• The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

IPS calling 404 pages

R

roberto@

Guest
Have a look at the log below. I have many, many ips doing the same connections. r.php x.php etc. etc.

Ideas? Is there a way to keep this traffic out.
It is using 10G month.



------------------------------
89.53.4.112 - - [17/Mar/2006:20:18:12 +0100] "GET /mul.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; snprtz|T05047521810142; FDM)"
202.56.229.71 - - [17/Mar/2006:20:18:12 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)"
67.71.49.160 - - [17/Mar/2006:20:18:12 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
203.53.28.132 - - [17/Mar/2006:20:18:12 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
205.242.208.123 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
^C61.134.39.60 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.0" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
208.62.52.1 - - [17/Mar/2006:20:18:13 +0100] "GET /z.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
80.124.184.2 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
84.141.161.152 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
213.22.163.37 - - [17/Mar/2006:20:18:13 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; FunWebProducts; SV1; Hotbar 4.5.1.0; .NET CLR 1.1.4322)"
209.177.249.58 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; FunWebProducts; .NET CLR 1.1.4322)"
84.144.192.233 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
168.209.98.35 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; InfoPath.1)"
80.252.49.243 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
q172.169.92.47 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)"
81.36.49.242 - - [17/Mar/2006:20:18:14 +0100] "GET /mul.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; .NET CLR 1.1.4322)"
212.15.96.50 - - [17/Mar/2006:20:18:14 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
209.101.45.34 - - [17/Mar/2006:20:18:14 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
213.215.233.162 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
201.31.9.171 - - [17/Mar/2006:20:18:14 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
221.156.149.58 - - [17/Mar/2006:20:18:14 +0100] "GET /444.jpg HTTP/1.1" 404 305 "-" "-"
212.248.78.66 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; .NET CLR 1.1.4322)"
58.104.66.199 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; OptusNetDSL6; FreeprodTB; bgft; .NET CLR 1.1.4322)"
200.189.179.90 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
68.213.176.249 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
200.69.166.189 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
145.236.141.3 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
68.166.101.91 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
67.71.49.160 - - [17/Mar/2006:20:18:15 +0100] "GET /z.php HTTP/1.1" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
194.186.28.108 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
85.176.96.167 - - [17/Mar/2006:20:18:15 +0100] "GET /555.php HTTP/1.1" 404 305 "-" "-"
216.230.150.5 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
85.176.96.167 - - [17/Mar/2006:20:18:15 +0100] "GET /555.php HTTP/1.1" 404 305 "-" "-"
68.236.168.80 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
213.179.228.184 - - [17/Mar/2006:20:18:15 +0100] "GET /444.php HTTP/1.0" 404 343 "-" "-"
195.182.131.252 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
62.202.242.142 - - [17/Mar/2006:20:18:16 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
62.202.242.142 - - [17/Mar/2006:20:18:16 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
200.78.94.225 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
83.115.149.17 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
209.51.183.156 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
85.107.25.223 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
62.128.161.11 - - [17/Mar/2006:20:18:16 +0100] "GET /z.php HTTP/1.0" 404 305 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
88.155.172.162 - - [17/Mar/2006:20:18:16 +0100] "GET /444.jpg HTTP/1.1" 404 305 "-" "-":confused: :confused: :confused:
 
You must log in or register to reply here.

Similar threads

G
Issue Apache loading files randomly
Replies
8
Views
2K
green3d
G
J
Issue Default plesk-apache-badbot fail2ban doesn't work
2
Replies
21
Views
6K
Kaspar
K
T
Question Fail2ban trying to setup a rule to ban ai bots
Replies
4
Views
3K
Bitpalast
Bitpalast
Dave W
Issue Fail2ban banning the servers IP due to incorrect IP in apache logs
Replies
6
Views
2K
abashurov
abashurov
M
Question Has my site been attacked?
Replies
8
Views
2K
Peter Debik
P
Back
Top