Frequent 404.shtml hits

General
#1

Hi, based on A2 support team; I keep getting a couple of 404 hits every 4hours from a Cloudflare ipv6 requesting /404.shtml
The last records show:
Cloudflare IPv6 /404.shtml mydomain/404.shtml 2022-07-01 23:56:47
Cloudflare IPv6 /404.shtml mydomain/404.shtml 2022-07-01 23:56:47
Cloudflare IPv6 /404.shtml mydomain/404.shtml 2022-07-01 23:56:46

Additionally, I get the following IP hitting 404 every hour 35.208.203.201
/.well-known/sg-hosted-ping 2022-07-01 23:34:49
/.well-known/sg-hosted-ping 2022-07-01 22:33:36
/.well-known/sg-hosted-ping 2022-07-01 21:35:42

Appreciate any helpful advice.

#2

Sounds like SiteGround web hosting service provider :thinking:
Are you a Siteground customer? If so, have you tried contacting them about this so far?

You might have to ask them about this, but it’s quite likely it’s not coming from them.
They could have an idea what that bot is looking for.

I think you see the Cloudflare IP due to not having implemented a way to restore a real visitor IP in the logs as follows from below:

#3

Hi, I moved to A2 hosting a month ago and their technical support does not know the reason for the requests on that file. However, we tried putting the file from an old backup and still the requests and the error remains.

#4

From SiteGround or? Did you contacted SG about this?
Did you used Cloudflare while being a SiteGround customer, if so? Was it their Cloudflare integration for your domain, or your individually registered for an CF account and added your domain to your CF account?

#5

Unfortunately, I am not their customer anymore. When I was hosting with SG I had Cloudflare through their SG integrated dashboard, though I deactivated the function before I transfer my website. Additionally, I logged into the Cloudflare dashboard and removed my domain then transferred my site to the new hosting and added my domain to Cloudflare through the As hosting integrated Cpanel.
We repeated that process of deleting the domain from the Cloudflare dashboard and adding it via A2 twice up til now.

#6

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.