Just got a new VPS with two IPs. I'm getting a tonne of requests from multiple different client IPs for a single path on one of the IPs, almost one per second. The path is "/lzb/gz.php". Any ideas what this is? And should I be concerned? Should I request a new IP from my VPS provider, or just hope the volume dies down over time?
FYI I'm running nginx as a reverse proxy to apache2. The VPS came with apache2 running, and the requests for "/lzb/gz.php" started immediately after purchase according to the apache2 logs. When I turned on nginx, the requests started to appear in the nginx logs. I'm pretty sure the requests are confined to one of the two IP's because I have unique access and error logs set up for a vhost that I've tried on both IPs, and the requests only show up in those logs when the vhost listens on the IP address in question. Both apache2 and now nginx return 404's, but I'm still concerned about the volume of requests for the same path and potential security implications.