Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

How can I see the access logs of a Plesk server on Windows. I have 3 domains that have malware and I want to see if this was an FTP or control panel password exploit.

share|improve this question

closed as off-topic by HopelessN00b Jan 14 at 8:45

  • This question does not appear to be about server, networking, or related infrastructure administration within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

You marked my answer as correct. Which of the three options I presented you helped you find the problem? – Eugene van der Merwe Feb 12 '13 at 5:58
This question appears to be off-topic because it is about working with a service provider's management interface, such as cPanel. – HopelessN00b Jan 14 at 8:45

1 Answer 1

up vote 1 down vote accepted

For the FTP log file location, assuming you are using Windows 2003, see diagram A. FTP Log File Location. This was obtained by going to Start menu / All Programs, Internet Information Services (IIS) Manager, and then navigating further with the mouse as per the diagram.A. FTP Log File Location

For the Panel log file location, see diagram B. Plesk 9.5 Panel Log File Location. enter image description here

You might be going about this in the wrong way. Your starting point should be your anti-virus log file. Most exploits will be picked up with a good anti-virus. This log file will be easier to interpret as it will have some dates and block notifications. It will also highlight which exploit is running allowing you to see research about the exploit and how it spreads. What does your anti-virus log file say?

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.