Failed authentication from IP...

[lukas]

Just now I took a look into the Log and saw this:

Apr 05 07:16:57 [2023-04-05 05:16:57.836] [INFO] http - Failed authentication from IP 15.204.173.67
Apr 05 07:17:00 [2023-04-05 05:17:00.302] [INFO] http - Failed authentication from IP 52.58.25.43
Apr 05 07:17:02 [2023-04-05 05:17:02.895] [INFO] http - Failed authentication from IP 39.110.218.101
Apr 05 07:17:19 [2023-04-05 05:17:19.831] [INFO] http - Failed authentication from IP 34.168.250.231
Apr 05 07:18:07 [2023-04-05 05:18:07.809] [INFO] http - Failed authentication from IP 87.157.200.58
Apr 05 07:19:04 [2023-04-05 05:19:04.485] [INFO] http - Failed authentication from IP 51.75.141.254
Apr 05 07:19:04 [2023-04-05 05:19:04.656] [INFO] http - Failed authentication from IP 185.220.100.254
Apr 05 07:19:05 [2023-04-05 05:19:05.387] [INFO] http - Failed authentication from IP 68.183.245.101
Apr 05 07:19:05 [2023-04-05 05:19:05.401] [INFO] http - Failed authentication from IP 172.241.26.87
Apr 05 07:19:07 [2023-04-05 05:19:07.016] [INFO] http - Failed authentication from IP 197.242.159.110
Apr 05 07:39:59 [2023-04-05 05:39:59.508] [INFO] http - Failed authentication from IP 195.74.76.198
Apr 05 07:40:00 [2023-04-05 05:40:00.252] [INFO] http - Failed authentication from IP 65.154.226.168
Apr 05 07:40:03 [2023-04-05 05:40:03.134] [INFO] http - Failed authentication from IP 45.79.116.95
Apr 05 07:40:03 [2023-04-05 05:40:03.171] [INFO] http - Failed authentication from IP 45.79.116.95
Apr 05 07:40:03 [2023-04-05 05:40:03.173] [INFO] http - Failed authentication from IP 45.79.116.95
Apr 05 07:40:03 [2023-04-05 05:40:03.174] [INFO] http - Failed authentication from IP 45.79.116.95
Apr 05 07:40:03 [2023-04-05 05:40:03.177] [INFO] http - Failed authentication from IP 45.79.116.95
Apr 05 07:40:03 [2023-04-05 05:40:03.178] [INFO] http - Failed authentication from IP 45.79.116.95
Apr 05 07:40:03 [2023-04-05 05:40:03.182] [INFO] http - Failed authentication from IP 45.79.116.95
Apr 05 07:40:03 [2023-04-05 05:40:03.184] [INFO] http - Failed authentication from IP 45.79.116.95
Apr 05 07:40:03 [2023-04-05 05:40:03.185] [INFO] http - Failed authentication from IP 45.79.116.95
Apr 05 07:40:03 [2023-04-05 05:40:03.187] [INFO] http - Failed authentication from IP 45.79.116.95
Apr 05 07:40:09 [2023-04-05 05:40:09.131] [INFO] http - Failed authentication from IP 45.79.116.95
Apr 05 07:40:09 [2023-04-05 05:40:09.133] [INFO] http - Failed authentication from IP 45.79.116.95
Apr 05 07:40:09 [2023-04-05 05:40:09.135] [INFO] http - Failed authentication from IP 45.79.116.95
Apr 05 07:40:09 [2023-04-05 05:40:09.138] [INFO] http - Failed authentication from IP 45.79.116.95
Apr 05 07:42:28 [2023-04-05 05:42:28.137] [INFO] http - Failed authentication from IP 205.169.39.246
Apr 05 07:42:32 [2023-04-05 05:42:32.157] [INFO] http - Failed authentication from IP 205.169.39.246
Apr 05 07:48:22 [2023-04-05 05:48:22.633] [INFO] http - Failed authentication from IP 18.204.233.163
Apr 05 07:50:27 [2023-04-05 05:50:27.401] [INFO] http - Failed authentication from IP 87.157.200.58
Apr 05 07:50:37 [2023-04-05 05:50:37.653] [INFO] http - Failed authentication from IP 66.220.149.118
Apr 05 07:50:39 [2023-04-05 05:50:39.257] [INFO] http - Failed authentication from IP 66.220.149.120
Apr 05 07:51:03 [2023-04-05 05:51:03.741] [INFO] http - Failed authentication from IP 173.252.107.12
Apr 05 07:53:00 [2023-04-05 05:53:00.032] [INFO] http - Failed authentication from IP 87.157.200.58

means someone is trying to log in?

[girish]

@lukas looks like that. They are most likely search bots since they appear to come from servers . I use https://www.infobyip.com/ for this to check where the IPs come from.

You can also look into /var/log/nginx/access.log and /var/log/nginx/error.log for those IPs. Sometimes that will have the user agent which tells you the bot name.

If they are search bots, I recommend disabling indexing for the site - https://docs.cloudron.io/apps/#robotstxt . But bots are free to ignore this.

[lukas]

@girish all right, thank you for your tips.
In general, I find your support extremely great, very high quality, thanks for everything!