/index.php/en/component/users/
/index.php/en/component/users/?task=user.login
Вот эти два пути сайт joomla если просто блочу то 500 ошибка идет если через Directory deny
<IfModule mod_rewrite.c>
Options +FollowSymLinks
RewriteEngine on
RewriteBase /
RewriteRule ^.*[-/]y(\d+)-.*$ index\.php?id=$1&%{QUERY_STRING} [L]
RewriteRule ^y(\d+)-.*$ index\.php?id=$1&%{QUERY_STRING} [L]
RewriteRule ^j(\d+)[-/].*[-/]y(\d+)-.*$ index\.php?id=$1-$2&%{QUERY_STRING} [L]
RewriteRule ^j(\d+)[-/]y(\d+)[-/].*$ index\.php?id=$1-$2&%{QUERY_STRING} [L]
RewriteRule ^y(\d+)[-/].*[-/]j(\d+)[-/].*$ index\.php?id=$2-$1&%{QUERY_STRING} [L]
RewriteRule ^y(\d+)[-/]j(\d+)[-/].*$ index\.php?id=$2-$1&%{QUERY_STRING} [L]
RewriteRule ^.*[-/]y(\d+)[-/]j(\d+)[-/].*$ index\.php?id=$2-$1&%{QUERY_STRING} [L]
RewriteRule ^.*[-/]y(\d+)[-/].*[-/]j(\d+)[-/].*$ index\.php?id=$2-$1&%{QUERY_STRING} [L]
RewriteRule ^.*[-/]j(\d+)[-/].*[-/]y(\d+)[-/].*$ index\.php?id=$1-$2&%{QUERY_STRING} [L]
RewriteRule ^.*[-/]j(\d+)[-/]y(\d+)[-/].*$ index\.php?id=$1-$2&%{QUERY_STRING} [L]
RewriteRule ^c(\d+)[-/].*[-/]g(\d+)-.*$ index\.php?id=$1-$2&%{QUERY_STRING} [L]
RewriteRule ^c(\d+)[-/]g(\d+)[-/].*$ index\.php?id=$1-$2&%{QUERY_STRING} [L]
RewriteRule ^g(\d+)[-/].*[-/]c(\d+)[-/].*$ index\.php?id=$2-$1&%{QUERY_STRING} [L]
RewriteRule ^g(\d+)[-/]c(\d+)[-/].*$ index\.php?id=$2-$1&%{QUERY_STRING} [L]
RewriteRule ^.*[-/]g(\d+)[-/]c(\d+)[-/].*$ index\.php?id=$2-$1&%{QUERY_STRING} [L]
RewriteRule ^.*[-/]g(\d+)[-/].*[-/]c(\d+)[-/].*$ index\.php?id=$2-$1&%{QUERY_STRING} [L]
RewriteRule ^.*[-/]c(\d+)[-/].*[-/]g(\d+)[-/].*$ index\.php?id=$1-$2&%{QUERY_STRING} [L]
RewriteRule ^.*[-/]c(\d+)[-/]g(\d+)[-/].*$ index\.php?id=$1-$2&%{QUERY_STRING} [L]
</IfModule>
Вот мой htaccess.
DDos атаки идут по этим двум путям через авторизацию