duy13 / vDDoS-Protection

Welcome to vDDoS, a HTTP(S) DDoS Protection Reverse Proxy. Thank you for using!
https://vddos.voduy.com
482 stars 140 forks source link

Direct IP Access #55

Closed ghost closed 4 years ago

ghost commented 4 years ago

There should be CAPTCHA or Javascript Challenge for direct IP. Otherwise attacker can exhaust all resources on the server by hitting http://(IP) instead of domain

duy13 commented 4 years ago

reCAPTCHA cannot be used for IP, Javascript is possible, but you do not need to worry about attacks on IP, if you do not have a web source serving some of those IPs, leave an empty index.htm file.