• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • Support for BIND DNS has been removed from Plesk for Windows due to security and maintenance risks.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS.

IPS calling 404 pages

R

roberto@

Guest
Have a look at the log below. I have many, many ips doing the same connections. r.php x.php etc. etc.

Ideas? Is there a way to keep this traffic out.
It is using 10G month.



------------------------------
89.53.4.112 - - [17/Mar/2006:20:18:12 +0100] "GET /mul.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; snprtz|T05047521810142; FDM)"
202.56.229.71 - - [17/Mar/2006:20:18:12 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)"
67.71.49.160 - - [17/Mar/2006:20:18:12 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
203.53.28.132 - - [17/Mar/2006:20:18:12 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
205.242.208.123 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
^C61.134.39.60 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.0" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
208.62.52.1 - - [17/Mar/2006:20:18:13 +0100] "GET /z.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
80.124.184.2 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
84.141.161.152 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
213.22.163.37 - - [17/Mar/2006:20:18:13 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; FunWebProducts; SV1; Hotbar 4.5.1.0; .NET CLR 1.1.4322)"
209.177.249.58 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; FunWebProducts; .NET CLR 1.1.4322)"
84.144.192.233 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
168.209.98.35 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; InfoPath.1)"
80.252.49.243 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
q172.169.92.47 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)"
81.36.49.242 - - [17/Mar/2006:20:18:14 +0100] "GET /mul.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; .NET CLR 1.1.4322)"
212.15.96.50 - - [17/Mar/2006:20:18:14 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
209.101.45.34 - - [17/Mar/2006:20:18:14 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
213.215.233.162 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
201.31.9.171 - - [17/Mar/2006:20:18:14 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
221.156.149.58 - - [17/Mar/2006:20:18:14 +0100] "GET /444.jpg HTTP/1.1" 404 305 "-" "-"
212.248.78.66 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; .NET CLR 1.1.4322)"
58.104.66.199 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; OptusNetDSL6; FreeprodTB; bgft; .NET CLR 1.1.4322)"
200.189.179.90 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
68.213.176.249 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
200.69.166.189 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
145.236.141.3 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
68.166.101.91 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
67.71.49.160 - - [17/Mar/2006:20:18:15 +0100] "GET /z.php HTTP/1.1" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
194.186.28.108 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
85.176.96.167 - - [17/Mar/2006:20:18:15 +0100] "GET /555.php HTTP/1.1" 404 305 "-" "-"
216.230.150.5 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
85.176.96.167 - - [17/Mar/2006:20:18:15 +0100] "GET /555.php HTTP/1.1" 404 305 "-" "-"
68.236.168.80 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
213.179.228.184 - - [17/Mar/2006:20:18:15 +0100] "GET /444.php HTTP/1.0" 404 343 "-" "-"
195.182.131.252 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
62.202.242.142 - - [17/Mar/2006:20:18:16 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
62.202.242.142 - - [17/Mar/2006:20:18:16 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
200.78.94.225 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
83.115.149.17 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
209.51.183.156 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
85.107.25.223 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
62.128.161.11 - - [17/Mar/2006:20:18:16 +0100] "GET /z.php HTTP/1.0" 404 305 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
88.155.172.162 - - [17/Mar/2006:20:18:16 +0100] "GET /444.jpg HTTP/1.1" 404 305 "-" "-":confused: :confused: :confused:
 
You must log in or register to reply here.

Similar threads

G
Issue Apache loading files randomly
Replies
8
Views
2K
green3d
G
J
Issue Default plesk-apache-badbot fail2ban doesn't work
2
Replies
21
Views
7K
Kaspar
K
T
Question Fail2ban trying to setup a rule to ban ai bots
Replies
4
Views
4K
Bitpalast
Bitpalast
Dave W
Issue Fail2ban banning the servers IP due to incorrect IP in apache logs
Replies
6
Views
2K
abashurov
abashurov
M
Question Has my site been attacked?
Replies
8
Views
2K
Peter Debik
P
Back
Top