Autodiscover requests

  • Resolved Andy Alcock

    (@hongkongmaritime)


    5 years, 10 months ago

    Hi there. My Wordfence WAF live traffic logs shows hundreds of requests daily for the following:

    Activity Detail
    “Hong Kong, Central District, Hong Kong tried to access non-existent page https://sips.asia/autodiscover/autodiscover.xml”

    I also receive the same autodiscover errors from other offices of our organization.

    I was advised by Siteground domain hosting (and through general internet search) to add the autodiscover URL to ‘Whitelisted 404 URLs’ section, and to whitelist my IP address, which I have done. It makes no difference.

    Has anyone come across this problem and resolved it? If so, any tips please? Apologies if I have not explained it very well. Thanks

Viewing 2 replies - 1 through 2 (of 2 total)
  • wfalaa

    (@wfalaa)

    5 years, 9 months ago

    Hi Andy,

    This “autodiscover.xml” is related to Microsoft Exchange Server, so there are many assumptions one could make here:
    – Perhaps someone is checking a ton of websites to see if Exchange Server is installed on them or not?
    – Or some service was configured to use Exchange Server on your machine back in the past and it’s still misconfigured till now?

    Adding this URL to “Whitelisted 404 URLs” will ignore the IP requesting them from the Rate Limiting Rule, I’m not sure if you want to do that?

    Since this URL doesn’t exist on your site, you can make use of “Immediately block IPs that access these URLs“, using something like /*autodiscover.xml should work in case you want to block this IP address.

    Thanks.

    Thread Starter Andy Alcock

    (@hongkongmaritime)

    5 years, 9 months ago

    Hi there. Thanks for the reply. The blocking seems to work.

    However, I guess that doesn’t really solve the original issue which must be a mis-configuration of Outlook/domain DNS records. Not your problem, of course – just saying.

    Many thanks

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Autodiscover requests’ is closed to new replies.