• Plesk Uservoice will be deprecated by October. Moving forward, all product feature requests and improvement suggestions will be managed through our new platform Plesk Productboard.
    To continue sharing your ideas and feedback, please visit features.plesk.com

IPS calling 404 pages

R

roberto@

Guest
Have a look at the log below. I have many, many ips doing the same connections. r.php x.php etc. etc.

Ideas? Is there a way to keep this traffic out.
It is using 10G month.



------------------------------
89.53.4.112 - - [17/Mar/2006:20:18:12 +0100] "GET /mul.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; snprtz|T05047521810142; FDM)"
202.56.229.71 - - [17/Mar/2006:20:18:12 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)"
67.71.49.160 - - [17/Mar/2006:20:18:12 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
203.53.28.132 - - [17/Mar/2006:20:18:12 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
205.242.208.123 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
^C61.134.39.60 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.0" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
208.62.52.1 - - [17/Mar/2006:20:18:13 +0100] "GET /z.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
80.124.184.2 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
84.141.161.152 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
213.22.163.37 - - [17/Mar/2006:20:18:13 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; FunWebProducts; SV1; Hotbar 4.5.1.0; .NET CLR 1.1.4322)"
209.177.249.58 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; FunWebProducts; .NET CLR 1.1.4322)"
84.144.192.233 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
168.209.98.35 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; InfoPath.1)"
80.252.49.243 - - [17/Mar/2006:20:18:13 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
q172.169.92.47 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)"
81.36.49.242 - - [17/Mar/2006:20:18:14 +0100] "GET /mul.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; .NET CLR 1.1.4322)"
212.15.96.50 - - [17/Mar/2006:20:18:14 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
209.101.45.34 - - [17/Mar/2006:20:18:14 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
213.215.233.162 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
201.31.9.171 - - [17/Mar/2006:20:18:14 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
221.156.149.58 - - [17/Mar/2006:20:18:14 +0100] "GET /444.jpg HTTP/1.1" 404 305 "-" "-"
212.248.78.66 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; .NET CLR 1.1.4322)"
58.104.66.199 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; OptusNetDSL6; FreeprodTB; bgft; .NET CLR 1.1.4322)"
200.189.179.90 - - [17/Mar/2006:20:18:14 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
68.213.176.249 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
200.69.166.189 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
145.236.141.3 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
68.166.101.91 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
67.71.49.160 - - [17/Mar/2006:20:18:15 +0100] "GET /z.php HTTP/1.1" 404 342 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
194.186.28.108 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
85.176.96.167 - - [17/Mar/2006:20:18:15 +0100] "GET /555.php HTTP/1.1" 404 305 "-" "-"
216.230.150.5 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
85.176.96.167 - - [17/Mar/2006:20:18:15 +0100] "GET /555.php HTTP/1.1" 404 305 "-" "-"
68.236.168.80 - - [17/Mar/2006:20:18:15 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
213.179.228.184 - - [17/Mar/2006:20:18:15 +0100] "GET /444.php HTTP/1.0" 404 343 "-" "-"
195.182.131.252 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
62.202.242.142 - - [17/Mar/2006:20:18:16 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
62.202.242.142 - - [17/Mar/2006:20:18:16 +0100] "GET /z.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
200.78.94.225 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
83.115.149.17 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
209.51.183.156 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.0" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
85.107.25.223 - - [17/Mar/2006:20:18:16 +0100] "GET /r.php HTTP/1.1" 404 343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
62.128.161.11 - - [17/Mar/2006:20:18:16 +0100] "GET /z.php HTTP/1.0" 404 305 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
88.155.172.162 - - [17/Mar/2006:20:18:16 +0100] "GET /444.jpg HTTP/1.1" 404 305 "-" "-":confused: :confused: :confused:
 
You must log in or register to reply here.

Similar threads

G
Issue Apache loading files randomly
Replies
8
Views
3K
green3d
G
J
Issue Default plesk-apache-badbot fail2ban doesn't work
2
Replies
21
Views
8K
Kaspar
K
T
Question Fail2ban trying to setup a rule to ban ai bots
Replies
4
Views
4K
Bitpalast
Bitpalast
Dave W
Issue Fail2ban banning the servers IP due to incorrect IP in apache logs
Replies
6
Views
2K
abashurov
abashurov
M
Question Has my site been attacked?
Replies
8
Views
2K
Peter Debik
P
Back
Top