In the last days I am receiving DDoS attacks on my VPS, I have an API with ExpressJS, I have added the ddos module that blocks when it receives requests from the same IP but I keep receiving requests from different IPs and I do not know how to stop it.
The requests are like the following
0|SERVIDOR | ::ffff:220.127.116.11 - - [27/Sep/2018:18:41:16 +0000] "GET http://www.jueaivip.cn HTTP/1.1" 403 - 0|SERVIDOR | ::ffff:18.104.22.168 - - [27/Sep/2018:18:41:16 +0000] "GET http://www.szgt17.com/ HTTP/1.1" 403 -
These URLs do not even exist on my server.
Valid requests are like this:
0|SERVIDOR | ::ffff:22.214.171.124 - - [27/Sep/2018:18:41:16 +0000] "GET /api/get/343304344 HTTP/1.1" 500 -