How to defy this url in nginx.conf

Server NGINX
1

My server can’t be run normal now,when I check the access.log I see
there are lot of connections request my site url :
/iclk/?zoneid=15&uid=1000 .

I want to defy this url in nginx.conf. I just write the below code in
the file but it can’t work , can any kind man help me . lot of thanks.

location ^~ uid=1000$
{
return 404;
}

The access log is below:

60.19.120.162 - - [10/Mar/2012:02:02:34 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; 360SE)” -
220.181.106.221 - - [10/Mar/2012:02:02:34 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 162
“,99精品人妻无码专区在线视频区,中文无码AV一区二区三区,性做久久久久久久久不卡” “Opera/9.80 (Android; Opera
Mini/6.5.28115/26.1507; U; zh) Presto/2.8.119 Version/10.54”
117.136.5.170
220.181.106.221 - - [10/Mar/2012:02:02:34 +0800] “GET /favicon.ico
HTTP/1.1” 404 162 “http://www.xylmw.com/iclk/?zoneid=15&uid=1000”
“Opera/9.80 (Android; Opera Mini/6.5.28115/26.1507; U; zh)
Presto/2.8.119 Version/10.54” 117.136.5.170
180.121.215.77 - - [10/Mar/2012:02:02:34 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564
“http://www.segougou.cc/Film9/index2.html” “Mozilla/4.0 (compatible;
MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727;
.NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; BRI/2; MASP;
SE 2.X MetaSr 1.0)” -
111.226.38.245 - - [10/Mar/2012:02:02:34 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; 360SE)” -
115.59.69.216 - - [10/Mar/2012:02:02:34 +0800] “GET /favicon.ico
HTTP/1.1” 404 564 “-” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; SV1; .NET CLR 1.1.4322; .NET4.0C; .NET CLR 2.0.50727; .NET CLR
3.0.4506.2152; .NET CLR 3.5.30729; 360SE)” -
61.186.41.150 - - [10/Mar/2012:02:02:35 +0800] “GET /i.js HTTP/1.1” 200
4563 “http://www.55zy.info/list/index9.html” “Mozilla/4.0 (compatible;
MSIE 6.0; Windows NT 5.1; QQDownload 691; SV1; Mozilla/4.0 (compatible;
MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR
3.0.4506.2152; .NET CLR 3.5.30729; 360SE)” -
119.185.237.31 - - [10/Mar/2012:02:02:35 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0)” -
218.92.176.98 - - [10/Mar/2012:02:02:35 +0800] “GET /i.js HTTP/1.1” 200
4563 “http://www.yyy48.com/template/x_skin9_b/images/g_js/loading.html”
“Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.1.4322; .NET CLR 2.0.50727; Microsoft Windows Media Center PC 6.0)” -
59.49.77.235 - - [10/Mar/2012:02:02:35 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 6.1; SE 2.x)” -
59.46.60.112 - - [10/Mar/2012:02:02:35 +0800] “GET /i.js HTTP/1.1” 304 0
“http://www.yusegu.com/movie/8481.htm” “Mozilla/4.0 (compatible; MSIE
6.0; Windows NT 5.1; SV1; 360SE)” -
111.226.38.245 - - [10/Mar/2012:02:02:35 +0800] “GET /favicon.ico
HTTP/1.1” 404 564 “-” “Mozilla/4.0 (compatible; MSIE 8.0; Windows NT
5.1; Trident/4.0; 360SE)” -
1.195.126.32 - - [10/Mar/2012:02:02:35 +0800] “GET /favicon.ico
HTTP/1.1” 404 564 “-” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; SV1; 360SE)” -
218.26.104.251 - - [10/Mar/2012:02:02:35 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR
2.0.50727)” -
171.36.35.110 - - [10/Mar/2012:02:02:35 +0800] “GET /i.js HTTP/1.1” 200
4563 “NameBright - Coming Soon” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1; 360SE)” -
115.51.157.180 - - [10/Mar/2012:02:02:35 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.2; Trident/4.0)” -
180.113.86.115 - - [10/Mar/2012:02:02:35 +0800] “GET /i.js HTTP/1.1” 200
1828 “http://www.yyy48.com/template/x_skin9_b/images/g_js/loading.html”
“Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2;
.NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)”

125.113.131.143 - - [10/Mar/2012:02:02:35 +0800] “GET /i.js HTTP/1.1”
304 0 “http://sexwo.info/Player.asp?11605,5,6,1.html” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1)” -
121.35.67.84 - - [10/Mar/2012:02:02:35 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 9.0; Windows NT 5.1; SV1; QQDownload 691; 360SE)” -
115.58.75.92 - - [10/Mar/2012:02:02:35 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1)” -
59.39.31.116 - - [10/Mar/2012:02:02:35 +0800] “GET
/templates/index/default/image/top_logo.gif HTTP/1.1” 200 8145 “-” “-”

59.39.31.116 - - [10/Mar/2012:02:02:35 +0800] “GET
/templates/index/default/image/top_logo.gif HTTP/1.1” 200 8145 “-” “-”

120.196.212.213 - - [10/Mar/2012:02:02:35 +0800] “GET / HTTP/1.1” 200
3912 “-” “DNSPod-monitor(http://www.dnspod.cn)” -
182.135.147.97 - - [10/Mar/2012:02:02:35 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 7.0; Windows NT 5.1; SV1)” -
175.147.18.108 - - [10/Mar/2012:02:02:35 +0800] “GET
/show.php?z_uid=1014&zoneid=22&z_h_url=www.yusegu.com&z_uc_ks=1980&z_sh=1024&z_sw=1280&z_scd=32&u_a_type=1&z_c_url=http%3A//www.yusegu.com/list/G_17.htm&z_uref=http%3A//www.yusegu.com/list/G_18.htm&z_utz=8&z_uhis=65&z_ujava=1&z_ufv=11.1.102.62
HTTP/1.1” 200 1619 “http://www.yusegu.com/list/G_17.htm” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1)” -
116.228.85.98 - - [10/Mar/2012:02:02:35 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; 360SE)”

122.239.219.240 - - [10/Mar/2012:02:02:36 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 162 “-” “Mozilla/4.0
(compatible; 360SE; Windows NT 5.1; SV1)” -
121.37.37.178 - - [10/Mar/2012:02:02:36 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR
2.0.50727)” -
61.155.26.202 - - [10/Mar/2012:02:02:36 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)” -
14.118.106.201 - - [10/Mar/2012:02:02:36 +0800] “GET /i.js HTTP/1.1” 200
1828 “http://www.12mv.info/” “Mozilla/5.0 (Windows; U; Windows NT 5.1;
zh-CN; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8 (.NET CLR 3.5.30729)”

113.81.97.79 - - [10/Mar/2012:02:02:36 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0)” -
117.90.180.239 - - [10/Mar/2012:02:02:36 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1; .NET CLR
2.0.50727; 360SE)” -
117.65.104.246 - - [10/Mar/2012:02:02:36 +0800] “GET /i.js HTTP/1.1” 200
1828 “66zy.info - This website is for sale! - 66zy Resources and Information.” “Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.2)” -
58.60.63.199 - - [10/Mar/2012:02:02:36 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1; 360SE)” -
121.37.43.108 - - [10/Mar/2012:02:02:36 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR
2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)” -
121.34.47.128 - - [10/Mar/2012:02:02:36 +0800] “GET
/show.php?z_uid=1014&zoneid=22&z_h_url=www.yusegu.com&z_uc_ks=1765&z_sh=768&z_sw=1366&z_scd=24&u_a_type=1&z_c_url=http%3A//www.yusegu.com/list/B_22.htm&z_uref=http%3A//www.yusegu.com/list/B_18.htm&z_utz=8&z_uhis=6&z_ujava=1&z_ufv=11.1.102.63
HTTP/1.1” 200 904 “http://www.yusegu.com/list/B_22.htm” “Mozilla/5.0
(compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)” -
183.60.156.56 - - [10/Mar/2012:02:02:36 +0800] “GET /i.js HTTP/1.1” 200
1828 “http://www.12mv.info/” “Mozilla/4.0 (compatible; MSIE 8.0; Windows
NT 5.1; SV1; .NET CLR 1.1.4322; TheWorld)” -
175.147.175.253 - - [10/Mar/2012:02:02:36 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; Trident/4.0; QQPinyin 730; .NET
CLR 2.0.50727; KuGooSoft; .NET CLR 2.0.50727; QQDownload 691; 360SE)” -
218.5.233.122 - - [10/Mar/2012:02:02:36 +0800] “GET /i.js HTTP/1.1” 200
4563 “http://www.yyy48.com/template/x_skin9_b/images/g_js/loading.html”
“Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)” -
218.59.161.118 - - [10/Mar/2012:02:02:36 +0800] “GET /i.js HTTP/1.1” 304
0 “http://55av.info/Player.asp?11316,5,6,1.html” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1; QQPinyinSetup 614; Sicent;
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) )” -
182.135.147.97 - - [10/Mar/2012:02:02:36 +0800] “GET
/iclk/?zoneid=15&uid=1000&type=2 HTTP/1.1” 404 564
“http://www.xylmw.com/iclk/?zoneid=15&uid=1000” “Mozilla/4.0
(compatible; MSIE 7.0; Windows NT 5.1; SV1)” -
112.248.161.69 - - [10/Mar/2012:02:02:36 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 162 “-” “Mozilla/4.0
(compatible; TheWorld; Windows NT 5.1; Trident/4.0)” -
112.64.106.167 - - [10/Mar/2012:02:02:36 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564
“http://www.52ri.info/article/?233.html” “Mozilla/5.0 (Windows NT 6.1)
AppleWebKit/535.4 (KHTML, like Gecko) Chrome/16.0.889.0 Safari/535.4” -
183.10.236.188 - - [10/Mar/2012:02:02:36 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 162 “-” “Mozilla/4.0
(compatible; 360SE; Windows NT 5.1; Trident/4.0)” -
112.248.161.69 - - [10/Mar/2012:02:02:36 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 162 “-” “Mozilla/4.0
(compatible; TheWorld; Windows NT 5.1; Trident/4.0)” -
180.153.213.141 - - [10/Mar/2012:02:02:36 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 162 “-” “Mozilla/4.0” -
118.253.71.8 - - [10/Mar/2012:02:02:36 +0800] “GET /i.js HTTP/1.1” 200
4563 “http://yyy48.com/template/x_skin9_b/images/g_js/loading.html”
“Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
2.0.50727; Microsoft Windows Media Center PC 6.0)” -
112.64.106.167 - - [10/Mar/2012:02:02:36 +0800] “GET /favicon.ico
HTTP/1.1” 404 564 “-” “Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.4
(KHTML, like Gecko) Chrome/16.0.889.0 Safari/535.4” -
182.135.147.97 - - [10/Mar/2012:02:02:37 +0800] “GET
/iclk/?zoneid=15&uid=1000&type=2 HTTP/1.1” 404 564
“http://www.xylmw.com/iclk/?zoneid=15&uid=1000&type=2” “Mozilla/4.0
(compatible; MSIE 7.0; Windows NT 5.1; SV1)” -
1.192.82.40 - - [10/Mar/2012:02:02:37 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; 360SE)” -
182.135.147.97 - - [10/Mar/2012:02:02:37 +0800] “GET
/iclk/?zoneid=15&uid=1000&type=2 HTTP/1.1” 404 564
“http://www.xylmw.com/iclk/?zoneid=15&uid=1000&type=2” “Mozilla/4.0
(compatible; MSIE 7.0; Windows NT 5.1; SV1)” -
116.21.87.137 - - [10/Mar/2012:02:02:37 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 162 “-” “Mozilla/4.0
(compatible; 360SE; Windows NT 5.1; Trident/4.0)” -
116.207.108.147 - - [10/Mar/2012:02:02:37 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR
3.0.04506.648; .NET CLR 3.5.21022)” -
183.153.43.126 - - [10/Mar/2012:02:02:37 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 6.1; SV1)” -
120.37.87.243 - - [10/Mar/2012:02:02:37 +0800] “GET /i.js HTTP/1.1” 200
4563 “http://www.yyy48.com/template/x_skin9_b/images/g_js/loading.html”
“Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.1.4322; .NET CLR 2.0.50727)” -
183.9.211.66 - - [10/Mar/2012:02:02:37 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1; 360SE)” -
183.7.93.84 - - [10/Mar/2012:02:02:37 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR
3.0.4506.2152; .NET CLR 3.5.30729)” -
183.8.236.110 - - [10/Mar/2012:02:02:37 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1)” -
122.239.223.232 - - [10/Mar/2012:02:02:37 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; SV1)” -
183.201.255.28 - - [10/Mar/2012:02:02:37 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; WOW64; Trident/5.0; SLCC2; .NET
CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC
6.0; InfoPath.3; BOIE9;ZHCN)” -
112.64.235.249 - - [10/Mar/2012:02:02:37 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 162 “-” “Mozilla/4.0” -
60.7.176.221 - - [10/Mar/2012:02:02:37 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 162
“http://www.52ri.info/list/index4_11.html” “Mozilla/5.0 (Linux; U;
Android 2.2.1; zh-cn; lepad_001n Build/PQXU100.4.0073.021511)
AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1”

183.9.211.66 - - [10/Mar/2012:02:02:37 +0800] “GET /favicon.ico
HTTP/1.1” 404 564 “-” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; SV1; 360SE; 360SE)” -
222.187.197.3 - - [10/Mar/2012:02:02:37 +0800] “GET /i.js HTTP/1.1” 200
4563 “http://www.yyy48.com/template/x_skin9_b/images/g_js/loading.html”
“Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
2.0.50727)” -
218.71.99.11 - - [10/Mar/2012:02:02:37 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 162 “-” “Mozilla/4.0
(compatible; 360SE; Windows NT 5.1; SV1)” -
202.104.156.56 - - [10/Mar/2012:02:02:37 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 7.0; Windows NT 5.1; SV1; 360SE)” -
60.172.8.8 - - [10/Mar/2012:02:02:37 +0800] “GET /i.js HTTP/1.1” 200
4563 “http://www.yyy48.com/template/x_skin9_b/images/g_js/loading.html”
“Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Sicent)” -
59.46.60.62 - - [10/Mar/2012:02:02:37 +0800] “GET /i.js HTTP/1.1” 200
4563 “http://55av.info/Player.asp?11620,5,6,1.html” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1; 360SE; 360SE)” -
1.85.224.85 - - [10/Mar/2012:02:02:37 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 162 “-” “Mozilla/4.0
(compatible; 360SE; Windows NT 5.1; SV1)” -
183.9.211.66 - - [10/Mar/2012:02:02:37 +0800] “GET /favicon.ico
HTTP/1.1” 404 564 “-” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; SV1; 360SE; 360SE)” -
111.120.26.96 - - [10/Mar/2012:02:02:38 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 6.1; SV1)” -
219.145.233.138 - - [10/Mar/2012:02:02:38 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 162 “-” “Mozilla/4.0
(compatible; 360SE; Windows NT 5.1; Trident/4.0)” -
61.134.28.2 - - [10/Mar/2012:02:02:38 +0800] “GET /i.js HTTP/1.1” 200
4563 “http://www.yyy48.com/template/x_skin9_b/images/g_js/loading.html”
“Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)” -
219.145.232.86 - - [10/Mar/2012:02:02:38 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)” -
218.73.173.14 - - [10/Mar/2012:02:02:38 +0800] “GET /i.js HTTP/1.1” 200
4563 “http://sexhuzy.com/list/index46_2.html” “Mozilla/4.0 (compatible;
MSIE 6.0; Windows NT 5.1; SV1; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727)”

112.248.161.69 - - [10/Mar/2012:02:02:38 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 162 “-” “Mozilla/4.0
(compatible; TheWorld; Windows NT 5.1; Trident/4.0)” -
183.9.211.66 - - [10/Mar/2012:02:02:38 +0800] “GET /favicon.ico
HTTP/1.1” 404 564 “-” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; SV1; 360SE; 360SE)” -
123.185.181.97 - - [10/Mar/2012:02:02:38 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)” -
218.71.99.53 - - [10/Mar/2012:02:02:38 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 162 “-” “Mozilla/4.0
(compatible; 360SE; Windows NT 5.1; SV1)” -
175.147.18.108 - - [10/Mar/2012:02:02:38 +0800] “GET
/show.php?z_uid=1014&zoneid=22&z_h_url=www.yusegu.com&z_uc_ks=1980&z_sh=1024&z_sw=1280&z_scd=32&u_a_type=1&z_c_url=http%3A//www.yusegu.com/list/G_17.htm&z_uref=http%3A//www.yusegu.com/list/G_18.htm&z_utz=8&z_uhis=65&z_ujava=1&z_ufv=11.1.102.62
HTTP/1.1” 200 1653 “http://www.yusegu.com/list/G_17.htm” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1)” -
183.9.211.66 - - [10/Mar/2012:02:02:38 +0800] “GET /favicon.ico
HTTP/1.1” 404 564 “-” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; SV1; 360SE; 360SE)” -
123.246.94.47 - - [10/Mar/2012:02:02:38 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 162 “-” “Mozilla/4.0
(compatible; 360SE; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)” -
119.185.233.75 - - [10/Mar/2012:02:02:38 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0)” -
119.185.237.65 - - [10/Mar/2012:02:02:38 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” “Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; Trident/4.0)” -

Posted at Nginx Forum:

2

On Fri, 2012-03-09 at 13:25 -0500, JennrCheng wrote:

My server can’t be run normal now,when I check the access.log I see
there are lot of connections request my site url :
/iclk/?zoneid=15&uid=1000 .

I want to defy this url in nginx.conf. I just write the below code in
the file but it can’t work , can any kind man help me . lot of thanks.

First of all, Nginx is already rejecting the request, which is why Nginx
returns a 404.

60.19.120.162 - - [10/Mar/2012:02:02:34 +0800] “GET
/iclk/?zoneid=15&uid=1000 HTTP/1.1” 404 564 “-” "Mozilla/4.0

location ^~ uid=1000$
{
return 404;
}

Locations cannot be based off of the request arguments. You could catch
the request by using something like this (assuming /iclk isn’t valid for
some other part of your site):

location ^~ /iclk { return 404; }

In any case, it isn’t necessary since Nginx is already doing this for
you.

If these requests are hacking attempts, you could utilize a tool such as
fail2ban that watched your Nginx logs for requests that match the
pattern and blocked the IP addresses using your system’s firewall.

For future reference, if you are going to paste giant sections from log
files, please use pastebin and just provide a link.

Regards,
Cliff

3

Okay, Got it . Thanks a lot.

Best Regards,
Jennr

Posted at Nginx Forum: