Question So Many Error in error_log.

[v123shine]

Hello,

When I open error log /var/log/httpd/error_log - I got so many error like this:

[Tue Oct 04 23:26:00.655487 2016] [:error] [pid 21016] [client 163.172.143.0:54402] script '/var/www/vhosts/default/htdocs/xmlrpc.php' not found or unable to stat
[Tue Oct 04 23:26:10.978218 2016] [:error] [pid 20850] [client 163.172.143.0:47684] script '/var/www/vhosts/default/htdocs/xmlrpc.php' not found or unable to stat
[Tue Oct 04 23:26:21.293312 2016] [:error] [pid 20796] [client 163.172.143.0:41268] script '/var/www/vhosts/default/htdocs/xmlrpc.php' not found or unable to stat
[Tue Oct 04 23:26:31.601753 2016] [:error] [pid 20996] [client 163.172.143.0:33252] script '/var/www/vhosts/default/htdocs/xmlrpc.php' not found or unable to stat

And this:

[Wed Oct 05 05:15:00.357644 2016] [ssl:warn] [pid 23572] AH01909: RSA certificate configured for roundcube.webmail:443 does NOT include an ID which matches the server name
[Wed Oct 05 05:15:00.357971 2016] [ssl:warn] [pid 23572] AH01909: RSA certificate configured for roundcube.webmail:443 does NOT include an ID which matches the server name
[Wed Oct 05 05:15:00.358282 2016] [ssl:warn] [pid 23572] AH01909: RSA certificate configured for horde.webmail:443 does NOT include an ID which matches the server name
[Wed Oct 05 05:15:00.358588 2016] [ssl:warn] [pid 23572] AH01909: RSA certificate configured for horde.webmail:443 does NOT include an ID which matches the server name
[Wed Oct 05 05:15:00.358893 2016] [ssl:warn] [pid 23572] AH01909: RSA certificate configured for lists:443 does NOT include an ID which matches the server name
[Wed Oct 05 05:15:00.359207 2016] [ssl:warn] [pid 23572] AH01909: RSA certificate configured for default-2607_5300_60_2788__:443 does NOT include an ID which matches the server name
[Wed Oct 05 05:15:00.359515 2016] [ssl:warn] [pid 23572] AH01909: RSA certificate configured for default-198_xx_xx_xxx:443 does NOT include an ID which matches the server name

Can someone help me, please...

Note: I'm using Plesk 12.5.x on Centos 7.

 

[Bitpalast]

The first "xmlrpc.php" errors are caused by malicious bots that are trying to attack the XML callback interface of Wordpress websites. If you see many of these messages and cannot automatically block the bots (e.g. by using fail2ban) it is recommended to create an empty file at the requested location. For your host it causes much less CPU load to read and deliver an empty file than to add an error message to the log file.

The second error is caused by an attempt to open webmail.*.* on an SSL secured connection. The webmail subdomain is not protected by a matching certificate.

 

[v123shine]

Dear Peter, thank you very much for your help.

First, I using fail2ban in my plesk, but I still got that error. Is there any other solution for prevent that error without create empty file?

For the second, so what should I do for prevent that error. Sorry i just newbie.

Thanks

 

[Bitpalast]

a) fail2ban only blocks IPs according to the jail definitions and the frequency of attacks.

b) Don't open webmail by https:// or install your own webmail software on a subdomain of your choice and add an SSL certificate to that subdomain.