sometimes i see this in “very secured” servers as well. so check web configs, especially if you takeover the server management from somebody else ;)