Resolved Way to block or remove Plesk's screenshot bot from logs

[tomzag]

There should be a way to remove, block or filter out log entries made by Plesk screenshot bot, which now triggers each time a domain is opened in new active view, so latest log entries are then "spammed" by screenshot bot, making it clumsy to get to the actual most recent traffic in logs.

If there is a way to do this, please let me know. Apologies if this has been asked and/or answered already.

 

[Bitpalast]

It should only show up once in a while in logs. Could you please provide an example how spammy your logs look?

 

[tomzag]

You are correct, I am sorry, multiple refreshes and reloads of domain page caused multiple screenshot bot runs - we had some bad behaviour chasing recently so we spent some hectic times in logs. Sorry for wasting your time.

On a side note, does the fix that I saw mentioned later, the one stating a change in panel.ini, removes screenshot bots' entries completely? Thank you!

 

[Kaspar]

On a side note, does the fix that I saw mentioned later, the one stating a change in panel.ini, removes screenshot bots' entries completely? Thank you!

Yes, changing the settings in the panel.ini file as described in the support article here will disable the sreenshots completely.

 

[Dave W]

Have a server being spammed by this bot.

34.249.90.25 - - [21/May/2024:00:52:39 +0100] "GET /wp-content/uploads/2020/09/sport_1.jpg HTTP/1.0" 200 415 "https://wwwxxxxxxxxx.xx/" "Plesk screenshot bot https://support.plesk.com/hc/en-us/articles/10301006946066"
34.249.90.25 - - [21/May/2024:00:52:39 +0100] "GET /wp-content/uploads/2020/09/fami_1.jpg HTTP/1.0" 200 414 "https://wwwxxxxxxxxx.xx/" "Plesk screenshot bot https://support.plesk.com/hc/en-us/articles/10301006946066"
34.249.90.25 - - [21/May/2024:00:52:39 +0100] "GET /wp-content/uploads/2020/09/contact_me.svg HTTP/1.0" 200 421 "https://wwwxxxxxxxxx.xx/" "Plesk screenshot bot https://support.plesk.com/hc/en-us/articles/10301006946066"
34.249.90.25 - - [21/May/2024:00:52:39 +0100] "GET /wp-content/uploads/2020/09/photo_1.svg HTTP/1.0" 200 1217 "https://wwwxxxxxxxxx.xx/" "Plesk screenshot bot https://support.plesk.com/hc/en-us/articles/10301006946066"
34.249.90.25 - - [21/May/2024:00:52:39 +0100] "GET /wp-content/uploads/2020/09/map_1.svg HTTP/1.0" 200 1217 "https://wwwxxxxxxxxx.xx/" "Plesk screenshot bot https://support.plesk.com/hc/en-us/articles/10301006946066"
34.249.90.25 - - [21/May/2024:00:52:39 +0100] "GET /wp-content/uploads/2020/10/file028669-361x240.svg HTTP/1.0" 200 1217 "https://wwwxxxxxxxxx.xx/" "Plesk screenshot bot https://support.plesk.com/hc/en-us/articles/10301006946066"
34.249.90.25 - - [21/May/2024:00:52:39 +0100] "GET /wp-content/uploads/2020/10/file028635-361x240.svg HTTP/1.0" 200 1217 "https://wwwxxxxxxxxx.xx/" "Plesk screenshot bot https://support.plesk.com/hc/en-us/articles/10301006946066"
34.249.90.25 - - [21/May/2024:00:52:39 +0100] "GET /wp-content/uploads/2020/10/file007812-361x535.svg HTTP/1.0" 200 1051 "https://wwwxxxxxxxxx.xx/" "Plesk screenshot bot https://support.plesk.com/hc/en-us/articles/10301006946066"
34.249.90.25 - - [21/May/2024:00:52:39 +0100] "GET /wp-content/uploads/2020/10/Anette.svg HTTP/1.0" 200 932 "https://wwwxxxxxxxxx.xx/" "Plesk screenshot bot https://support.plesk.com/hc/en-us/articles/10301006946066"

Can we confirm this IP is Plesk?

rDNS shows ec2-34-249-90-25.eu-west-1.compute.amazonaws.com.

D.

 

[Bitpalast]

Recently I've seen the same behavior on some domains.