The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Error logs useless due to excess spammer/hack attempt entries

Discussion in 'Security' started by Whiskerfish, Jan 12, 2012.

  1. Whiskerfish

    Whiskerfish Registered

    Joined:
    Apr 30, 2011
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    I hope I am in the right place??

    I have been fighting this for a couple of years now. My error logs get filled approximately every 12 hours (sometimes every 10 minutes!) with "File not found" and "client denied by server config" from IP's I have blocked. I know that blocking IP's is frowned upon by most folks "In the know" but I get frustrated when one of the IP's from a third world Country fill the log in 2-3 minutes with attempts to find a way in so I block them. Wasted effort because then I just get the Client denied error instead of the file not found error.

    So my questions are what can I do to reduce this? I know the attacks are going to happen but is there a way to reduce their impact on the error logs so I can get back to chasing broken links and such on my site? Is there a way to block IP's and not have the entries show up in the error logs? Most of these are spammers and do not play by the rules so entries in the robot txt file have been ineffective.

    I am not a huge fan of Mods, but if there is one that would give me some relief without jeopardizing site security I would be interested.

    Here are just a few from this morning and thank you for your time!!


    Code:
    [Thu Jan 12 07:05:01 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/mysql-admin
    [Thu Jan 12 07:05:00 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/mysqladmin
    [Thu Jan 12 07:04:59 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/webdb
    [Thu Jan 12 07:04:59 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/websql
    [Thu Jan 12 07:04:58 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/sqlweb
    [Thu Jan 12 07:04:58 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/webadmin
    [Thu Jan 12 07:04:57 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpmy-admin
    [Thu Jan 12 07:04:56 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/php-myadmin
    [Thu Jan 12 07:04:56 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpmanager
    [Thu Jan 12 07:04:55 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/pma2005
    [Thu Jan 12 07:04:54 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/PMA2005
    [Thu Jan 12 07:04:54 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/p
    [Thu Jan 12 07:04:53 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/mysqlmanager
    [Thu Jan 12 07:04:52 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/sqlmanager
    [Thu Jan 12 07:04:52 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.8.2
    [Thu Jan 12 07:04:51 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.8.1
    [Thu Jan 12 07:04:50 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.8.1-rc1
    [Thu Jan 12 07:04:50 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.8.0.4
    [Thu Jan 12 07:04:49 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.8.0.3
    [Thu Jan 12 07:04:48 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.8.0.2
    [Thu Jan 12 07:04:48 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.8.0.1
    [Thu Jan 12 07:04:47 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.8.0
    [Thu Jan 12 07:04:47 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.8.0-rc2
    [Thu Jan 12 07:04:46 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.8.0-rc1
    [Thu Jan 12 07:04:45 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.8.0-beta1
    [Thu Jan 12 07:04:45 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.7.0
    [Thu Jan 12 07:04:44 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.7.0-pl2
    [Thu Jan 12 07:04:43 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.7.0-pl1
    [Thu Jan 12 07:04:43 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.7.0-rc1
    [Thu Jan 12 07:04:42 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.7.0-beta1
    [Thu Jan 12 07:04:41 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.4
    [Thu Jan 12 07:04:41 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.4-pl4
    [Thu Jan 12 07:04:40 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.4-pl3
    [Thu Jan 12 07:04:39 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.4-pl2
    [Thu Jan 12 07:04:39 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.4-pl1
    [Thu Jan 12 07:04:38 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.4-rc1
    [Thu Jan 12 07:04:38 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.3-pl1
    [Thu Jan 12 07:04:37 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.3
    [Thu Jan 12 07:04:36 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.3-rc1
    [Thu Jan 12 07:04:36 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.3
    [Thu Jan 12 07:04:35 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.2-pl1
    [Thu Jan 12 07:04:34 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.2
    [Thu Jan 12 07:04:34 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.2-rc1
    [Thu Jan 12 07:04:33 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.2-beta1
    [Thu Jan 12 07:04:32 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.2-rc1
    [Thu Jan 12 07:04:32 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.1-pl3
    [Thu Jan 12 07:04:31 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.1-pl2
    [Thu Jan 12 07:04:30 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.1-pl1
    [Thu Jan 12 07:04:30 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.1
    [Thu Jan 12 07:04:29 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.1-rc2
    [Thu Jan 12 07:04:29 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.1-rc1
    [Thu Jan 12 07:04:28 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.0-pl3
    [Thu Jan 12 07:04:27 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.0-pl2
    [Thu Jan 12 07:04:27 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.0-pl1
    [Thu Jan 12 07:04:26 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.0
    [Thu Jan 12 07:04:25 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.0-rc3
    [Thu Jan 12 07:04:25 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.0-rc2
    [Thu Jan 12 07:04:24 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.0-rc1
    [Thu Jan 12 07:04:23 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.0-beta2
    [Thu Jan 12 07:04:23 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.0-beta1
    [Thu Jan 12 07:04:22 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.0-alpha2
    [Thu Jan 12 07:04:22 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.6.0-alpha
    [Thu Jan 12 07:04:21 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.5.7-pl1
    [Thu Jan 12 07:04:20 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.5.7
    [Thu Jan 12 07:04:20 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.5.6
    [Thu Jan 12 07:04:19 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.5.6-rc2
    [Thu Jan 12 07:04:18 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.5.6-rc1
    [Thu Jan 12 07:04:18 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.5.5-pl1
    [Thu Jan 12 07:04:17 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.5.5
    [Thu Jan 12 07:04:16 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.5.5-rc2
    [Thu Jan 12 07:04:16 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.5.5-rc1
    [Thu Jan 12 07:04:15 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.5.4
    [Thu Jan 12 07:04:15 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.5.1
    [Thu Jan 12 07:04:14 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.2.6
    [Thu Jan 12 07:04:13 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2.2.3
    [Thu Jan 12 07:04:13 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/php-my-admin
    [Thu Jan 12 07:04:12 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin-2
    [Thu Jan 12 07:04:11 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin
    [Thu Jan 12 07:04:11 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpmyadmin
    [Thu Jan 12 07:04:10 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/websql
    [Thu Jan 12 07:04:09 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/php-my-admin
    [Thu Jan 12 07:04:09 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/web
    [Thu Jan 12 07:04:08 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/xampp
    [Thu Jan 12 07:04:07 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/web
    [Thu Jan 12 07:04:07 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/pma
    [Thu Jan 12 07:04:06 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpmyadmin2
    [Thu Jan 12 07:04:06 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpmyadmin1
    [Thu Jan 12 07:04:05 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpmyadmin
    [Thu Jan 12 07:04:04 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpMyAdmin
    [Thu Jan 12 07:04:04 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/phpadmin
    [Thu Jan 12 07:04:03 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/typo3
    [Thu Jan 12 07:04:02 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/mysqladmin
    [Thu Jan 12 07:04:02 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/mysql
    [Thu Jan 12 07:04:01 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/myadmin
    [Thu Jan 12 07:04:00 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/dbadmin
    [Thu Jan 12 07:04:00 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/db
    [Thu Jan 12 07:03:59 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/admin/phpmyadmin
    [Thu Jan 12 07:03:58 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/admin/pma
    [Thu Jan 12 07:03:58 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/admin/scripts
    [Thu Jan 12 07:03:57 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/scripts
    [Thu Jan 12 07:03:56 2012] [error] [client 221.174.50.139] client denied by server configuration: /home/newngw/public_html/w00tw00t.at.blackhats.romanian.anti-sec
    [Thu Jan 12 06:59:52 2012] [error] [client 117.241.249.180] File does not exist: /home/newngw/public_html/api, referer: http://64.131.78.134/api/forum/index.php
    [Thu Jan 12 06:59:51 2012] [error] [client 117.241.249.180] File does not exist: /home/newngw/public_html/recaptcha, referer: NGW Club--Goldwing Forums
    [Thu Jan 12 06:59:49 2012] [error] [client 117.241.249.180] File does not exist: /home/newngw/public_html/ucp.php, referer: NGW Club--Goldwing ForumsUser Control Panel •
    [Thu Jan 12 06:59:48 2012] [error] [client 117.241.249.180] File does not exist: /home/newngw/public_html/ucp.php, referer: NGW Club--Goldwing ForumsUser Control Panel •
    [Thu Jan 12 06:59:46 2012] [error] [client 117.241.249.180] File does not exist: /home/newngw/public_html/api, referer: http://64.131.78.134/api/ucp.php?mod...24697f1ae4b486
    [Thu Jan 12 06:59:44 2012] [error] [client 117.241.249.180] File does not exist: /home/newngw/public_html/recaptcha, referer: http://64.131.78.134/recaptcha/api/u...24697f1ae4b486
    [Thu Jan 12 06:59:42 2012] [error] [client 117.241.249.180] File does not exist: /home/newngw/public_html/api, referer: http://64.131.78.134/api/ucp.php?mod...24697f1ae4b486
    [Thu Jan 12 06:59:41 2012] [error] [client 117.241.249.180] File does not exist: /home/newngw/public_html/recaptcha, referer: http://64.131.78.134/recaptcha/api/u...24697f1ae4b486
    [Thu Jan 12 06:59:39 2012] [error] [client 117.241.249.180] File does not exist: /home/newngw/public_html/api, referer: http://64.131.78.134/api/ucp.php?mod...24697f1ae4b486
    [Thu Jan 12 06:59:37 2012] [error] [client 117.241.249.180] File does not exist: /home/newngw/public_html/recaptcha, referer: http://64.131.78.134/recaptcha/api/u...24697f1ae4b486
    [Thu Jan 12 06:59:35 2012] [error] [client 117.241.249.180] File does not exist: /home/newngw/public_html/ucp.php, referer: NGW Club--Goldwing ForumsUser Control Panel •
    [Thu Jan 12 06:59:33 2012] [error] [client 117.241.249.180] File does not exist: /home/newngw/public_html/recaptcha, referer: NGW Club--Goldwing ForumsUser Control Panel •
     
  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,470
    Likes Received:
    198
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Do you have CSF installed on the server? There are settings for exactly this in it.
     
  3. Whiskerfish

    Whiskerfish Registered

    Joined:
    Apr 30, 2011
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    No I do not. I will take a hard look at that. TY!
     
Loading...

Share This Page