Attack from Microsoft Azure IPs

Artem Smith 0 Reputation points
2024-09-23T10:42:54.38+00:00

Hello,

I have a bunch of servers on linode and all sites/servers are constantly under attack from different Microsoft Azure IPs. How to prevent this ?

Here is a list of IPs I blocked today:

52.138.181.236 52.169.14.240 40.126.235.214

52.138.181.236 - - [23/Sep/2024:10:08:52 +0000] "GET /makeasmtp.php?password-protected=login&redirect_to=http%3A%2F%2Ftheelegancepartyrental.com%2Fmakeasmtp.php HTTP/1.1" 404 4773 "-" "-"
52.138.181.236 - - [23/Sep/2024:10:08:54 +0000] "GET /wp-sigunq.php?password-protected=login&redirect_to=http%3A%2F%2Ftheelegancepartyrental.com%2Fwp-sigunq.php HTTP/1.1" 404 4773 "-" "-"
52.138.181.236 - - [23/Sep/2024:10:08:56 +0000] "GET /wso112233.php?password-protected=login&redirect_to=http%3A%2F%2Ftheelegancepartyrental.com%2Fwso112233.php HTTP/1.1" 404 4773 "-" "-"
52.138.181.236 - - [23/Sep/2024:10:08:58 +0000] "GET /alfanew.php?password-protected=login&redirect_to=http%3A%2F%2Ftheelegancepartyrental.com%2Falfanew.php HTTP/1.1" 404 4767 "-" "-"
52.138.181.236 - - [23/Sep/2024:10:09:01 +0000] "GET /fw.php?password-protected=login&redirect_to=http%3A%2F%2Ftheelegancepartyrental.com%2Ffw.php HTTP/1.1" 404 4752 "-" "-"
52.138.181.236 - - [23/Sep/2024:10:09:03 +0000] "GET /install.php?password-protected=login&redirect_to=http%3A%2F%2Ftheelegancepartyrental.com%2Finstall.php HTTP/1.1" 404 4767 "-" "-"
52.138.181.236 - - [23/Sep/2024:10:09:05 +0000] "GET /wp-login.php HTTP/1.1" 200 5940 "-" "-"
52.138.181.236 - - [23/Sep/2024:10:09:07 +0000] "GET /wp-content/plugins/google-seo-rank/module.php?password-protected=login&redirect_to=http%3A%2F%2Ftheelegancepartyrental.com%2Fwp-content%2Fplugins%2Fgoogle-seo-rank%2Fmodule.php HTTP/1.1" 404 4875 "-" "-"
52.138.181.236 - - [23/Sep/2024:10:09:09 +0000] "GET /chosen.php?password-protected=login&redirect_to=http%3A%2F%2Ftheelegancepartyrental.com%2Fchosen.php HTTP/1.1" 404 4764 "-" "-"
52.138.181.236 - - [23/Sep/2024:10:09:11 +0000] "GET /simple.php?password-protected=login&redirect_to=http%3A%2F%2Ftheelegancepartyrental.com%2Fsimple.php HTTP/1.1" 404 4764 "-" "-"


52.169.14.240 - - [23/Sep/2024:10:26:20 +0000] "GET /wp-activate.php HTTP/1.1" 302 - "-" "-"
52.169.14.240 - - [23/Sep/2024:10:26:23 +0000] "GET /wp-login.php?action=register HTTP/1.1" 302 - "-" "-"
52.169.14.240 - - [23/Sep/2024:10:26:29 +0000] "GET /wp-login.php?registration=disabled HTTP/1.1" 200 5946 "-" "-"
52.169.14.240 - - [23/Sep/2024:10:26:35 +0000] "GET /plugins.php HTTP/1.1" 302 - "-" "-"
52.169.14.240 - - [23/Sep/2024:10:26:42 +0000] "GET /plugins.php?password-protected=login&redirect_to=https%3A%2F%2Fprojectufirst.website%2Fplugins.php HTTP/1.1" 404 3686 "-" "-"
52.169.14.240 - - [23/Sep/2024:10:26:49 +0000] "GET /post.php HTTP/1.1" 302 - "-" "-"
52.169.14.240 - - [23/Sep/2024:10:26:56 +0000] "GET /post.php?password-protected=login&redirect_to=https%3A%2F%2Fprojectufirst.website%2Fpost.php HTTP/1.1" 404 3677 "-" "-"
52.169.14.240 - - [23/Sep/2024:10:27:02 +0000] "GET /admin.php HTTP/1.1" 302 - "-" "-"
52.169.14.240 - - [23/Sep/2024:10:27:07 +0000] "GET /admin.php?password-protected=login&redirect_to=https%3A%2F%2Fprojectufirst.website%2Fadmin.php HTTP/1.1" 404 3680 "-" "-"
52.169.14.240 - - [23/Sep/2024:10:27:12 +0000] "GET /about.php HTTP/1.1" 302 - "-" "-"


40.126.235.214 - - [23/Sep/2024:10:28:44 +0000] "GET /lock.php HTTP/1.1" 404 150440 "-" "-"
40.126.235.214 - - [23/Sep/2024:10:28:45 +0000] "GET /add_class.php HTTP/1.1" 404 150445 "-" "-"
40.126.235.214 - - [23/Sep/2024:10:28:47 +0000] "GET /inputs.php HTTP/1.1" 404 150442 "-" "-"
40.126.235.214 - - [23/Sep/2024:10:28:48 +0000] "GET /contact.php HTTP/1.1" 404 150443 "-" "-"

Why is this happening ?

Not Monitored
Not Monitored
Tag not monitored by Microsoft.
39,234 questions
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.