How to AntiDDoS from Reffer "google[.]com/q="

Can you suggest how to prevent ddos from reffer “http[://]www[.]google.[.]com/?q=XXXX”
This is sample from my Access Log

157.90.182.26 - - [15/Jul/2022:23:44:21 +0700] "POST / HTTP/2.0" 502 552 "http://www.google.com/?q=SBOQDM" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729)"
34.81.43.219 - - [15/Jul/2022:23:44:21 +0700] "POST / HTTP/2.0" 502 150 "http://www.google.com/?q=IVHUVR" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.1) Gecko/20090718 Firefox/3.5.1"
66.249.69.176 - - [15/Jul/2022:23:44:21 +0700] "POST / HTTP/2.0" 502 552 "http://www.google.com/?q=UJCQBP" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; InfoPath.2)"
203.205.34.20 - - [15/Jul/2022:23:44:21 +0700] "POST / HTTP/2.0" 502 552 "http://www.google.com/?q=YDQPLVX" "Mozilla/5.0 (Windows; U; MSIE 7.0; Windows NT 6.0; en-US)"
34.81.43.219 - - [15/Jul/2022:23:44:21 +0700] "POST / HTTP/2.0" 502 150 "http://www.google.com/?q=QVVNPH" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.1) Gecko/20090718 Firefox/3.5.1"
66.249.69.176 - - [15/Jul/2022:23:44:21 +0700] "POST / HTTP/2.0" 502 552 "http://www.google.com/?q=NDRHHG" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Win64; x64; Trident/4.0)"
34.81.43.219 - - [15/Jul/2022:23:44:21 +0700] "POST / HTTP/2.0" 502 552 "http://www.google.com/?q=EPPBM" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1; .NET CLR 2.0.50727; InfoPath.2)"
115.73.223.185 - - [15/Jul/2022:23:44:21 +0700] "POST / HTTP/2.0" 502 150 "http://www.google.com/?q=GGVKO" "Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)"
2400:8902::f03c:93ff:fe7a:75e3 - - [15/Jul/2022:23:44:21 +0700] "POST / HTTP/2.0" 502 552 "http://www.google.com/?q=RUQEGEK" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729)"
113.160.106.132 - - [15/Jul/2022:23:44:21 +0700] "POST / HTTP/2.0" 502 552 "http://www.google.com/?q=WYOIL" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729)"

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.