
|
|
else
|
|
|
|
|
|
if f == 2 then
|
2022-09-21 00:49:53 +00:00
|
|
|
|
return ngx.exit(444)
|
2022-09-21 00:21:38 +00:00
|
|
|
|
elseif c >= 360 then
|
|
|
|
|
|
sh:set("cc" .. waf.ip, c, 300, 2)
|
|
|
|
|
|
end
|
|
|
|
|
|
end
|
|
|
|
|
|
return false
|
