Am I under attack?
- Thread starter cap4a
- Start date
tks @Zhenyapan.
i just enabled mod_security.
My IP Block went from 72 to 200 after 24h.
While checking, mod_security blocks google's IP.
124.79.244.110 11/22/2022, 2:33 AM BFM: sshd5=6 (CN/China/110.244.79.124.broad.xw.sh.dynamic.163data.com.cn)
128.116.224.37 11/21/2022, 7:20 PM BFM: sshd4=2 (IT/Italy/128-116-224-37.static.eolo.it)
130.211.54.158 11/24/2022, 6:48 AM BFM: mod_security2=1 (BE/Belgium/158.54.211.130.bc.googleusercontent.com)
132.145.11.125 11/24/2022, 9:30 AM BFM: mod_security2=1 (GB/United Kingdom/-)
Can I ask you something. If it's a google bot, is it bot only accessing by sitemap and scanning post , tag , page URLs .
Why does it appear in the DA server.
And if DA blocks it, will it affect the website's index?
Please guide, thank you very much.
i just enabled mod_security.
My IP Block went from 72 to 200 after 24h.
While checking, mod_security blocks google's IP.
124.79.244.110 11/22/2022, 2:33 AM BFM: sshd5=6 (CN/China/110.244.79.124.broad.xw.sh.dynamic.163data.com.cn)
128.116.224.37 11/21/2022, 7:20 PM BFM: sshd4=2 (IT/Italy/128-116-224-37.static.eolo.it)
130.211.54.158 11/24/2022, 6:48 AM BFM: mod_security2=1 (BE/Belgium/158.54.211.130.bc.googleusercontent.com)
132.145.11.125 11/24/2022, 9:30 AM BFM: mod_security2=1 (GB/United Kingdom/-)
Can I ask you something. If it's a google bot, is it bot only accessing by sitemap and scanning post , tag , page URLs .
Why does it appear in the DA server.
And if DA blocks it, will it affect the website's index?
Please guide, thank you very much.
@cap4a honestly - I don't know, I don't use mod_security - there 300-500 clients per server, I can't tune it for anybody.
you can always grep your logs for this IPs - and you will see what they have done to be blocked, maybe they parsing some login-page, ot this is not a google indexing bots. Check IP whois, it's just hacked VPS:
you can always grep your logs for this IPs - and you will see what they have done to be blocked, maybe they parsing some login-page, ot this is not a google indexing bots. Check IP whois, it's just hacked VPS:
Tks @Zhenyapan very much.
Please tell me about other settings in custombuild to increase security.
Advanced Settings -> ssl_configuration > intermedia.
Will I choose modern for better security?
ClamAV-related Settings Should I enable yes to use?
Mail Settings: I don't use email server.
Is it more secure if I choose no?
Avoid spam mail, right?
Please just me thanks you.
Please tell me about other settings in custombuild to increase security.
Advanced Settings -> ssl_configuration > intermedia.
Will I choose modern for better security?
ClamAV-related Settings Should I enable yes to use?
Mail Settings: I don't use email server.
Is it more secure if I choose no?
Avoid spam mail, right?
Please just me thanks you.