title: Server under attack website logs \x80w\x01\x03\x01 and HNAP1 how do I stop bot?
body: <p>I'm on bluehost with a shared server;  mysql  5.5.36 -with an empty database.. Apache 2.2.26, php version 5.4.24, x86_64, linus, perl Can you guys tell me what this means?  My access logs show this unsavory behavior:</p>
  
  <pre><code>[ip]71.63.199.72 [url]HNAP1 [size] 134 [status] 401 [method]GET [protocol] HTTP/1.1 [referring url] My server address
  [ip]71.63.199.72 [url]401 [size] 0 [status] 0 [method]\x80w\x01\x03\x01 [protocol] 162 [referring url] none
  [ip]141.212.121.10 [url]404 [size] 0 [status] 0 [method]\x16\x03\x01
  [protocol] 406 [referring url] none
  </code></pre>
  
  <p>Any help would be appreciated. <strong>How do I stop this?</strong> Is something enticing hackers? I had to password protect directories (don't know if that helps) but I need to take passwords off and make sure this hacker's request are not honored. <strong>1.How do I learn about these request? 2.what is he after? 3. what is it called?</strong></p>
  
  <p>Also, I have cloudflare but this guy seems to bypass them. I have no threats in my cloudflare but the stuff above shows in my sites 'latest visitor logs.' Is that because the hacker has direct server access?  I can follow directions really well if someone will point me the right way.</p>