Is this a Attack on my ISPConfig?

Discussion in 'ISPConfig 3 Priority Support' started by ktownmods, Jul 28, 2019.

  1. ktownmods

    ktownmods Member HowtoForge Supporter

    Hey, this is in my nginx error.log:


    Code:
    2019/07/27 19:17:29 [error] 30734#30734: *8073 open() "/usr/local/ispconfig/interface/web/manager/html" failed (2: No such file or directory), client: 1.214.xxx.18, server: _, request: "GET /manager/html HTTP/1.1", host: "5.9.xxx.xxx:8080"
    2019/07/27 19:17:29 [error] 30734#30734: *8073 open() "/usr/local/ispconfig/interface/web/manager/html" failed (2: No such file or directory), client: 1.214.xxx.18, server: _, request: "GET /manager/html HTTP/1.1", host: "5.9.xxx.xxx:8080"
    2019/07/28 10:58:24 [error] 2865#2865: *5971 "/usr/local/ispconfig/interface/web/admin/connection/index.php" is not found (2: No such file or directory), client: 172.104.xxx.204, server: _, request: "GET /admin/connection/ HTTP/1.1", host: "5.9.xxx.xxx:8080", referrer: "http://5.9.xxx.xxx:8080/admin/connection/"
    
    The client ip is not my ip, and after check if these files under /usr/local/ispconfig exist, i see i doesnt exist
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    This might be a bot that tries to find out which software is run on that server, but I won't call it an attack, such things happen all the time on servers that are connected to the internet and the directories that get accessed do not exist on an ISPConfig server, so it's not an attempt to connect to ISPConfig.
     
  3. ktownmods

    ktownmods Member HowtoForge Supporter

    So i can save ignore this?
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    yes
     
    ktownmods likes this.

Share This Page