The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

416.shtml errors

Discussion in 'Security' started by keat63, Sep 27, 2016.

  1. keat63

    keat63 Well-Known Member

    Joined:
    Nov 20, 2014
    Messages:
    765
    Likes Received:
    20
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    I've seen a large number of these Apache errors from a single IP for the first time today.
    Code:
    [Mon Sep 26 11:15:24 2016] [error] [client 86.185.xx.xx] File does not exist: /home/cpanel-acc/public_html/416.shtml, referer: https://www.domain.com/miscellaneous/brushes/7-stiff-hand-brush.html
    [Mon Sep 26 11:15:36 2016] [error] [client 86.185.xx.xx] File does not exist: /home/cpanel-acc/public_html/416.shtml, referer: https://www.domain.com/miscellaneous/brushes/7-stiff-hand-brush.html
    [Mon Sep 26 11:15:41 2016] [error] [client 86.185.xx.xx] File does not exist: /home/cpanel-acc/public_html/416.shtml, referer: https://www.domain.com/miscellaneous/brushes/metal-dust-pan.html
    [Mon Sep 26 11:15:53 2016] [error] [client 86.185.xx.xx] File does not exist: /home/cpanel-acc/public_html/416.shtml, referer: https://www.domain.com/miscellaneous/brushes.html
    
    i've had a quick scour around but am none the wiser what Requested Range Not Satisfiable actually means.
    Because the 416.shtml file didn't exists, it generated errors in Apache logs which in turn blocked the IP in CSF.

    I'm more than happy to remove the newly created 416.shtml file, if the reason was a malicious client, and continue to block.

    Further down the logs I found this from the same 86.185.xx.xx IP
    Code:
    [Mon Sep 26 16:23:38 2016] [error] [client 86.185.xx.xx] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "66.249.xx.xx_8ba7ee7baf185439b4532ff6d673cb715a8d8932"): Internal error [hostname "www.domain.com"] [uri "/js/styles/images/loading.gif"] [unique_id "V@k9etWr3R8AAFTHJDUAAAAA"]
    
    Although reading between the lines, it has reference to another IP 66.249.xx.xx

    86.185.xx.xx appears to be in the UK
    66.249.xx.xx appears to be GoogleBot.

    Could anyone help shed any light please.
     
    #1 keat63, Sep 27, 2016
    Last edited: Sep 27, 2016
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    654
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello,

    The top answer on the following third-party URL explains why this happens:

    416 Requested Range Not Satisfiable

    Thank you.
     

Share This Page