• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Question Unauthorized access to psa / admin folder

ChrisCP

Basic Pleskian
Hello everyone,

While looking through the logs I noticed that an unknown IP address tried to access the folder usr / local / psa / admin / htdocs.

The log shows:
Code:
2021/03/07 19:39:39 [error] 1542#0: *303 open() "/usr/local/psa/admin/htdocs/Autodiscover/Autodiscover.xml" failed (2: No such file or directory), client: 45.155.205.225, server: , request: "POST /Autodiscover/Autodiscover.xml HTTP/1.1", host: "x.x.x.x:8443"
2021/03/07 20:41:25 [error] 1542#0: *304 open() "/usr/local/psa/admin/htdocs/api" failed (2: No such file or directory), client: 162.142.125.39, server: , request: "GET /api HTTP/1.1", host: "x.x.x.x:8443"
2021/03/08 12:20:23 [error] 1542#0: *1416 open() "/usr/local/psa/admin/htdocs/Autodiscover/Autodiscover.xml" failed (2: No such file or directory), client: 45.155.205.225, server: , request: "POST /Autodiscover/Autodiscover.xml HTTP/1.1", host: "x.x.x.x:8443"

How can it be that someone has access to these folders?
How can I prevent this?
 
I'm guessing that's normal behavior. /htdocs is likely a web root, so all someone is doing is accessing a url that doesn't exist in it. Not entirely familiar with it's purpose though. Maybe someone else can clarify
 
Back
Top