Cron Job on Directadmin executes after having been deleted

[increase]

1

I deleted all cron Jobs from Directadmin dashboard but a previous old cron Job is still being activated by the Monibot crawler i.e

3.14.66.101 - - [23/Nov/2024:11:03:44 -0500] "GET /2024-2021/Community_Bible_Fellowship_Messages_2022/.index_cron.php HTTP/1.1" 404 3882 "-" "Monibot"

I want to delete this .index_cron.php script completely so that it does not get crawled and executed.

The script .index_cron.php does not appear anywhere in my domain files

[Paul]

3 hours ago, increase said:

1

I deleted all cron Jobs from Directadmin dashboard but a previous old cron Job is still being activated by the Monibot crawler i.e

3.14.66.101 - - [23/Nov/2024:11:03:44 -0500] "GET /2024-2021/Community_Bible_Fellowship_Messages_2022/.index_cron.php HTTP/1.1" 404 3882 "-" "Monibot"

I want to delete this .index_cron.php script completely so that it does not get crawled and executed.

The script .index_cron.php does not appear anywhere in my domain files

Blesta cron jobs are run via CLI. They can be run via web, but that URL would never trigger it, and a secret key is typically configured under Settings > System > Automation. You can set a secret key here to ensure that no bot can run the cron, but that HTTP request isn't running it now. Your request returned a 404 error. Since it returned a 404 error, the file does not exist, which is why you cannot find it. No such file is part of Blesta.

[increase]

5 hours ago, Paul said:

Blesta cron jobs are run via CLI. They can be run via web, but that URL would never trigger it, and a secret key is typically configured under Settings > System > Automation. You can set a secret key here to ensure that no bot can run the cron, but that HTTP request isn't running it now. Your request returned a 404 error. Since it returned a 404 error, the file does not exist, which is why you cannot find it. No such file is part of Blesta.

Thanks Paul I see what you are saying. The issue I am having is a mail run script is being triggered without my execution which happened on 23rd but the date on my files connected to the mail run script showed only text file of the email addresses had been executed and there ws no php script executed which led me to the conclusion that a mail script was possibly running from a bot. so since it is not the 

.index_cron.php

file which does not exist I am now stumped as to how I find the culprit I would really appreciate your thoughts on this.

[Paul]

On 11/24/2024 at 12:32 AM, increase said:

Thanks Paul I see what you are saying. The issue I am having is a mail run script is being triggered without my execution which happened on 23rd but the date on my files connected to the mail run script showed only text file of the email addresses had been executed and there ws no php script executed which led me to the conclusion that a mail script was possibly running from a bot. so since it is not the 

.index_cron.php

file which does not exist I am now stumped as to how I find the culprit I would really appreciate your thoughts on this.

What is a mail run script? This sounds unrelated to Blesta. If it's Blesta related, more details would be necessary. None of the PHP files you've mentioned are part of Blesta. Blesta does not include any index_cron.php file. If you think the Blesta cron is being executed via the web for some reason, visit Settings > System > Automation and set or change your cron key. The Blesta cron cannot be run if the correct key isn't included in the http request.