More data they get = More persistent they are The list in the file represent nginx log of IPs that, usually, try to hack into your web server on daily basis. Best way to get rid of those IPs is to whois given IP and use abuse report e-mail while pasting the log information for that IP. Other ways include posting them on sites that warn web administrators of possible attacks originating from those IPs, deploy fail2ban on your site, include them in your firewall list or/and take action against malicious software available to public on github or other sites/through other sources. Also avoid using passwords visible in the post data (at the end of log entry line) and URL schema being accessed. Check your server for any suspicious locations these bots try to access to make sure you are not infected by some malicious software. Some data in the file may still be accidental, like Yandex bot, however, if the IP is too persistent it may mean the owner of that IP should rework their automated tools to implement giving up mechanism, or the site should stop linking to outdated/suspicious resources. You can periodically parse the existing file by your automation tools and get meaningful data for your protection or for spreading up the information so others can get protected. Recommended is to keep old information stored on your end as the log may be flushed every now and then. Giving a credit to the author or/and source is highly appreciated. ~~ Mr_KrzYch00