Re: [users@httpd] Re: How Do I Prevent Repetitive Hits

2022-08-25 Thread John Iliffe
First, thank you to all the folks who replied with possible solutions. This is very much appreciated. Second, we are a very small company with a geographically limited customer base. (Canada) so we would not expect anything coming in from Panama. My concern was/is that if I blacklist an IP,

Re: [users@httpd] How Do I Prevent Repetitive Hits

2022-08-25 Thread John Iliffe
No, it is a physical machine in our office. John On Thu, 2022-08-25 at 21:54 +0530, Deepak Goel wrote: > Is your server on cloud? GCS or AWS? > > > Deepak > "The greatness of a nation can be judged by the way its animals are treated - > Mahatma Gandhi" > > +91 73500 12833 >

RE: [users@httpd] Re: How Do I Prevent Repetitive Hits

2022-08-25 Thread j...@k6ccc.org
On 25/08/2022 17:27, j...@k6ccc.org wrote: > Or add that IP to a blacklist in your router so your Apache server never even > sees it. Then Good Guy asked: > Is this possible if your server is in the cloud platform such as Azure, > GCP, IBM or Oracle? What is needed is a solution to block

[users@httpd] Re: How Do I Prevent Repetitive Hits

2022-08-25 Thread  Good Guy 
On 25/08/2022 20:03, Frank Gingras wrote: Generally speaking, it's a bit rude to hijack someone else's thread. It is not rude to ask a supplement question in someone's thread. I asked a legitimate supplement question and you gave one solution; Paul gave another solution.  Now it remains

Re: [users@httpd] Re: How Do I Prevent Repetitive Hits

2022-08-25 Thread Paul Claridge
I use fail2ban quite successfully. It’s quite scary how many different IP’s are ending up banned. Sent from my iPhone > On 25 Aug 2022, at 20:03, Frank Gingras wrote: > > Generally speaking, it's a bit rude to hijack someone else's thread. > > To answer the new question, there are geoIP

Re: [users@httpd] Re: How Do I Prevent Repetitive Hits

2022-08-25 Thread Frank Gingras
Generally speaking, it's a bit rude to hijack someone else's thread. To answer the new question, there are geoIP modules available that can be combined with authorization, but it is still best to use a firewall to control access to your resources. On Thu, 25 Aug 2022 at 14:40,  Good Guy 

[users@httpd] Re: How Do I Prevent Repetitive Hits

2022-08-25 Thread  Good Guy 
On 25/08/2022 17:27, j...@k6ccc.org wrote: Or add that IP to a blacklist in your router so your Apache server never even sees it. Is this possible if your server is in the cloud platform such as Azure, GCP, IBM or Oracle? What is needed is a solution to block certain IP addresses from

RE: [users@httpd] How Do I Prevent Repetitive Hits

2022-08-25 Thread j...@k6ccc.org
Or add that IP to a blacklist in your router so your Apache server never even sees it. Jim K6CCC -Original Message- From: "John Iliffe" Sent: Thursday, August 25, 2022 09:16 To: "Apache Help" Subject: [users@httpd] How Do I Prevent Repetitive Hits For the last week we have been

Re: [users@httpd] How Do I Prevent Repetitive Hits

2022-08-25 Thread Deepak Goel
Is your server on cloud? GCS or AWS? Deepak "The greatness of a nation can be judged by the way its animals are treated - Mahatma Gandhi" +91 73500 12833 deic...@gmail.com Facebook: https://www.facebook.com/deicool LinkedIn: www.linkedin.com/in/deicool "Plant a Tree, Go Green" Make In India

Re: [users@httpd] How Do I Prevent Repetitive Hits

2022-08-25 Thread Daniel Gruno
On 25/08/2022 18.16, John Iliffe wrote: While it doesn't appear to be causing us any harm I am wondering why someone would spend the time/money to do so and if there is any way to lock out this one source. Does anyone have any suggestions? If you want it completely gone from your logs,

Re: [users@httpd] How Do I Prevent Repetitive Hits

2022-08-25 Thread Jay Townsend
That will be someone probing the site and or a bot, simple way would be to add crowdsec to the server and that will help protect it https://www.crowdsec.net/ On 25 Aug 2022, at 17:17, John Iliffe wrote: For the last week we have been getting hit on average about every 3 seconds by a machine

[users@httpd] How Do I Prevent Repetitive Hits

2022-08-25 Thread John Iliffe
For the last week we have been getting hit on average about every 3 seconds by a machine that appears to be in Panama. There should be no reason why this machine would want to connect to us. 193.29.60.97 - - [25/Aug/2022:12:12:04 -0400] "GET /favicon.ico HTTP/1.1" 200 3262 "-" "Mozilla/5.0