Weird IP's trying to access 403.shtml

[Chimpie]

I was reviewing my error logs this evening and found the following three IPs trying to repeatedly access .../public_html/403.shtml

• 216.246.7.234

  unknown.hostforweb.com

• 85.214.32.27

  wutang-corp.com

• 216.180.251.146

  faith.hallelujah.com

Thoughts?

[gwyneth]

Well, the good news is that nothing show up at SANS's Storm Center, an invaluable resource for entering IPs to see if they've been in intrusion reports, except for one (1) attempt for the last. That's nothing--intruding IPs are typically reported for thousands of attempts.

Can you tell what page they're trying to access?

[striddy]

Originally Posted by Chimpie

I was reviewing my error logs this evening and found the following three IPs trying to repeatedly access .../public_html/403.shtml
...
Thoughts?

If that's all they are doing, and it's a concern then perhaps block those IP's via cpanel.

Plenty of weirdness happens on the net. No point wearing out the brain cells if no need...