Ban This Usaepay Log Scraper - 192.198.90.4

Quote

Post by Dhaupin » Mon Jun 08, 2015 11:33 pm

Please make sure your system/logs folder is not public. Then ban this IP 192.198.90.4

Code: Select all

[Mon Jun 08 06:12:06 2015] [error] [client 192.198.90.4] client denied by server configuration: /home/MY-ACCOUNT/public_html/store/system/logs/usaepay_server_debug.txt, referer: http://localhost/usaepay_server.php
[Mon Jun 08 06:12:05 2015] [error] [client 192.198.90.4] client denied by server configuration: /home/MY-ACCOUNT/public_html/store/system/logs/usaepay_server_debug.txt, referer: http://localhost/usaepay_server.php
The operator also brute forces stuff, as seen by the "top pass" password list and the other junk on that IP.

https://creadev.org | support@creadev.org - Opencart Extensions, Integrations, & Development. Made in the USA.

User avatar
Dhaupin
Active Member
Posts
835
Joined
Tue May 13, 2014 3:45 am
Location - PA
Top

Re: Ban This Usaepay Log Scraper - 192.198.90.4

Quote

Post by Cleo » Tue Jun 09, 2015 7:00 pm

He's been visiting my site for some time also!

Code: Select all

[client 192.198.90.4:55781] AH01797: client denied by server configuration: /home/XXXXXXXX/public_html/index.php, referer: http://localhost/usaepay_server.php
[client 192.198.90.4:55781] AH01797: client denied by server configuration: /home/XXXXXXXX/public_html/system/logs/eway_hosted_debug.txt, referer: http://localhost/usaepay_server.php
[client 192.198.90.4:55780] AH01797: client denied by server configuration: /home/XXXXXXXX/public_html/index.php, referer: http://localhost/usaepay_server.php
[client 192.198.90.4:55780] AH01797: client denied by server configuration: /home/XXXXXXXX/public_html/system/logs/eway_hosted_debug.txt, referer: http://localhost/usaepay_server.php
[client 192.198.90.4:62659] AH01797: client denied by server configuration: /home/XXXXXXXX/public_html/index.php, referer: http://localhost/usaepay_server.php
[client 192.198.90.4:62659] AH01797: client denied by server configuration: /home/XXXXXXXX/public_html/system/logs/usaepay_server_debug123.txt, referer: http://localhost/usaepay_server.php
Cleo

Opencart v1.5.4.1 fr/en
Theme: Custom
vqmod-2.6.0
PHP: 7.3 (ea-php73)

User avatar
Cleo
Active Member
Posts
793
Joined
Wed Mar 09, 2011 5:19 am
Top

Re: Ban This Usaepay Log Scraper - 192.198.90.4

Quote

Post by Cleo » Tue Jul 07, 2015 9:44 am

Here's a new one!

Code: Select all

[Mon Jul 06 02:32:35.010617 2015] [access_compat:error] [pid 902038] [client 77.243.189.204:65212] AH01797: client denied by server configuration: /home/XXXXXXXXX/public_html/system/logs/paypointpro_debug.txt, referer: http://localhost/a/a.php
The one above and this one comes about 25/30 times everyday:

Code: Select all

[Mon Jul 06 00:27:38.297213 2015] [access_compat:error] [pid 804633] [client 91.214.202.24:58323] AH01797: client denied by server configuration: /home/XXXXXXXXX/public_html/admin

Opencart v1.5.4.1 fr/en
Theme: Custom
vqmod-2.6.0
PHP: 7.3 (ea-php73)

User avatar
Cleo
Active Member
Posts
793
Joined
Wed Mar 09, 2011 5:19 am
Top
Post Reply
Return to “Security & Server”
Who is online

Users browsing this forum: No registered users and 39 guests