Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

How can I see the access logs of a Plesk server on Windows. I have 3 domains that have malware and I want to see if this was an FTP or control panel password exploit.

share|improve this question
    
You marked my answer as correct. Which of the three options I presented you helped you find the problem? –  Eugene van der Merwe Feb 12 '13 at 5:58

1 Answer 1

up vote 1 down vote accepted

For the FTP log file location, assuming you are using Windows 2003, see diagram A. FTP Log File Location. This was obtained by going to Start menu / All Programs, Internet Information Services (IIS) Manager, and then navigating further with the mouse as per the diagram.A. FTP Log File Location

For the Panel log file location, see diagram B. Plesk 9.5 Panel Log File Location. enter image description here

You might be going about this in the wrong way. Your starting point should be your anti-virus log file. Most exploits will be picked up with a good anti-virus. This log file will be easier to interpret as it will have some dates and block notifications. It will also highlight which exploit is running allowing you to see research about the exploit and how it spreads. What does your anti-virus log file say?

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.