• The APS Catalog has been deprecated and removed from all Plesk Obsidian versions.
    Applications already installed from the APS Catalog will continue working. However, Plesk will no longer provide support for APS applications.
  • Please be aware: with the Plesk Obsidian 18.0.78 release, the support for the ngx_pagespeed.so module will be deprecated and removed from the sw-nginx package.

IPS calling 404 pages

R

roberto@

Guest
Have a look at the log below. I have many, many ips doing the same connections. r.php x.php etc. etc.

Ideas? Is there a way to keep this traffic out.
It is using 10G month.



------------------------------
89.53.4.112 - - [17/Mar/2006:20:18:12 +0100] "GET /mul.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; snprtz|T05047521810142; FDM)"
202.56.229.71 - - [17/Mar/2006:20:18:12 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)"
67.71.49.160 - - [17/Mar/2006:20:18:12 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
203.53.28.132 - - [17/Mar/2006:20:18:12 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
205.242.208.123 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
^C61.134.39.60 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.0" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
208.62.52.1 - - [17/Mar/2006:20:18:13 +0100] "GET /z.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
80.124.184.2 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
84.141.161.152 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
213.22.163.37 - - [17/Mar/2006:20:18:13 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; FunWebProducts; SV1; Hotbar 4.5.1.0; .NET CLR 1.1.4322)"
209.177.249.58 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; FunWebProducts; .NET CLR 1.1.4322)"
84.144.192.233 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
168.209.98.35 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; InfoPath.1)"
80.252.49.243 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
q172.169.92.47 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)"
81.36.49.242 - - [17/Mar/2006:20:18:14 +0100] "GET /mul.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; .NET CLR 1.1.4322)"
212.15.96.50 - - [17/Mar/2006:20:18:14 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
209.101.45.34 - - [17/Mar/2006:20:18:14 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
213.215.233.162 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
201.31.9.171 - - [17/Mar/2006:20:18:14 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
221.156.149.58 - - [17/Mar/2006:20:18:14 +0100] "GET /444.jpg HTTP/1.1" 404 305 "-" "-"
212.248.78.66 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; .NET CLR 1.1.4322)"
58.104.66.199 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; OptusNetDSL6; FreeprodTB; bgft; .NET CLR 1.1.4322)"
200.189.179.90 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
68.213.176.249 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
200.69.166.189 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
145.236.141.3 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
68.166.101.91 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
67.71.49.160 - - [17/Mar/2006:20:18:15 +0100] "GET /z.php HTTP/1.1" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
194.186.28.108 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
85.176.96.167 - - [17/Mar/2006:20:18:15 +0100] "GET /555.php HTTP/1.1" 404 305 "-" "-"
216.230.150.5 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
85.176.96.167 - - [17/Mar/2006:20:18:15 +0100] "GET /555.php HTTP/1.1" 404 305 "-" "-"
68.236.168.80 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
213.179.228.184 - - [17/Mar/2006:20:18:15 +0100] "GET /444.php HTTP/1.0" 404 343 "-" "-"
195.182.131.252 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
62.202.242.142 - - [17/Mar/2006:20:18:16 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
62.202.242.142 - - [17/Mar/2006:20:18:16 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
200.78.94.225 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
83.115.149.17 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
209.51.183.156 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
85.107.25.223 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
62.128.161.11 - - [17/Mar/2006:20:18:16 +0100] "GET /z.php HTTP/1.0" 404 305 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
88.155.172.162 - - [17/Mar/2006:20:18:16 +0100] "GET /444.jpg HTTP/1.1" 404 305 "-" "-":confused: :confused: :confused:
 
You must log in or register to reply here.

Similar threads

G
Issue Apache loading files randomly
Replies
8
Views
4K
green3d
G
T
Issue Unable to whitelist Cookiebot scanner in Plesk (tried all usual methods)
Replies
6
Views
2K
Tim den Dikken
T
J
Issue Default plesk-apache-badbot fail2ban doesn't work
2
Replies
23
Views
14K
Chad Reitsma
Chad Reitsma
T
Question Fail2ban trying to setup a rule to ban ai bots
Replies
4
Views
8K
Bitpalast
Bitpalast
Dave W
Issue Fail2ban banning the servers IP due to incorrect IP in apache logs
Replies
6
Views
3K
abashurov
abashurov
Back
Top