Results 1 to 14 of 14
  1. #1
    TheGooner's Avatar
    TheGooner is offline Private Member
    Join Date
    March 2007
    Location
    New Zealand
    Posts
    4,259
    Thanks
    1,949
    Thanked 4,211 Times in 2,004 Posts

    Default Why do bots visit?

    A thread to discuss the current state of scraping and spamming.

    I'm actively trying to stop scraping, spamming and scamming of our website by blocking bots and hosted servers ... and making some good progress by blocking bots by user agent, and also the IP address ranges of high profile server farms.

    I have a few logging systems on my site - and a few honey pots - that humans would be highly unlikely to reach - but that seem to be good at catching bots. I then log their details and block the ip address, sometimes the server range, and sometimes the user agent.

    Interestingly though when you block these guys, you will then get an entry on the webserver error log each time that they hit ...

    Currently I am seeing :
    - Amazon AWS trying 500 times an hour
    - DediPower (UK) trying 30 times an hour
    - XL Host 10-20 times an hour
    - Various script kiddies looking for Xmlrpc or wp-login

    All up it's over 1000 attempts an hour from unwanted bots / hackers / spammers / scrapers.
    Some of it is possible human traffic using open proxies ...

    Questions :
    1/ Does anyone else monitor this stuff?
    2/ What do you do to combat them?
    3/ What are they actually trying to do?
    4/ Do you block open proxies? They could be people - but usually they're not.

    Main Question :
    What is the rest of the GPWA doing out there to monitor this "bad" traffic and restrict access?

  2. #2
    universal4's Avatar
    universal4 is offline Forum Administrator
    Join Date
    July 2003
    Location
    Courage is being scared to death...and saddling up anyway. John Wayne
    Posts
    28,023
    Thanks
    2,223
    Thanked 7,922 Times in 4,995 Posts

    Default

    I have seen a HUGE increase in the Xmlrpc scanning and those jerkwads looking for wp login pages never slows down

    Like you I have also seen a pretty big spike coming from Amazon, Google and Microsoft cloud servers scanning etc, and when I catch them trying to authenticate on mail servers I file full reports with the isp's. (including server logs) Google and Microsoft act much faster than Amazon.

    Amazon explained to me that because they rotate ip's so much (oops, yep they told me that) that it is much more difficult for them to trace down the scumbags doing the port scans and brute force attempts....(well this is a small white lie since server logs that I provide are always time/date stamped and I am VERY careful about explaining my time zone and they darn sure should know WHO uses an ip at a specific time of a specific day, since that would be logged in their dhcp server). (should I jab here about using static...ok I won't)

    There are obviously quite a handful of countries where filing reports is a waste of time, and it is something I do not suggest most people attempt, it can be quite time consuming, can only be done with proper logs and documentation, and some isp's notify the bad actors who reported them so there have been cases of retaliation.

    Some times the best way to combat some of it is to just block the subnet in the server firewall, and it pretty much stops them at the front door.

    Like you likely feel, I do not like blocking subnets on web servers, but I would certainly consider it if one hit me 500 times in an hour.

    Blocking user agents can work also, but doing so in robots txt is less effective now I think anymore since it is rare that any bad actor bot will pay attention to them no matter what their developers or home web site forums claim, even though this might block many using default installs of bots.

    When using wordpress there are many different plugins to help with auto-blocking scrapers and many many of them that will help with blocking the login attempts, but I have no idea how difficult it would be to write something on an static or database driven site with an html front end.

    In the end I think there are a few different things that the hackers are trying to accomplish.

    #1 They want in so they can boast they got in, put another notch on their list of compromised sites.
    #2 They wanna put pages up (maybe similar to the hackers we discussed here many times)
    #3 They are looking for compromised servers so they can send spam from other ip's that are most likely clean until it is caught and removed
    #4 They want to use the space/ip to server torrents and other illegal files through file-sharing until it is caught and removed
    #5 They want to rent time/space on your server as there is a market for compromised servers (see above reasons)

    Rick
    Universal4

  3. The Following 2 Users Say Thank You to universal4 For This Useful Post:

    -Shay- (14 February 2016), TheGooner (14 February 2016)

  4. #3
    sweetbet's Avatar
    sweetbet is offline Public Member
    Join Date
    November 2012
    Posts
    2,819
    Blog Entries
    5
    Thanks
    898
    Thanked 1,577 Times in 1,088 Posts

  5. The Following User Says Thank You to sweetbet For This Useful Post:

    TheGooner (14 February 2016)

  6. #4
    GCG
    GCG is offline Public Member
    Join Date
    February 2009
    Location
    Not here
    Posts
    1,249
    Thanks
    291
    Thanked 759 Times in 418 Posts

    Default

    if these rogue affiliates (hackers) want to copy your site they will find a way to do it anyway because content sites is what they are after.

    the hackers copy just 2 lines at a time and use an article spinner to reproduce your content over 100-1000s hacked sites.

    your site will have less traffic than before because your #of search queries will drop by the duplicate content penalty.

  7. #5
    Progger's Avatar
    Progger is offline Public Member
    Join Date
    November 2014
    Location
    New Zealand
    Posts
    1,422
    Thanks
    282
    Thanked 931 Times in 584 Posts

    Default

    Wordpress users can use .htaccess to protect wp-admin login page...

    And i found this page in the last days https://signup.tynt.com/account/whos...p/64m1z8hrsl2b

    With a free Tynt account, we can show you detailed information and full statistics about every copy activity on your site and automatically add a link back to your content with every paste
    I dont have tested this service ,but it sounds good.

    regards

  8. The Following User Says Thank You to Progger For This Useful Post:

    TheGooner (14 February 2016)

  9. #6
    TheGooner's Avatar
    TheGooner is offline Private Member
    Join Date
    March 2007
    Location
    New Zealand
    Posts
    4,259
    Thanks
    1,949
    Thanked 4,211 Times in 2,004 Posts

    Default

    Quote Originally Posted by sweetbet View Post
    https://www.cloudflare.com/overview/ might be something worth looking into.
    I note that cloudflare page suggest that Crawlers and bots get through - but I'm sure they are blocking some of the baddies.

    As our site is dynamic (and components change per user depending on page number, visitor origin, and previous activity) I've resisted looking at Cloudflare - as I've always thought that the implementation would be problematic.

    I WILL have to investigate further.

  10. #7
    TheGooner's Avatar
    TheGooner is offline Private Member
    Join Date
    March 2007
    Location
    New Zealand
    Posts
    4,259
    Thanks
    1,949
    Thanked 4,211 Times in 2,004 Posts

    Default

    Ip address 193.201.224.40 is one to block - it seems to be trying all the typical login files / control files for WP, Blogger et al.
    Ukraine based - little value - and cannot be up to legitimate purposes.

    I just blocked the entire server / organisation the other day and have noted that they've tried over 500 different locations on my site in the last week ...

    Here is a snapshot of recent activity ... this all happened in 90 seconds ... all blocked of course ..
    But the "error log shows the range of files attempted ...


    [Mon Feb 29 18:48:33.381210 2016] [access_compat:error] [pid 27368] [client 193.201.224.40:56445] AH01797: client denied by server configuration: /home/goonersg/public_html/themes
    [Mon Feb 29 18:48:33.129437 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:56423] AH01797: client denied by server configuration: /home/goonersg/public_html/core
    [Mon Feb 29 18:48:32.877495 2016] [access_compat:error] [pid 27418] [client 193.201.224.40:56397] AH01797: client denied by server configuration: /home/goonersg/public_html/favicon.ico
    [Mon Feb 29 18:48:32.622245 2016] [access_compat:error] [pid 27394] [client 193.201.224.40:56375] AH01797: client denied by server configuration: /home/goonersg/public_html/images/statusicon
    [Mon Feb 29 18:48:32.367865 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:56352] AH01797: client denied by server configuration: /home/goonersg/public_html/components
    [Mon Feb 29 18:48:32.115233 2016] [access_compat:error] [pid 27417] [client 193.201.224.40:56329] AH01797: client denied by server configuration: /home/goonersg/public_html/images/powered_by.png
    [Mon Feb 29 18:48:31.862224 2016] [access_compat:error] [pid 27369] [client 193.201.224.40:56305] AH01797: client denied by server configuration: /home/goonersg/public_html/htaccess.txt
    [Mon Feb 29 18:48:31.568825 2016] [access_compat:error] [pid 27398] [client 193.201.224.40:56275] AH01797: client denied by server configuration: /home/goonersg/public_html/wp-login.php
    [Mon Feb 29 18:48:31.310254 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:56257] AH01797: client denied by server configuration: /home/goonersg/public_html/xmlrpc.php
    [Mon Feb 29 18:48:31.058996 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:56239] AH01797: client denied by server configuration: /home/goonersg/public_html/
    [Mon Feb 29 18:48:30.805727 2016] [access_compat:error] [pid 27368] [client 193.201.224.40:56219] AH01797: client denied by server configuration: /home/goonersg/public_html/ali.txt
    [Mon Feb 29 18:48:30.554458 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:56201] AH01797: client denied by server configuration: /home/goonersg/public_html/kcfinder
    [Mon Feb 29 18:48:30.302928 2016] [access_compat:error] [pid 27418] [client 193.201.224.40:56182] AH01797: client denied by server configuration: /home/goonersg/public_html/ckeditor
    [Mon Feb 29 18:48:30.046385 2016] [access_compat:error] [pid 27417] [client 193.201.224.40:56164] AH01797: client denied by server configuration: /home/goonersg/public_html/ckeditor
    [Mon Feb 29 18:48:29.795443 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:56137] AH01797: client denied by server configuration: /home/goonersg/public_html/ckeditor
    [Mon Feb 29 18:48:29.544382 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:56120] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:48:29.293813 2016] [access_compat:error] [pid 27418] [client 193.201.224.40:56096] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:48:29.042488 2016] [access_compat:error] [pid 27417] [client 193.201.224.40:56081] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:48:28.788339 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:56060] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:48:28.535825 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:56034] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:48:28.284826 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:56015] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:48:28.033549 2016] [access_compat:error] [pid 27236] [client 193.201.224.40:55997] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:48:27.780610 2016] [access_compat:error] [pid 27418] [client 193.201.224.40:55979] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:48:27.529255 2016] [access_compat:error] [pid 27417] [client 193.201.224.40:55957] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:48:27.275246 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:55930] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:48:27.024111 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:55903] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:48:26.770853 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:55885] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:48:26.517945 2016] [access_compat:error] [pid 27418] [client 193.201.224.40:55852] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:48:26.265949 2016] [access_compat:error] [pid 27417] [client 193.201.224.40:55826] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:48:26.014776 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:55797] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:48:25.752947 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:55768] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:48:25.500745 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:55737] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:48:25.147750 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:55701] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:48:24.896490 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:55662] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/FCKeditor
    [Mon Feb 29 18:48:24.633440 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:55635] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:48:24.334406 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:55599] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:48:24.076201 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:55565] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:48:23.824557 2016] [access_compat:error] [pid 27394] [client 193.201.224.40:55544] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/FCKeditor
    [Mon Feb 29 18:48:23.573641 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:55510] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:48:23.321873 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:55484] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:48:23.069364 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:55449] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:48:22.702388 2016] [access_compat:error] [pid 27369] [client 193.201.224.40:55422] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/FCKeditor
    [Mon Feb 29 18:48:22.451571 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:55393] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:48:22.172673 2016] [access_compat:error] [pid 27394] [client 193.201.224.40:55361] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:48:21.880989 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:55328] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:48:21.630131 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:55307] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:48:21.379104 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:55276] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:48:21.127603 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:55248] AH01797: client denied by server configuration: /home/goonersg/public_html/FCKeditor
    [Mon Feb 29 18:48:20.605995 2016] [access_compat:error] [pid 27369] [client 193.201.224.40:55191] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:48:20.354559 2016] [access_compat:error] [pid 27398] [client 193.201.224.40:55155] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:48:20.090867 2016] [access_compat:error] [pid 27394] [client 193.201.224.40:55128] AH01797: client denied by server configuration: /home/goonersg/public_html/FCKeditor
    [Mon Feb 29 18:48:19.840347 2016] [access_compat:error] [pid 27236] [client 193.201.224.40:55094] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:48:19.589423 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:55066] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:48:19.331696 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:55029] AH01797: client denied by server configuration: /home/goonersg/public_html/FCKeditor
    [Mon Feb 29 18:48:19.066670 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:54997] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:48:18.814923 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:54968] AH01797: client denied by server configuration: /home/goonersg/public_html/FCKeditor
    [Mon Feb 29 18:48:18.563346 2016] [access_compat:error] [pid 27368] [client 193.201.224.40:54939] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:48:18.311873 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:54915] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:48:18.060078 2016] [access_compat:error] [pid 27369] [client 193.201.224.40:54883] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:48:17.800659 2016] [access_compat:error] [pid 27398] [client 193.201.224.40:54854] AH01797: client denied by server configuration: /home/goonersg/public_html/FCKeditor
    [Mon Feb 29 18:48:17.549668 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:54824] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:48:17.298618 2016] [access_compat:error] [pid 27394] [client 193.201.224.40:54792] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:48:17.046300 2016] [access_compat:error] [pid 27236] [client 193.201.224.40:54763] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:48:16.793706 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:54734] AH01797: client denied by server configuration: /home/goonersg/public_html/upload
    [Mon Feb 29 18:48:16.535907 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:54695] AH01797: client denied by server configuration: /home/goonersg/public_html/upload
    [Mon Feb 29 18:48:15.557999 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:54571] AH01797: client denied by server configuration: /home/goonersg/public_html/upload
    [Mon Feb 29 18:48:15.305826 2016] [access_compat:error] [pid 27368] [client 193.201.224.40:54538] AH01797: client denied by server configuration: /home/goonersg/public_html/upload
    [Mon Feb 29 18:48:15.053456 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:54502] AH01797: client denied by server configuration: /home/goonersg/public_html/upload
    [Mon Feb 29 18:48:14.801159 2016] [access_compat:error] [pid 27369] [client 193.201.224.40:54476] AH01797: client denied by server configuration: /home/goonersg/public_html/upload
    [Mon Feb 29 18:48:14.548723 2016] [access_compat:error] [pid 27398] [client 193.201.224.40:54441] AH01797: client denied by server configuration: /home/goonersg/public_html/upload
    [Mon Feb 29 18:48:14.284026 2016] [access_compat:error] [pid 27394] [client 193.201.224.40:54415] AH01797: client denied by server configuration: /home/goonersg/public_html/upload
    [Mon Feb 29 18:48:14.032493 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:54387] AH01797: client denied by server configuration: /home/goonersg/public_html/upload
    [Mon Feb 29 18:48:13.780765 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:54365] AH01797: client denied by server configuration: /home/goonersg/public_html/upload
    [Mon Feb 29 18:48:13.528024 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:54337] AH01797: client denied by server configuration: /home/goonersg/public_html/upload
    [Mon Feb 29 18:48:13.275525 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:54303] AH01797: client denied by server configuration: /home/goonersg/public_html/upload
    [Mon Feb 29 18:48:12.970618 2016] [access_compat:error] [pid 27368] [client 193.201.224.40:54283] AH01797: client denied by server configuration: /home/goonersg/public_html/upload
    [Mon Feb 29 18:48:12.719365 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:54256] AH01797: client denied by server configuration: /home/goonersg/public_html/upload
    [Mon Feb 29 18:48:12.460776 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:54231] AH01797: client denied by server configuration: /home/goonersg/public_html/upload
    [Mon Feb 29 18:48:12.209142 2016] [access_compat:error] [pid 27394] [client 193.201.224.40:54209] AH01797: client denied by server configuration: /home/goonersg/public_html/upload
    [Mon Feb 29 18:48:11.956873 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:54177] AH01797: client denied by server configuration: /home/goonersg/public_html/system
    [Mon Feb 29 18:48:11.703135 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:54160] AH01797: client denied by server configuration: /home/goonersg/public_html/system
    [Mon Feb 29 18:48:11.450422 2016] [access_compat:error] [pid 27317] [client 193.201.224.40:54132] AH01797: client denied by server configuration: /home/goonersg/public_html/system
    [Mon Feb 29 18:48:11.198817 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:54105] AH01797: client denied by server configuration: /home/goonersg/public_html/system
    [Mon Feb 29 18:48:10.947377 2016] [access_compat:error] [pid 27368] [client 193.201.224.40:54074] AH01797: client denied by server configuration: /home/goonersg/public_html/system
    [Mon Feb 29 18:48:10.695695 2016] [access_compat:error] [pid 27395] [client 193.201.224.40:54043] AH01797: client denied by server configuration: /home/goonersg/public_html/system
    [Mon Feb 29 18:48:10.444135 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:54021] AH01797: client denied by server configuration: /home/goonersg/public_html/system
    [Mon Feb 29 18:48:10.192551 2016] [access_compat:error] [pid 27390] [client 193.201.224.40:53995] AH01797: client denied by server configuration: /home/goonersg/public_html/system
    [Mon Feb 29 18:48:09.940172 2016] [access_compat:error] [pid 27394] [client 193.201.224.40:53971] AH01797: client denied by server configuration: /home/goonersg/public_html/sysadmin
    [Mon Feb 29 18:48:09.682350 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:53943] AH01797: client denied by server configuration: /home/goonersg/public_html/sysadmin
    [Mon Feb 29 18:48:09.420541 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:53924] AH01797: client denied by server configuration: /home/goonersg/public_html/sysadmin
    [Mon Feb 29 18:48:09.167716 2016] [access_compat:error] [pid 27390] [client 193.201.224.40:53907] AH01797: client denied by server configuration: /home/goonersg/public_html/sysadmin
    [Mon Feb 29 18:48:08.904906 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:53890] AH01797: client denied by server configuration: /home/goonersg/public_html/sysadmin
    [Mon Feb 29 18:48:08.643510 2016] [access_compat:error] [pid 27394] [client 193.201.224.40:53869] AH01797: client denied by server configuration: /home/goonersg/public_html/sysadmin
    [Mon Feb 29 18:48:08.391727 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:53852] AH01797: client denied by server configuration: /home/goonersg/public_html/sysadmin
    [Mon Feb 29 18:48:08.139057 2016] [access_compat:error] [pid 27395] [client 193.201.224.40:53828] AH01797: client denied by server configuration: /home/goonersg/public_html/sysadmin
    [Mon Feb 29 18:48:07.887513 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:53806] AH01797: client denied by server configuration: /home/goonersg/public_html/scripts
    [Mon Feb 29 18:48:07.631020 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:53789] AH01797: client denied by server configuration: /home/goonersg/public_html/scripts
    [Mon Feb 29 18:48:07.367357 2016] [access_compat:error] [pid 27390] [client 193.201.224.40:53768] AH01797: client denied by server configuration: /home/goonersg/public_html/scripts
    [Mon Feb 29 18:48:07.115635 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:53753] AH01797: client denied by server configuration: /home/goonersg/public_html/scripts
    [Mon Feb 29 18:48:06.863146 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:53726] AH01797: client denied by server configuration: /home/goonersg/public_html/scripts
    [Mon Feb 29 18:48:06.609598 2016] [access_compat:error] [pid 27395] [client 193.201.224.40:53711] AH01797: client denied by server configuration: /home/goonersg/public_html/scripts
    [Mon Feb 29 18:48:06.357079 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:53693] AH01797: client denied by server configuration: /home/goonersg/public_html/scripts
    [Mon Feb 29 18:48:06.062167 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:53667] AH01797: client denied by server configuration: /home/goonersg/public_html/scripts
    [Mon Feb 29 18:48:05.737240 2016] [access_compat:error] [pid 27398] [client 173.208.136.114:53223] AH01797: client denied by server configuration: /home/goonersg/public_html/
    [Mon Feb 29 18:48:05.296695 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:53621] AH01797: client denied by server configuration: /home/goonersg/public_html/manage
    [Mon Feb 29 18:48:05.043842 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:53600] AH01797: client denied by server configuration: /home/goonersg/public_html/manage
    [Mon Feb 29 18:48:04.792436 2016] [access_compat:error] [pid 27394] [client 193.201.224.40:53591] AH01797: client denied by server configuration: /home/goonersg/public_html/manage
    [Mon Feb 29 18:48:04.478680 2016] [access_compat:error] [pid 27395] [client 193.201.224.40:53565] AH01797: client denied by server configuration: /home/goonersg/public_html/manage
    [Mon Feb 29 18:48:04.223601 2016] [access_compat:error] [pid 27369] [client 193.201.224.40:53547] AH01797: client denied by server configuration: /home/goonersg/public_html/manage
    [Mon Feb 29 18:48:03.967309 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:53530] AH01797: client denied by server configuration: /home/goonersg/public_html/manage
    [Mon Feb 29 18:48:03.656132 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:53507] AH01797: client denied by server configuration: /home/goonersg/public_html/manage
    [Mon Feb 29 18:48:03.397592 2016] [access_compat:error] [pid 27398] [client 193.201.224.40:53493] AH01797: client denied by server configuration: /home/goonersg/public_html/manage
    [Mon Feb 29 18:48:03.143158 2016] [access_compat:error] [pid 27390] [client 193.201.224.40:53474] AH01797: client denied by server configuration: /home/goonersg/public_html/js
    [Mon Feb 29 18:48:02.891207 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:53456] AH01797: client denied by server configuration: /home/goonersg/public_html/js
    [Mon Feb 29 18:48:02.639484 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:53432] AH01797: client denied by server configuration: /home/goonersg/public_html/js
    [Mon Feb 29 18:48:02.387856 2016] [access_compat:error] [pid 27369] [client 193.201.224.40:53416] AH01797: client denied by server configuration: /home/goonersg/public_html/js
    [Mon Feb 29 18:48:02.133145 2016] [access_compat:error] [pid 27317] [client 193.201.224.40:53397] AH01797: client denied by server configuration: /home/goonersg/public_html/js
    [Mon Feb 29 18:48:01.881198 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:53385] AH01797: client denied by server configuration: /home/goonersg/public_html/js
    [Mon Feb 29 18:48:01.628135 2016] [access_compat:error] [pid 27399] [client 193.201.224.40:53368] AH01797: client denied by server configuration: /home/goonersg/public_html/js
    [Mon Feb 29 18:48:01.374895 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:53352] AH01797: client denied by server configuration: /home/goonersg/public_html/js
    [Mon Feb 29 18:48:01.122092 2016] [access_compat:error] [pid 27390] [client 193.201.224.40:53329] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:48:00.816264 2016] [access_compat:error] [pid 27236] [client 193.201.224.40:53312] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:48:00.558471 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:53293] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:48:00.282206 2016] [access_compat:error] [pid 27369] [client 193.201.224.40:53274] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:48:00.030651 2016] [access_compat:error] [pid 27370] [client 193.201.224.40:53254] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:47:59.779375 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:53228] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:47:59.527160 2016] [access_compat:error] [pid 27398] [client 193.201.224.40:53213] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:47:59.272986 2016] [access_compat:error] [pid 27162] [client 193.201.224.40:53182] AH01797: client denied by server configuration: /home/goonersg/public_html/includes/fckeditor
    [Mon Feb 29 18:47:59.020276 2016] [access_compat:error] [pid 27390] [client 193.201.224.40:53162] AH01797: client denied by server configuration: /home/goonersg/public_html/include
    [Mon Feb 29 18:47:58.767996 2016] [access_compat:error] [pid 27236] [client 193.201.224.40:53142] AH01797: client denied by server configuration: /home/goonersg/public_html/include
    [Mon Feb 29 18:47:58.491492 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:53124] AH01797: client denied by server configuration: /home/goonersg/public_html/include
    [Mon Feb 29 18:47:58.220917 2016] [access_compat:error] [pid 27396] [client 193.201.224.40:53105] AH01797: client denied by server configuration: /home/goonersg/public_html/include
    [Mon Feb 29 18:47:57.956887 2016] [access_compat:error] [pid 27369] [client 193.201.224.40:53086] AH01797: client denied by server configuration: /home/goonersg/public_html/include
    [Mon Feb 29 18:47:57.696930 2016] [access_compat:error] [pid 27370] [client 193.201.224.40:53065] AH01797: client denied by server configuration: /home/goonersg/public_html/include
    [Mon Feb 29 18:47:57.445174 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:53046] AH01797: client denied by server configuration: /home/goonersg/public_html/include
    [Mon Feb 29 18:47:57.193322 2016] [access_compat:error] [pid 27398] [client 193.201.224.40:53022] AH01797: client denied by server configuration: /home/goonersg/public_html/include
    [Mon Feb 29 18:47:56.930623 2016] [access_compat:error] [pid 27162] [client 193.201.224.40:53004] AH01797: client denied by server configuration: /home/goonersg/public_html/inc
    [Mon Feb 29 18:47:56.678132 2016] [access_compat:error] [pid 27390] [client 193.201.224.40:52987] AH01797: client denied by server configuration: /home/goonersg/public_html/inc
    [Mon Feb 29 18:47:56.424693 2016] [access_compat:error] [pid 27236] [client 193.201.224.40:52971] AH01797: client denied by server configuration: /home/goonersg/public_html/inc
    [Mon Feb 29 18:47:56.170468 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:52953] AH01797: client denied by server configuration: /home/goonersg/public_html/inc
    [Mon Feb 29 18:47:55.919223 2016] [access_compat:error] [pid 27396] [client 193.201.224.40:52922] AH01797: client denied by server configuration: /home/goonersg/public_html/inc
    [Mon Feb 29 18:47:55.666076 2016] [access_compat:error] [pid 27369] [client 193.201.224.40:52902] AH01797: client denied by server configuration: /home/goonersg/public_html/inc
    [Mon Feb 29 18:47:55.414774 2016] [access_compat:error] [pid 27370] [client 193.201.224.40:52876] AH01797: client denied by server configuration: /home/goonersg/public_html/inc
    [Mon Feb 29 18:47:55.117172 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:52851] AH01797: client denied by server configuration: /home/goonersg/public_html/inc
    [Mon Feb 29 18:47:54.865331 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:52827] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:54.604524 2016] [access_compat:error] [pid 27398] [client 193.201.224.40:52804] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:54.351295 2016] [access_compat:error] [pid 27162] [client 193.201.224.40:52782] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:54.090535 2016] [access_compat:error] [pid 27236] [client 193.201.224.40:52754] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:53.788614 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:52731] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:53.535253 2016] [access_compat:error] [pid 27396] [client 193.201.224.40:52708] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:53.258377 2016] [access_compat:error] [pid 27370] [client 193.201.224.40:52672] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:53.006151 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:52655] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:52.754745 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:52622] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:52.419584 2016] [access_compat:error] [pid 27398] [client 193.201.224.40:52593] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:52.117322 2016] [access_compat:error] [pid 27390] [client 193.201.224.40:52567] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:51.822520 2016] [access_compat:error] [pid 27397] [client 193.201.224.40:52547] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:51.569316 2016] [access_compat:error] [pid 27396] [client 193.201.224.40:52531] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:51.085941 2016] [access_compat:error] [pid 27399] [client 193.201.224.40:52497] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:50.833741 2016] [access_compat:error] [pid 27398] [client 193.201.224.40:52476] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:50.553844 2016] [access_compat:error] [pid 27391] [client 193.201.224.40:52452] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:50.255979 2016] [access_compat:error] [pid 27390] [client 193.201.224.40:52428] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:49.925190 2016] [access_compat:error] [pid 27391] [client 193.201.224.40:52388] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:49.475157 2016] [access_compat:error] [pid 27390] [client 193.201.224.40:52351] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:49.222694 2016] [access_compat:error] [pid 27391] [client 193.201.224.40:52324] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:48.969402 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:52304] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:48.716474 2016] [access_compat:error] [pid 27390] [client 193.201.224.40:52280] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:48.454911 2016] [access_compat:error] [pid 27368] [client 193.201.224.40:52258] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:48.203842 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:52239] AH01797: client denied by server configuration: /home/goonersg/public_html/images/upload
    [Mon Feb 29 18:47:47.952473 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:52221] AH01797: client denied by server configuration: /home/goonersg/public_html/fckimg
    [Mon Feb 29 18:47:47.699827 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:52198] AH01797: client denied by server configuration: /home/goonersg/public_html/fckimg
    [Mon Feb 29 18:47:47.438726 2016] [access_compat:error] [pid 27390] [client 193.201.224.40:52174] AH01797: client denied by server configuration: /home/goonersg/public_html/fckimg
    [Mon Feb 29 18:47:47.185870 2016] [access_compat:error] [pid 27368] [client 193.201.224.40:52146] AH01797: client denied by server configuration: /home/goonersg/public_html/fckimg
    [Mon Feb 29 18:47:46.923262 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:52123] AH01797: client denied by server configuration: /home/goonersg/public_html/fckimg
    [Mon Feb 29 18:47:46.670987 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:52098] AH01797: client denied by server configuration: /home/goonersg/public_html/fckimg
    [Mon Feb 29 18:47:46.416961 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:52078] AH01797: client denied by server configuration: /home/goonersg/public_html/fckimg
    [Mon Feb 29 18:47:46.162193 2016] [access_compat:error] [pid 27368] [client 193.201.224.40:52050] AH01797: client denied by server configuration: /home/goonersg/public_html/fckimg
    [Mon Feb 29 18:47:45.769837 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:52006] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:47:45.396451 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:51970] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:47:44.928147 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:51923] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:47:44.676097 2016] [access_compat:error] [pid 27368] [client 193.201.224.40:51890] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:47:44.423923 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:51868] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:47:44.170840 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:51847] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:47:43.919399 2016] [access_compat:error] [pid 27370] [client 193.201.224.40:51820] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:47:43.667465 2016] [access_compat:error] [pid 27317] [client 193.201.224.40:51796] AH01797: client denied by server configuration: /home/goonersg/public_html/fckeditor
    [Mon Feb 29 18:47:43.414487 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:51768] AH01797: client denied by server configuration: /home/goonersg/public_html/***
    [Mon Feb 29 18:47:43.162720 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:51739] AH01797: client denied by server configuration: /home/goonersg/public_html/***
    [Mon Feb 29 18:47:42.910954 2016] [access_compat:error] [pid 27236] [client 193.201.224.40:51709] AH01797: client denied by server configuration: /home/goonersg/public_html/***
    [Mon Feb 29 18:47:42.659500 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:51681] AH01797: client denied by server configuration: /home/goonersg/public_html/***
    [Mon Feb 29 18:47:42.407882 2016] [access_compat:error] [pid 27162] [client 193.201.224.40:51657] AH01797: client denied by server configuration: /home/goonersg/public_html/***
    [Mon Feb 29 18:47:42.155483 2016] [access_compat:error] [pid 27368] [client 193.201.224.40:51633] AH01797: client denied by server configuration: /home/goonersg/public_html/***
    [Mon Feb 29 18:47:41.899940 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:51601] AH01797: client denied by server configuration: /home/goonersg/public_html/***
    [Mon Feb 29 18:47:41.645570 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:51576] AH01797: client denied by server configuration: /home/goonersg/public_html/***
    [Mon Feb 29 18:47:41.393730 2016] [access_compat:error] [pid 27370] [client 193.201.224.40:51546] AH01797: client denied by server configuration: /home/goonersg/public_html/editorold
    [Mon Feb 29 18:47:41.141440 2016] [access_compat:error] [pid 27317] [client 193.201.224.40:51522] AH01797: client denied by server configuration: /home/goonersg/public_html/editorold
    [Mon Feb 29 18:47:40.888929 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:51499] AH01797: client denied by server configuration: /home/goonersg/public_html/editorold
    [Mon Feb 29 18:47:40.637603 2016] [access_compat:error] [pid 27236] [client 193.201.224.40:51468] AH01797: client denied by server configuration: /home/goonersg/public_html/editorold
    [Mon Feb 29 18:47:40.384004 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:51446] AH01797: client denied by server configuration: /home/goonersg/public_html/editorold
    [Mon Feb 29 18:47:40.132313 2016] [access_compat:error] [pid 27162] [client 193.201.224.40:51422] AH01797: client denied by server configuration: /home/goonersg/public_html/editorold
    [Mon Feb 29 18:47:39.879800 2016] [access_compat:error] [pid 27368] [client 193.201.224.40:51394] AH01797: client denied by server configuration: /home/goonersg/public_html/editorold
    [Mon Feb 29 18:47:39.628039 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:51365] AH01797: client denied by server configuration: /home/goonersg/public_html/editorold
    [Mon Feb 29 18:47:39.376456 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:51335] AH01797: client denied by server configuration: /home/goonersg/public_html/editor1
    [Mon Feb 29 18:47:39.124261 2016] [access_compat:error] [pid 27386] [client 193.201.224.40:51315] AH01797: client denied by server configuration: /home/goonersg/public_html/editor1
    [Mon Feb 29 18:47:38.871792 2016] [access_compat:error] [pid 27317] [client 193.201.224.40:51285] AH01797: client denied by server configuration: /home/goonersg/public_html/editor1
    [Mon Feb 29 18:47:38.619846 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:51262] AH01797: client denied by server configuration: /home/goonersg/public_html/editor1
    [Mon Feb 29 18:47:38.364359 2016] [access_compat:error] [pid 27236] [client 193.201.224.40:51238] AH01797: client denied by server configuration: /home/goonersg/public_html/editor1
    [Mon Feb 29 18:47:38.112396 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:51216] AH01797: client denied by server configuration: /home/goonersg/public_html/editor1
    [Mon Feb 29 18:47:37.861293 2016] [access_compat:error] [pid 27162] [client 193.201.224.40:51189] AH01797: client denied by server configuration: /home/goonersg/public_html/editor1
    [Mon Feb 29 18:47:37.606488 2016] [access_compat:error] [pid 27368] [client 193.201.224.40:51173] AH01797: client denied by server configuration: /home/goonersg/public_html/editor1
    [Mon Feb 29 18:47:37.354032 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:51145] AH01797: client denied by server configuration: /home/goonersg/public_html/editor
    [Mon Feb 29 18:47:37.098449 2016] [access_compat:error] [pid 27370] [client 193.201.224.40:51122] AH01797: client denied by server configuration: /home/goonersg/public_html/editor
    [Mon Feb 29 18:47:36.846390 2016] [access_compat:error] [pid 27386] [client 193.201.224.40:51097] AH01797: client denied by server configuration: /home/goonersg/public_html/editor
    [Mon Feb 29 18:47:36.594455 2016] [access_compat:error] [pid 27317] [client 193.201.224.40:51077] AH01797: client denied by server configuration: /home/goonersg/public_html/editor
    [Mon Feb 29 18:47:36.332515 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:51056] AH01797: client denied by server configuration: /home/goonersg/public_html/editor
    [Mon Feb 29 18:47:36.080147 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:51035] AH01797: client denied by server configuration: /home/goonersg/public_html/editor
    [Mon Feb 29 18:47:35.822197 2016] [access_compat:error] [pid 27370] [client 193.201.224.40:51018] AH01797: client denied by server configuration: /home/goonersg/public_html/editor
    [Mon Feb 29 18:47:35.570386 2016] [access_compat:error] [pid 27386] [client 193.201.224.40:50996] AH01797: client denied by server configuration: /home/goonersg/public_html/editor
    [Mon Feb 29 18:47:35.317654 2016] [access_compat:error] [pid 27317] [client 193.201.224.40:50979] AH01797: client denied by server configuration: /home/goonersg/public_html/editor
    [Mon Feb 29 18:47:35.064879 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:50958] AH01797: client denied by server configuration: /home/goonersg/public_html/editor
    [Mon Feb 29 18:47:34.812143 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:50941] AH01797: client denied by server configuration: /home/goonersg/public_html/editor
    [Mon Feb 29 18:47:34.559171 2016] [access_compat:error] [pid 27370] [client 193.201.224.40:50905] AH01797: client denied by server configuration: /home/goonersg/public_html/editor
    [Mon Feb 29 18:47:34.001083 2016] [access_compat:error] [pid 27317] [client 193.201.224.40:50883] AH01797: client denied by server configuration: /home/goonersg/public_html/editor
    [Mon Feb 29 18:47:33.651224 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:50865] AH01797: client denied by server configuration: /home/goonersg/public_html/editor
    [Mon Feb 29 18:47:33.355216 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:50848] AH01797: client denied by server configuration: /home/goonersg/public_html/editor
    [Mon Feb 29 18:47:33.103799 2016] [access_compat:error] [pid 27370] [client 193.201.224.40:50830] AH01797: client denied by server configuration: /home/goonersg/public_html/editor
    [Mon Feb 29 18:47:32.852489 2016] [access_compat:error] [pid 27317] [client 193.201.224.40:50815] AH01797: client denied by server configuration: /home/goonersg/public_html/common
    [Mon Feb 29 18:47:32.599313 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:50799] AH01797: client denied by server configuration: /home/goonersg/public_html/common
    [Mon Feb 29 18:47:32.340093 2016] [access_compat:error] [pid 27162] [client 193.201.224.40:50773] AH01797: client denied by server configuration: /home/goonersg/public_html/common
    [Mon Feb 29 18:47:32.075864 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:50755] AH01797: client denied by server configuration: /home/goonersg/public_html/common
    [Mon Feb 29 18:47:31.823910 2016] [access_compat:error] [pid 27236] [client 193.201.224.40:50741] AH01797: client denied by server configuration: /home/goonersg/public_html/common
    [Mon Feb 29 18:47:31.572137 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:50724] AH01797: client denied by server configuration: /home/goonersg/public_html/common
    [Mon Feb 29 18:47:31.319895 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:50705] AH01797: client denied by server configuration: /home/goonersg/public_html/common
    [Mon Feb 29 18:47:31.067787 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:50680] AH01797: client denied by server configuration: /home/goonersg/public_html/common
    [Mon Feb 29 18:47:30.815719 2016] [access_compat:error] [pid 27370] [client 193.201.224.40:50656] AH01797: client denied by server configuration: /home/goonersg/public_html/ckeditor
    [Mon Feb 29 18:47:30.563210 2016] [access_compat:error] [pid 27317] [client 193.201.224.40:50637] AH01797: client denied by server configuration: /home/goonersg/public_html/ckeditor
    [Mon Feb 29 18:47:30.304260 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:50618] AH01797: client denied by server configuration: /home/goonersg/public_html/ckeditor
    [Mon Feb 29 18:47:30.051969 2016] [access_compat:error] [pid 27162] [client 193.201.224.40:50601] AH01797: client denied by server configuration: /home/goonersg/public_html/ckeditor
    [Mon Feb 29 18:47:29.788161 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:50575] AH01797: client denied by server configuration: /home/goonersg/public_html/ckeditor
    [Mon Feb 29 18:47:29.529122 2016] [access_compat:error] [pid 27236] [client 193.201.224.40:50553] AH01797: client denied by server configuration: /home/goonersg/public_html/ckeditor
    [Mon Feb 29 18:47:29.273931 2016] [access_compat:error] [pid 27368] [client 193.201.224.40:50536] AH01797: client denied by server configuration: /home/goonersg/public_html/ckeditor
    [Mon Feb 29 18:47:29.022799 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:50513] AH01797: client denied by server configuration: /home/goonersg/public_html/ckeditor
    [Mon Feb 29 18:47:28.771058 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:50497] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:47:28.518394 2016] [access_compat:error] [pid 27370] [client 193.201.224.40:50482] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:47:28.266978 2016] [access_compat:error] [pid 27317] [client 193.201.224.40:50470] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:47:28.013568 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:50451] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:47:27.760843 2016] [access_compat:error] [pid 27361] [client 193.201.224.40:50436] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:47:27.509157 2016] [access_compat:error] [pid 27162] [client 193.201.224.40:50418] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:47:27.256421 2016] [access_compat:error] [pid 27303] [client 193.201.224.40:50390] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:47:27.001088 2016] [access_compat:error] [pid 27236] [client 193.201.224.40:50370] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:47:26.746353 2016] [access_compat:error] [pid 27368] [client 193.201.224.40:50352] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:47:26.493934 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:50338] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:47:26.239058 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:50319] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:47:25.987137 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:50288] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:47:25.727104 2016] [access_compat:error] [pid 27370] [client 193.201.224.40:50268] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:47:25.474614 2016] [access_compat:error] [pid 27333] [client 193.201.224.40:50241] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:47:25.221591 2016] [access_compat:error] [pid 27317] [client 193.201.224.40:50225] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:47:24.957886 2016] [access_compat:error] [pid 27314] [client 193.201.224.40:50196] AH01797: client denied by server configuration: /home/goonersg/public_html/admin
    [Mon Feb 29 18:47:24.703663 2016] [access_compat:error] [pid 27367] [client 193.201.224.40:50184] AH01797: client denied by server configuration: /home/goonersg/public_html/FCKeditor
    [Mon Feb 29 18:47:24.441599 2016] [access_compat:error] [pid 27236] [client 193.201.224.40:50166] AH01797: client denied by server configuration: /home/goonersg/public_html/FCKeditor
    [Mon Feb 29 18:47:24.189857 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:50147] AH01797: client denied by server configuration: /home/goonersg/public_html/FCKeditor
    [Mon Feb 29 18:47:23.936195 2016] [access_compat:error] [pid 27304] [client 193.201.224.40:50130] AH01797: client denied by server configuration: /home/goonersg/public_html/FCKeditor
    [Mon Feb 29 18:47:23.677665 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:50105] AH01797: client denied by server configuration: /home/goonersg/public_html/FCKeditor
    [Mon Feb 29 18:47:23.425442 2016] [access_compat:error] [pid 27369] [client 193.201.224.40:50085] AH01797: client denied by server configuration: /home/goonersg/public_html/FCKeditor
    [Mon Feb 29 18:47:23.173674 2016] [access_compat:error] [pid 27166] [client 193.201.224.40:50072] AH01797: client denied by server configuration: /home/goonersg/public_html/FCKeditor
    [Mon Feb 29 18:47:22.921892 2016] [access_compat:error] [pid 27370] [client 193.201.224.40:50058] AH01797: client denied by server configuration: /home/goonersg/public_html/FCKeditor
    [Mon Feb 29 18:47:22.669939 2016] [access_compat:error] [pid 27333] [client 193.201.224.40:50038] AH01797: client denied by server configuration: /home/goonersg/public_html/***
    [Mon Feb 29 18:47:22.411921 2016] [access_compat:error] [pid 27313] [client 193.201.224.40:50020] AH01797: client denied by server configuration: /home/goonersg/public_html/***
    [Mon Feb 29 18:47:22.158847 2016] [access_compat:error] [pid 27367] [client 193.201.224.40:50004] AH01797: client denied by server configuration: /home/goonersg/public_html/***
    [Mon Feb 29 18:47:21.901465 2016] [access_compat:error] [pid 27366] [client 193.201.224.40:49985] AH01797: client denied by server configuration: /home/goonersg/public_html/***
    [Mon Feb 29 18:47:21.649688 2016] [access_compat:error] [pid 27374] [client 193.201.224.40:49970] AH01797: client denied by server configuration: /home/goonersg/public_html/***
    [Mon Feb 29 18:47:21.392726 2016] [access_compat:error] [pid 27369] [client 193.201.224.40:49949] AH01797: client denied by server configuration: /home/goonersg/public_html/***
    [Mon Feb 29 18:47:21.130763 2016] [access_compat:error] [pid 27371] [client 193.201.224.40:49939] AH01797: client denied by server configuration: /home/goonersg/public_html/***
    [Mon Feb 29 18:47:20.878453 2016] [access_compat:error] [pid 27370] [client 193.201.224.40:49914] AH01797: client denied by server configuration: /home/goonersg/public_html/***

  11. #8
    Progger's Avatar
    Progger is offline Public Member
    Join Date
    November 2014
    Location
    New Zealand
    Posts
    1,422
    Thanks
    282
    Thanked 931 Times in 584 Posts

    Default

    Hi gooner.

    You are not alone, check this http://map.norsecorp.com/#/

    Dont ask my how this page work,i dont know.


    Norse maintains the world’s largest dedicated threat intelligence network. With over eight million sensors that emulate over six thousand applications – from Apple laptops, to ATM machines, to critical infrastructure systems, to closed-circuit TV cameras - the Norse Intelligence Network gathers data on who the attackers are and what they’re after. Norse delivers that data through the Norse Appliance, which pre-emptively blocks attacks and improves your overall security ROI, and the Norse Intelligence Service, which provides professional continuous threat monitoring for large networks.

  12. The Following User Says Thank You to Progger For This Useful Post:

    TheGooner (1 March 2016)

  13. #9
    wonderpunter's Avatar
    wonderpunter is offline Private Member
    Join Date
    August 2013
    Posts
    2,511
    Blog Entries
    5
    Thanks
    402
    Thanked 1,679 Times in 1,007 Posts

    Default

    Quote Originally Posted by TheGooner View Post
    I note that cloudflare page suggest that Crawlers and bots get through - but I'm sure they are blocking some of the baddies.

    As our site is dynamic (and components change per user depending on page number, visitor origin, and previous activity) I've resisted looking at Cloudflare - as I've always thought that the implementation would be problematic.

    I WILL have to investigate further.
    I had quite a lot of trouble with GEO targeting and cloudflare.. it can be done I'm sure but it's more work then always something extra you have to keep checking

  14. #10
    TheGooner's Avatar
    TheGooner is offline Private Member
    Join Date
    March 2007
    Location
    New Zealand
    Posts
    4,259
    Thanks
    1,949
    Thanked 4,211 Times in 2,004 Posts

    Default

    So MANY bots out of China this week - very tempted to implement a country-wide block of their IP addresses.

  15. #11
    Muppet is offline Private Member
    Join Date
    December 2007
    Posts
    575
    Thanks
    165
    Thanked 659 Times in 289 Posts

    Default

    There are many reasons why these bots are all over the web: vulnerability scanning, automated form submissions and/or forum user registration for link spammers, content farm generation, data gathering to resell (think Ahrefs or Majestic SEO), and of course search indexing.

    This will be a never ending battle that you won't win Gooner. It is trivial for bots to change IPs and user agents. I agree with the suggestion of getting a third party to handle it. I won't use Cloudflare after they refused to help or intervene a few years ago when I notified them of several sites that were ripping off my content while hiding behind their service. They are the protection tool of choice for cyber criminals these days - last I looked all the domains used by the hackers that people complain about on here are served from behind Cloudflare and they won't lift a finger to help. There are a lot of similar stories if you search for them.

    Instead we use Incapsula which is a similar service that sits between your web server and the visitor. We originally signed up with them for DDoS protection in the midst of an attack from the Affactive criminals. Aside from that they block unknown bots and scrapers and give you control over which known bots are allowed to access your site. They block them via a variety of methods including javascript challenges that real browsers solve without the user noticing, examination of origin IP addresses, request header discrepancies, and real-time traffic analysis among others. We have similar issues with dynamic content per user and/or country but that is easily solved by setting it up to not cache pages on their CDN (i.e. only cache static content like images). Once you cache static content on their CDN and the bad bots are blocked you will slash the load on your server which will make things faster for your real visitors. I'm happy to provide tips on how to set it up if decide to try them out.

  16. The Following User Says Thank You to Muppet For This Useful Post:

    TheGooner (28 March 2017)

  17. #12
    golfbettingsystem's Avatar
    golfbettingsystem is offline Public Member
    Join Date
    March 2014
    Location
    Bedfordshire
    Posts
    756
    Thanks
    152
    Thanked 374 Times in 262 Posts

    Default

    I guess it's kind of related but some days I'm seeing a massive amount of 'phantom clicks' too, yesterday was a prime example. Easy enough to spot as the numbers are sky-high on programs that they shouldn't be, plus those that report non-unique clicks it sticks out like a sore thumb.

  18. The Following User Says Thank You to golfbettingsystem For This Useful Post:

    TheGooner (28 March 2017)

  19. #13
    TheGooner's Avatar
    TheGooner is offline Private Member
    Join Date
    March 2007
    Location
    New Zealand
    Posts
    4,259
    Thanks
    1,949
    Thanked 4,211 Times in 2,004 Posts

    Default

    Quote Originally Posted by Muppet View Post
    This will be a never ending battle that you won't win Gooner.
    I might not win - but I can try ... I'll have a go first - because it's entertaining to take on the challenge.

    It's taken a bit of research to determine clear user parameters for picking bot traffic (most parameters you mentioned - and we have 12 months of recorded logs) and 5 lines of code to write a test for it combined with a geo-test ...

    Currently Chinese bots that hit my previews end NOW up on the FBI front page ...
    I'm happy with the results after day one ... 400 bots meet the FBI (and give their owners a scare) ...


    ----------------

    I may have go to CDN caching in future ... and I'll drop you a line if that's the case ... thanks!

  20. #14
    wonderpunter's Avatar
    wonderpunter is offline Private Member
    Join Date
    August 2013
    Posts
    2,511
    Blog Entries
    5
    Thanks
    402
    Thanked 1,679 Times in 1,007 Posts

    Default

    I got hit by quite a few yesterday also, USA; China and the phillipines

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •