No, it is a physical machine in our office. John ============ On Thu, 2022-08-25 at 21:54 +0530, Deepak Goel wrote: > Is your server on cloud? GCS or AWS? > > > Deepak > "The greatness of a nation can be judged by the way its animals are treated - > Mahatma Gandhi" > > +91 73500 12833 > deicool@xxxxxxxxx > > Facebook: https://www.facebook.com/deicool > LinkedIn: www.linkedin.com/in/deicool > > "Plant a Tree, Go Green" > > Make In India : http://www.makeinindia.com/home > > > On Thu, Aug 25, 2022 at 9:47 PM John Iliffe <john.iliffe@xxxxxxxxx> wrote: > > For the last week we have been getting hit on average about every 3 seconds > > by a > > machine that appears to be in Panama. There should be no reason why this > > machine would want to connect to us. > > > > 193.29.60.97 - - [25/Aug/2022:12:12:04 -0400] "GET /favicon.ico HTTP/1.1" > > 200 > > 3262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 > > (KHTML, > > like Gecko) Chrome/104.0.5112.102 Safari/537.36" > > 193.29.60.97 - - [25/Aug/2022:12:12:05 -0400] "GET /favicon.ico HTTP/1.1" > > 200 > > 3262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 > > (KHTML, > > like Gecko) Chrome/104.0.5112.102 Safari/537.36" > > 193.29.60.97 - - [25/Aug/2022:12:12:06 -0400] "GET /favicon.ico HTTP/1.1" > > 200 > > 3262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 > > (KHTML, > > like Gecko) Chrome/104.0.5112.102 Safari/537.36" > > 193.29.60.97 - - [25/Aug/2022:12:12:07 -0400] "GET /favicon.ico HTTP/1.1" > > 200 > > 3262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 > > (KHTML, > > like Gecko) Chrome/104.0.5112.102 Safari/537.36" > > 193.29.60.97 - - [25/Aug/2022:12:12:08 -0400] "GET /favicon.ico HTTP/1.1" > > 200 > > 3262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 > > (KHTML, > > like Gecko) Chrome/104.0.5112.102 Safari/537.36" > > 193.29.60.97 - - [25/Aug/2022:12:12:10 -0400] "GET /favicon.ico HTTP/1.1" > > 200 > > 3262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 > > (KHTML, > > like Gecko) Chrome/104.0.5112.102 Safari/537.36" > > 193.29.60.97 - - [25/Aug/2022:12:12:11 -0400] "GET /favicon.ico HTTP/1.1" > > 200 > > 3262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 > > (KHTML, > > like Gecko) Chrome/104.0.5112.102 Safari/537.36" > > 193.29.60.97 - - [25/Aug/2022:12:12:24 -0400] "GET /favicon.ico HTTP/1.1" > > 200 > > 3262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 > > (KHTML, > > like Gecko) Chrome/104.0.5112.102 Safari/537.36" > > 193.29.60.97 - - [25/Aug/2022:12:12:26 -0400] "GET /favicon.ico HTTP/1.1" > > 200 > > 3262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 > > (KHTML, > > like Gecko) Chrome/104.0.5112.102 Safari/537.36" > > 193.29.60.97 - - [25/Aug/2022:12:12:33 -0400] "GET /favicon.ico HTTP/1.1" > > 200 > > 3262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 > > (KHTML, > > like Gecko) Chrome/104.0.5112.102 Safari/537.36" > > > > While it doesn't appear to be causing us any harm I am wondering why someone > > would spend the time/money to do so and if there is any way to lock out this > > one > > source. > > > > Does anyone have any suggestions? > > > > Thanks in advance, > > > > John > > ====== > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx