• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • Support for BIND DNS has been removed from Plesk for Windows due to security and maintenance risks.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS.

Question From where is calling this IP?

SalvadorS

Regular Pleskian
Server operating system version
Debian 12
Plesk version and microupdate number
18.0.61
Hi everybody,

First of all, thank you very much for trying to help me.

I have an IP address that is always connected to one of my servers:

root@server:/# netstat -plan|grep :80 |awk {'print $5'}|cut -d: -f 1|sort|uniq -c |sort -n
8 109.236.89.219

I added the IP to fail2ban to block it, but it is still there. I searched the logs to find out where the IP is calling from:

root@server:/# grep 109.236.89.219 /var/www/vhosts/*/logs/access_ssl_log
root@server:/# grep 109.236.89.219 /var/www/vhosts/*/logs/access_log

No luck...

So, how can I find out exactly what that IP is doing and where it is coming from?

Thank you in advance.
 
Back
Top