OffTopic: Secure Apache Webserver ...

[erich.wanker]

Hi folks,

i found out, what someone "tests" my apache webserver ... to find a way in ..

Question: is it possible to put a ip-adress AUTOMATICALY on a black list - if the ip adress calls as example 5 or more not existing php files? 

 

.. the "bad guy" tries to find some way into the server

.. wp-config.php, log.php, index.php, user.php, ...  we are talking about hundreds of tries ... and a lot of random stuff...

here is a part of my logfile:

[Wed Dec 04 14:48:14.445360 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:35110] script 'C:/VersatileServer/htdocs/tty.php' not found or unable to stat
[Wed Dec 04 14:48:16.164077 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:35219] script 'C:/VersatileServer/htdocs/ooi.php' not found or unable to stat
[Wed Dec 04 14:48:16.648442 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:35548] script 'C:/VersatileServer/htdocs/aap.php' not found or unable to stat
[Wed Dec 04 14:48:17.148402 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:35625] script 'C:/VersatileServer/htdocs/app.php' not found or unable to stat
[Wed Dec 04 14:48:19.757753 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:35855] script 'C:/VersatileServer/htdocs/bbr.php' not found or unable to stat
[Wed Dec 04 14:48:20.242099 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:36137] script 'C:/VersatileServer/htdocs/ioi.php' not found or unable to stat
[Wed Dec 04 14:48:20.726482 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:36185] script 'C:/VersatileServer/htdocs/uuu.php' not found or unable to stat
[Wed Dec 04 14:48:21.195221 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:36238] script 'C:/VersatileServer/htdocs/yyy.php' not found or unable to stat
[Wed Dec 04 14:48:23.132672 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:36629] script 'C:/VersatileServer/htdocs/shh.php' not found or unable to stat
[Wed Dec 04 14:48:26.976355 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:37263] script 'C:/VersatileServer/htdocs/nnn.php' not found or unable to stat
[Wed Dec 04 14:48:30.491907 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:37352] script 'C:/VersatileServer/htdocs/rrr.php' not found or unable to stat
[Wed Dec 04 14:48:35.366793 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:37902] script 'C:/VersatileServer/htdocs/ttt.php' not found or unable to stat
[Wed Dec 04 14:48:42.351036 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:39357] script 'C:/VersatileServer/htdocs/bbqq.php' not found or unable to stat
[Wed Dec 04 14:48:42.819756 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:39465] script 'C:/VersatileServer/htdocs/tyrant.php' not found or unable to stat
[Wed Dec 04 14:48:46.460329 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:40045] script 'C:/VersatileServer/htdocs/qiqi1.php' not found or unable to stat
[Wed Dec 04 14:48:50.382100 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:40648] script 'C:/VersatileServer/htdocs/bbv.php' not found or unable to stat
[Wed Dec 04 14:48:50.850858 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:40730] script 'C:/VersatileServer/htdocs/605.php' not found or unable to stat
[Wed Dec 04 14:48:51.319618 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:40804] script 'C:/VersatileServer/htdocs/admin1.php' not found or unable to stat
[Wed Dec 04 14:48:51.788336 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:40886] script 'C:/VersatileServer/htdocs/xi.php' not found or unable to stat
[Wed Dec 04 14:48:52.975819 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:40998] script 'C:/VersatileServer/htdocs/999.php' not found or unable to stat
[Wed Dec 04 14:48:54.475788 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:41264] script 'C:/VersatileServer/htdocs/jsc.php' not found or unable to stat
[Wed Dec 04 14:48:54.960153 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:41368] script 'C:/VersatileServer/htdocs/jsc.php.php' not found or unable to stat
[Wed Dec 04 14:48:56.381999 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:41700] script 'C:/VersatileServer/htdocs/jsc.php' not found or unable to stat
[Wed Dec 04 14:48:58.397580 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:41852] script 'C:/VersatileServer/htdocs/11a.php' not found or unable to stat
[Wed Dec 04 14:48:58.850689 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:42099] script 'C:/VersatileServer/htdocs/kkl.php' not found or unable to stat
[Wed Dec 04 14:48:59.288189 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:42211] script 'C:/VersatileServer/htdocs/ks1.php' not found or unable to stat
[Wed Dec 04 14:49:11.850431 2019] [php7:error] [pid 5620:tid 2012] [client [IP of bad guy]:43531] script 'C:/VersatileServer/htdocs/index.php' not found or unable to stat

....

.