Security Scan Report about Port 1221 Azure Web App Service

Question

Security Scan Report about Port 1221 Azure Web App Service

Umer Rashid 170

PCI Scan of our Azure Web App identified these vulnerabilities:

Can you please let us know if we can delete these files or disable port 1221 for our Azure Web App.

Thanks,

Umer Rashid 170 Reputation points

2025-02-25T13:33:35.3733333+00:00

Security scan found these files '/roles' and 'files' at port 1221.

url: <Web App's IP address>:1221/roles/

Payload: <Web App's IP address>:1221/roles/

matched: HTTP/1.1 200 OK

url: http://<Web App's IP address>:1221/files/

Payload: http://<Web App's IP address>:1221/files/

matched: HTTP/1.1 200 OK"

Can you please let us know if we can delete these files or disable port 1221 for our Azure Web App? What are the recommended practices to secure web app?

Thanks.

Accepted answer

1 additional answer

Your answer

Umer Rashid 170 Reputation points

2025-02-25T13:33:35.3733333+00:00

Security scan found these files '/roles' and 'files' at port 1221.

url: <Web App's IP address>:1221/roles/

Payload: <Web App's IP address>:1221/roles/

matched: HTTP/1.1 200 OK

url: http://<Web App's IP address>:1221/files/

Payload: http://<Web App's IP address>:1221/files/

matched: HTTP/1.1 200 OK"

Can you please let us know if we can delete these files or disable port 1221 for our Azure Web App? What are the recommended practices to secure web app?

Thanks.

Answer 1

Laxman Reddy Revuri 5,400 Microsoft External Staff Moderator

Hi @Umer Rashid
There's no way to block or control access to these ports in the multitenant service.
https://learn.microsoft.com/en-us/azure/app-service/networking-features#app-service-ports
User's image Kindly refer the thread:https://learn.microsoft.com/en-us/answers/questions/1337314/disable-ports-1221-and-8172-on-a-simple-web-app-se

Please accept as "Yes" if the answer provided is useful, so that you can help others in the community looking for remediation for similar issues.

Umer Rashid 170 Reputation points

2025-02-26T14:58:53.89+00:00

Hi @Laxman Reddy Revuri

Thanks for the prompt response.

So I get it that port 1221 can't be disabled.

Can you please tell me what is the information showed by these file paths "/roles/" and "files" at port 1221? I get an IP address shown when I visit http://<Web App's IP address>:1221/files/ and http://<Web App's IP address>:1221/roles.

Is it possible to delete these files?

Regards,

Umar
Laxman Reddy Revuri 5,400 Reputation points Microsoft External Staff Moderator

2025-02-26T15:30:36.3166667+00:00

Hi @Umer Rashid
apologize for any inconvenience caused on this.
Paths /roles/ and /files/ found on port 1221 are components of Azure App Service Internal Architecture.

/roles/ may consist of role information, instance data, or Azure Service configurations.

Deployment artifacts, logs, and system files may be exposed through /files/. It may also contain an internal Azure IP address.

These files are a part of the internal architecture of Azure and therefore cannot be deleted. From the user’s point of view, these files are highly sensitive and prone to corruption.
Laxman Reddy Revuri 5,400 Reputation points Microsoft External Staff Moderator

2025-02-27T18:05:26.4866667+00:00

Hi @Umer Rashid
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Laxman Reddy Revuri 5,400 Reputation points Microsoft External Staff Moderator

2025-02-28T17:08:07.2+00:00

Hi @Umer Rashid
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

Answer 2

Umer Rashid 170

Hi @Laxman Reddy Revuri

Thanks for the prompt response.

So I get it that port 1221 can't be disabled.

Can you please tell me what is the information showed by these file paths "/roles/" and "files" at port 1221? I get an IP address shown when I visit http://<Web App's IP address>:1221/files/ and http://<Web App's IP address>:1221/roles.

Is it possible to delete these files?

Regards,

Umar

Joseph Schmucker 81 Reputation points

2025-04-18T15:23:13.62+00:00

I am failing a PCI requirements scan on my Web App due to port 1221. I need someone from MS to send me something I can provide to PayPal. They are not accepting the above response.

Share via

Security Scan Report about Port 1221 Azure Web App Service

1 additional answer

Your answer