Block multiple 404 attempts

1 post Page 1 of 1
iodisciple
Junior Member
Posts: 33
Joined: 09 Jan 2018, 12:52


Hi,

These are plaguing my logs for for a couple of days now, from multiple IPs:
Code: Select all
47.90.102.190 - - [25/May/2018:06:42:42 +0200] "GET /db/index.php HTTP/1.1" 404 169 "-" "Mozilla/5.0"
47.90.102.190 - - [25/May/2018:06:42:42 +0200] "GET /admin/index.php HTTP/1.1" 404 169 "-" "Mozilla/5.0"
47.90.102.190 - - [25/May/2018:06:42:42 +0200] "GET /mysql/index.php HTTP/1.1" 404 169 "-" "Mozilla/5.0"
47.90.102.190 - - [25/May/2018:06:42:41 +0200] "GET /pmamy2/index.php HTTP/1.1" 404 169 "-" "Mozilla/5.0"
47.90.102.190 - - [25/May/2018:06:42:41 +0200] "GET /pmamy/index.php HTTP/1.1" 404 169 "-" "Mozilla/5.0"
47.90.102.190 - - [25/May/2018:06:42:41 +0200] "GET /PMA2/index.php HTTP/1.1" 404 169 "-" "Mozilla/5.0"
47.90.102.190 - - [25/May/2018:06:42:41 +0200] "GET /PMA/index.php HTTP/1.1" 404 169 "-" "Mozilla/5.0"
47.90.102.190 - - [25/May/2018:06:42:40 +0200] "GET /pma/index.php HTTP/1.1" 404 169 "-" "Mozilla/5.0"
47.90.102.190 - - [25/May/2018:06:42:40 +0200] "GET /pmd/index.php HTTP/1.1" 404 169 "-" "Mozilla/5.0"
47.90.102.190 - - [25/May/2018:06:42:40 +0200] "GET /phpMyAdmin/index.php HTTP/1.1" 404 169 "-" "Mozilla/5.0"
47.90.102.190 - - [25/May/2018:06:42:39 +0200] "GET /phpmyadmin/index.php HTTP/1.1" 404 169 "-" "Mozilla/5.0"
47.90.102.190 - - [25/May/2018:06:42:39 +0200] "GET /index.php HTTP/1.1" 404 169 "-" "Mozilla/5.0"
How can I automatically block these attempts? Do I need a custom regex?

(and if so, anybody some pointers how it should look, because I tried already with a couple of Nginx ones found on this site, but they don't hit).
1 post Page 1 of 1