> For the complete documentation index, see [llms.txt](https://book.linh.eu.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://book.linh.eu.org/jian-zhan-ji-shu/litespeed-he-apache-ping-bi-ip-de-fang-fa.md).

# Litespeed和Apache屏蔽IP的方法

### Litespeed和Apache屏蔽IP的方法

在.htaccess中屏蔽。

下文以恶意扫描网站的ip段为例。以下内容求助了AI。

### apache语法

#### Apache 2.4及以上版本推荐

```
<RequireAll>
    Require all granted
    # 屏蔽以下IP段 (CIDR: /24)
    Require not ip 220.176.196.0/24
    Require not ip 1.255.100.0/24
    Require not ip 61.128.96.0/24
    Require not ip 42.236.72.0/24
    Require not ip 180.96.21.0/24
    Require not ip 222.240.184.0/24
    Require not ip 112.90.216.0/24
    Require not ip 111.13.147.0/24
    Require not ip 111.40.232.0/24
    Require not ip 1.32.240.0/24
    Require not ip 113.107.238.0/24
    Require not ip 1.32.242.0/24
    Require not ip 118.212.233.0/24
    Require not ip 1.31.128.0/24
    Require not ip 221.236.7.0/24
    Require not ip 106.42.25.0/24
    Require not ip 153.37.232.0/24
    Require not ip 111.202.168.0/24
    Require not ip 58.58.81.0/24
    Require not ip 112.4.93.0/24
    Require not ip 42.48.109.0/24
    Require not ip 180.97.158.0/24
    Require not ip 112.25.16.0/24
    Require not ip 116.211.121.0/24
    Require not ip 116.55.250.0/24
    Require not ip 1.32.224.0/24
    Require not ip 113.200.91.0/24
    Require not ip 123.155.158.0/24
    Require not ip 113.207.76.0/24
    Require not ip 1.82.243.0/24
    Require not ip 111.47.226.0/24
    Require not ip 183.222.96.0/24
    Require not ip 218.8.55.0/24
    Require not ip 183.224.11.0/24
    Require not ip 61.147.166.0/24
    Require not ip 219.153.73.0/24
    Require not ip 123.125.242.0/24
    Require not ip 203.90.247.0/24
    Require not ip 119.188.35.0/24
    Require not ip 61.175.225.0/24
    Require not ip 103.15.183.0/24
    Require not ip 210.76.61.0/24
    Require not ip 1.32.244.0/24
    Require not ip 106.119.182.0/24
    Require not ip 122.228.238.0/24
    Require not ip 183.110.242.0/24
    Require not ip 111.202.98.0/24
    Require not ip 117.21.219.0/24
</RequireAll>
```

#### 兼容Apache 2.2及更早版本

```
Order Allow,Deny
Allow from all
# 屏蔽以下IP段 (C类网段)
Deny from 220.176.196
Deny from 1.255.100
Deny from 61.128.96
Deny from 42.236.72
Deny from 180.96.21
Deny from 222.240.184
Deny from 112.90.216
Deny from 111.13.147
Deny from 111.40.232
Deny from 1.32.240
Deny from 113.107.238
Deny from 1.32.242
Deny from 118.212.233
Deny from 1.31.128
Deny from 221.236.7
Deny from 106.42.25
Deny from 153.37.232
Deny from 111.202.168
Deny from 58.58.81
Deny from 112.4.93
Deny from 42.48.109
Deny from 180.97.158
Deny from 112.25.16
Deny from 116.211.121
Deny from 116.55.250
Deny from 1.32.224
Deny from 113.200.91
Deny from 123.155.158
Deny from 113.207.76
Deny from 1.82.243
Deny from 111.47.226
Deny from 183.222.96
Deny from 218.8.55
Deny from 183.224.11
Deny from 61.147.166
Deny from 219.153.73
Deny from 123.125.242
Deny from 203.90.247
Deny from 119.188.35
Deny from 61.175.225
Deny from 103.15.183
Deny from 210.76.61
Deny from 1.32.244
Deny from 106.119.182
Deny from 122.228.238
Deny from 183.110.242
Deny from 111.202.98
Deny from 117.21.219
```

### LiteSpeed屏蔽ip的方法

LiteSpeed，无论是LiteSpeed enterprise还是OpenLiteSpeed，均对 Apache 2.4 的 Require 语法有很好的支持，但是最推荐的方式如下：

```
<IfModule LiteSpeed>
# LiteSpeed 服务器专用配置
RewriteEngine On
​
# 屏蔽以下IP段
RewriteCond %{REMOTE_ADDR} ^220\.176\.196\.     [OR]
RewriteCond %{REMOTE_ADDR} ^1\.255\.100\.       [OR]
RewriteCond %{REMOTE_ADDR} ^61\.128\.96\.       [OR]
RewriteCond %{REMOTE_ADDR} ^42\.236\.72\.       [OR]
RewriteCond %{REMOTE_ADDR} ^180\.96\.21\.       [OR]
RewriteCond %{REMOTE_ADDR} ^222\.240\.184\.     [OR]
RewriteCond %{REMOTE_ADDR} ^112\.90\.216\.      [OR]
RewriteCond %{REMOTE_ADDR} ^111\.13\.147\.      [OR]
RewriteCond %{REMOTE_ADDR} ^111\.40\.232\.      [OR]
RewriteCond %{REMOTE_ADDR} ^1\.32\.240\.        [OR]
RewriteCond %{REMOTE_ADDR} ^113\.107\.238\.     [OR]
RewriteCond %{REMOTE_ADDR} ^1\.32\.242\.        [OR]
RewriteCond %{REMOTE_ADDR} ^118\.212\.233\.     [OR]
RewriteCond %{REMOTE_ADDR} ^1\.31\.128\.        [OR]
RewriteCond %{REMOTE_ADDR} ^221\.236\.7\.       [OR]
RewriteCond %{REMOTE_ADDR} ^106\.42\.25\.       [OR]
RewriteCond %{REMOTE_ADDR} ^153\.37\.232\.      [OR]
RewriteCond %{REMOTE_ADDR} ^111\.202\.168\.     [OR]
RewriteCond %{REMOTE_ADDR} ^58\.58\.81\.        [OR]
RewriteCond %{REMOTE_ADDR} ^112\.4\.93\.        [OR]
RewriteCond %{REMOTE_ADDR} ^42\.48\.109\.       [OR]
RewriteCond %{REMOTE_ADDR} ^180\.97\.158\.      [OR]
RewriteCond %{REMOTE_ADDR} ^112\.25\.16\.       [OR]
RewriteCond %{REMOTE_ADDR} ^116\.211\.121\.     [OR]
RewriteCond %{REMOTE_ADDR} ^116\.55\.250\.      [OR]
RewriteCond %{REMOTE_ADDR} ^1\.32\.224\.        [OR]
RewriteCond %{REMOTE_ADDR} ^113\.200\.91\.      [OR]
RewriteCond %{REMOTE_ADDR} ^123\.155\.158\.     [OR]
RewriteCond %{REMOTE_ADDR} ^113\.207\.76\.      [OR]
RewriteCond %{REMOTE_ADDR} ^1\.82\.243\.        [OR]
RewriteCond %{REMOTE_ADDR} ^111\.47\.226\.      [OR]
RewriteCond %{REMOTE_ADDR} ^183\.222\.96\.      [OR]
RewriteCond %{REMOTE_ADDR} ^218\.8\.55\.        [OR]
RewriteCond %{REMOTE_ADDR} ^183\.224\.11\.      [OR]
RewriteCond %{REMOTE_ADDR} ^61\.147\.166\.      [OR]
RewriteCond %{REMOTE_ADDR} ^219\.153\.73\.      [OR]
RewriteCond %{REMOTE_ADDR} ^123\.125\.242\.     [OR]
RewriteCond %{REMOTE_ADDR} ^203\.90\.247\.      [OR]
RewriteCond %{REMOTE_ADDR} ^119\.188\.35\.      [OR]
RewriteCond %{REMOTE_ADDR} ^61\.175\.225\.      [OR]
RewriteCond %{REMOTE_ADDR} ^103\.15\.183\.      [OR]
RewriteCond %{REMOTE_ADDR} ^210\.76\.61\.       [OR]
RewriteCond %{REMOTE_ADDR} ^1\.32\.244\.        [OR]
RewriteCond %{REMOTE_ADDR} ^106\.119\.182\.     [OR]
RewriteCond %{REMOTE_ADDR} ^122\.228\.238\.     [OR]
RewriteCond %{REMOTE_ADDR} ^183\.110\.242\.     [OR]
RewriteCond %{REMOTE_ADDR} ^111\.202\.98\.      [OR]
RewriteCond %{REMOTE_ADDR} ^117\.21\.219\.
RewriteRule ^ - [F,L]
</IfModule>
```

此方法不适合nginx服务器。
