1
I’m getting thousands of connections from this IP on my VPS IP:
51.15.76.184 - - [17 / Dec / 2017: 16: 31: 17 -0200] "CONNECT portal.geniptv.com:8080 HTTP / 1.1" 400 172 "-" "-
The connection is already blocked (error 400), but my access.log file in /var/log/Nginx is getting gigabytes of size per day.
How and where I stop logging this IP above specifically?
My site is Debian 8 with Ispconfig 3.1 and Nginx.
Thank you very much in advance
Dear Valdeir, Thank you very much for your reply. I added the code block both in the /etc/Nginx/sites-available/default and in the /etc/Nginx/Nginx.conf and still log in. What should I do?
– Ricardo Wagner Arouxa
You are restarting the server?
sudo nginx -s reload
– Valdeir Psr
Dear Valdeir, Good and thank you very much for the reply. I restarted the server and put that block of code but still kept getting thousands of hits per hour. What you solved was a recommendation from my veesp.com VPS server that told me there’s no way to block logging from a specific IP, but that I could ban the IP in iptables. I did the step below and now stopped logging in.
iptables -A INPUT -s 51.15.76.184/32 -i eth0 -j DROP
If anyone else has this problem, this is the solution– Ricardo Wagner Arouxa