disable access to forbidden areas

keat63

• March 26, 2015 06:56

Looking in my apache logs i see a failed attempt to open a php file, which doesn't exist. /usr/local/apache/htdocs/testproxy.php I guess some form of hacking attack. Should there not be some sort of security which disables access to /usr/local/apache anyway

• 

  cPanelMichael

  • March 26, 2015 15:46

  Hello, The following directories and files are stored in the /usr/local/apache/htdocs/ directory: 400.shtml 401.shtml 403.shtml 404.shtml 500.shtml cp_errordocument.shtml ea3_apache_build_htdocs index.html suspended.page
  These are all intended for view from the public. Could you elaborate on what in particular you want to limit access to? There should be no need to restrict access to this directory because there are no sensitive files. Thank you.

  0
• 

  keat63

  • March 27, 2015 08:42

  Was a little concerned why someone or something tried to open a PHP file in an area thats not a public_html ? I'm being a little naive maybe, but I have a server, with user accounts, each of which has a domain name asscociated with it. Legitimate traffic would or should be going to the public_html folder of those domains, not somewhere embedded in to the system files ??

  0
• 

  cPanelMichael

  • April 06, 2015 15:21

  It's common to see access attempts to certain file names or directories that do not exist. It's often either a script with an incorrectly coded path, or an attempt to see if a vulnerable file exists. Thank you.

  0

Please sign in to leave a comment.