Am I under attack?

cap4a

New member
Joined
Nov 18, 2022
Messages
10
tks @Zhenyapan.

i just enabled mod_security.
My IP Block went from 72 to 200 after 24h.
While checking, mod_security blocks google's IP.

124.79.244.110 11/22/2022, 2:33 AM BFM: sshd5=6 (CN/China/110.244.79.124.broad.xw.sh.dynamic.163data.com.cn)
128.116.224.37 11/21/2022, 7:20 PM BFM: sshd4=2 (IT/Italy/128-116-224-37.static.eolo.it)
130.211.54.158 11/24/2022, 6:48 AM BFM: mod_security2=1 (BE/Belgium/158.54.211.130.bc.googleusercontent.com)
132.145.11.125 11/24/2022, 9:30 AM BFM: mod_security2=1 (GB/United Kingdom/-)

Can I ask you something. If it's a google bot, is it bot only accessing by sitemap and scanning post , tag , page URLs .
Why does it appear in the DA server.
And if DA blocks it, will it affect the website's index?
Please guide, thank you very much.
 

Zhenyapan

Verified User
Joined
Feb 23, 2018
Messages
1,580
Location
UA
@cap4a honestly - I don't know, I don't use mod_security - there 300-500 clients per server, I can't tune it for anybody.
you can always grep your logs for this IPs - and you will see what they have done to be blocked, maybe they parsing some login-page, ot this is not a google indexing bots. Check IP whois, it's just hacked VPS:
25-11-2022 08-46-05.jpg
 

cap4a

New member
Joined
Nov 18, 2022
Messages
10
Tks @Zhenyapan very much.

Please tell me about other settings in custombuild to increase security.

Advanced Settings -> ssl_configuration > intermedia.
Will I choose modern for better security?

ClamAV-related Settings Should I enable yes to use?

Mail Settings: I don't use email server.
Is it more secure if I choose no?
Avoid spam mail, right?

Please just me thanks you.
 
Top