• Dear Pleskians! The Plesk Forum will be undergoing scheduled maintenance on Monday, 7th of July, at 9:00 AM UTC. The expected maintenance window is 2 hours.
    Thank you in advance for your patience and understanding on the matter.

Question Unauthorized access to psa / admin folder

ChrisCP

Basic Pleskian
Hello everyone,

While looking through the logs I noticed that an unknown IP address tried to access the folder usr / local / psa / admin / htdocs.

The log shows:
Code:
2021/03/07 19:39:39 [error] 1542#0: *303 open() "/usr/local/psa/admin/htdocs/Autodiscover/Autodiscover.xml" failed (2: No such file or directory), client: 45.155.205.225, server: , request: "POST /Autodiscover/Autodiscover.xml HTTP/1.1", host: "x.x.x.x:8443"
2021/03/07 20:41:25 [error] 1542#0: *304 open() "/usr/local/psa/admin/htdocs/api" failed (2: No such file or directory), client: 162.142.125.39, server: , request: "GET /api HTTP/1.1", host: "x.x.x.x:8443"
2021/03/08 12:20:23 [error] 1542#0: *1416 open() "/usr/local/psa/admin/htdocs/Autodiscover/Autodiscover.xml" failed (2: No such file or directory), client: 45.155.205.225, server: , request: "POST /Autodiscover/Autodiscover.xml HTTP/1.1", host: "x.x.x.x:8443"

How can it be that someone has access to these folders?
How can I prevent this?
 
I'm guessing that's normal behavior. /htdocs is likely a web root, so all someone is doing is accessing a url that doesn't exist in it. Not entirely familiar with it's purpose though. Maybe someone else can clarify
 
Back
Top