From e58c37ea17132854607e04d4f200334b7d11411c Mon Sep 17 00:00:00 2001 From: QihuAI Design Date: Mon, 10 Aug 2026 20:55:15 +0800 Subject: [PATCH] =?UTF-8?q?#954=20=E6=9B=B4=E6=96=B0=E6=89=AB=E6=8F=8F?= =?UTF-8?q?=E5=99=A8=20UA=20=E9=BB=91=E5=90=8D=E5=8D=95=E5=8A=A0=E5=85=A5?= =?UTF-8?q?=20Infrawatch=20+=20InternetMeasurement=20(20260810-205514)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit access.log 发现 Infrawatch 探测 /mcp /sse 端点,InternetMeasurement 探测 / 首页. 加入 UA 黑名单 return 444. 验证:两个 UA 均被 444,正常 Mozilla 浏览器 200. --- nginx/aiflow.conf | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/nginx/aiflow.conf b/nginx/aiflow.conf index 282d3e2..7b68995 100644 --- a/nginx/aiflow.conf +++ b/nginx/aiflow.conf @@ -28,7 +28,7 @@ server { if ($request_uri ~* "^/(phpmyadmin|\.env|\.git/|actuator|actuator/|\.well-known/security)") { return 444; } - if ($http_user_agent ~* "(zgrab|nmap|masscan|nikto|sqlmap|acunetix|nessus|wpscan|dirbuster|gobuster|ffuf|hydra|metasploit|MJ12bot|AhrefsBot|SemrushBot|DotBot|PetalBot|Aspera|HTTrack|Scrapy|libwww|Havij|TSWeb)") { + if ($http_user_agent ~* "(zgrab|nmap|masscan|nikto|sqlmap|acunetix|nessus|wpscan|dirbuster|gobuster|ffuf|hydra|metasploit|MJ12bot|AhrefsBot|SemrushBot|DotBot|PetalBot|Aspera|HTTrack|Scrapy|libwww|Havij|TSWeb|Infrawatch|InternetMeasurement)") { return 444; } if ($http_user_agent ~* "(^curl/|^wget/|^python-requests)") { @@ -127,3 +127,4 @@ server { } +