• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

IPS calling 404 pages

R

roberto@

Guest
Have a look at the log below. I have many, many ips doing the same connections. r.php x.php etc. etc.

Ideas? Is there a way to keep this traffic out.
It is using 10G month.



------------------------------
89.53.4.112 - - [17/Mar/2006:20:18:12 +0100] "GET /mul.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; snprtz|T05047521810142; FDM)"
202.56.229.71 - - [17/Mar/2006:20:18:12 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)"
67.71.49.160 - - [17/Mar/2006:20:18:12 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
203.53.28.132 - - [17/Mar/2006:20:18:12 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
205.242.208.123 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
^C61.134.39.60 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.0" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
208.62.52.1 - - [17/Mar/2006:20:18:13 +0100] "GET /z.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
80.124.184.2 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
84.141.161.152 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
213.22.163.37 - - [17/Mar/2006:20:18:13 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; FunWebProducts; SV1; Hotbar 4.5.1.0; .NET CLR 1.1.4322)"
209.177.249.58 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; FunWebProducts; .NET CLR 1.1.4322)"
84.144.192.233 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
168.209.98.35 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; InfoPath.1)"
80.252.49.243 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
q172.169.92.47 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)"
81.36.49.242 - - [17/Mar/2006:20:18:14 +0100] "GET /mul.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; .NET CLR 1.1.4322)"
212.15.96.50 - - [17/Mar/2006:20:18:14 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
209.101.45.34 - - [17/Mar/2006:20:18:14 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
213.215.233.162 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
201.31.9.171 - - [17/Mar/2006:20:18:14 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
221.156.149.58 - - [17/Mar/2006:20:18:14 +0100] "GET /444.jpg HTTP/1.1" 404 305 "-" "-"
212.248.78.66 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; .NET CLR 1.1.4322)"
58.104.66.199 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; OptusNetDSL6; FreeprodTB; bgft; .NET CLR 1.1.4322)"
200.189.179.90 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
68.213.176.249 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
200.69.166.189 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
145.236.141.3 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
68.166.101.91 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
67.71.49.160 - - [17/Mar/2006:20:18:15 +0100] "GET /z.php HTTP/1.1" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
194.186.28.108 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
85.176.96.167 - - [17/Mar/2006:20:18:15 +0100] "GET /555.php HTTP/1.1" 404 305 "-" "-"
216.230.150.5 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
85.176.96.167 - - [17/Mar/2006:20:18:15 +0100] "GET /555.php HTTP/1.1" 404 305 "-" "-"
68.236.168.80 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
213.179.228.184 - - [17/Mar/2006:20:18:15 +0100] "GET /444.php HTTP/1.0" 404 343 "-" "-"
195.182.131.252 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
62.202.242.142 - - [17/Mar/2006:20:18:16 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
62.202.242.142 - - [17/Mar/2006:20:18:16 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
200.78.94.225 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
83.115.149.17 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
209.51.183.156 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
85.107.25.223 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
62.128.161.11 - - [17/Mar/2006:20:18:16 +0100] "GET /z.php HTTP/1.0" 404 305 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
88.155.172.162 - - [17/Mar/2006:20:18:16 +0100] "GET /444.jpg HTTP/1.1" 404 305 "-" "-":confused: :confused: :confused:
 
You must log in or register to reply here.

Similar threads

G
Issue Apache loading files randomly
Replies
8
Views
1K
green3d
G
Dave W
Issue Fail2ban banning the servers IP due to incorrect IP in apache logs
Replies
6
Views
1K
abashurov
abashurov
M
Question Has my site been attacked?
Replies
8
Views
1K
Peter Debik
P
W
Resolved Awstats error refused connetion
Replies
2
Views
1K
WiseWill
W
J
Resolved Default plesk-wordpress fail2ban doesn't work
Replies
4
Views
1K
Mark_NLD
M
Back
Top