Facebook
Twitter- Server operating system version
- Debian 12.11
- Plesk version and microupdate number
- 18.0.71 Update 2
At intervals of approximately 30 minutes, the following entry is recorded in the Action Log:
According to the official Plesk 360 documentation, this IP address belongs to Plesk 360 servers:
360 FAQ - Documentation
The connection originates from a trusted source but is registered by the system as a failed login attempt. This leads to a continuous increase of irrelevant log entries and, in combination with Fail2Ban, can result in blocking the IP unless it is placed on a whitelist.
Clarification of this behavior and the provision of either a fix or a configuration option is required to prevent unnecessary log entries and false blocks.
This issue has only started occurring recently. Previously, connections from the Plesk 360 IP were not logged as failed login attempts.
Code:
2025-08-09 15:08:18 ERR panel [Action Log] Failed login attempt with login '<invalid>' from IP 34.254.37.129According to the official Plesk 360 documentation, this IP address belongs to Plesk 360 servers:
360 FAQ - Documentation
The connection originates from a trusted source but is registered by the system as a failed login attempt. This leads to a continuous increase of irrelevant log entries and, in combination with Fail2Ban, can result in blocking the IP unless it is placed on a whitelist.
Clarification of this behavior and the provision of either a fix or a configuration option is required to prevent unnecessary log entries and false blocks.
This issue has only started occurring recently. Previously, connections from the Plesk 360 IP were not logged as failed login attempts.
