fail2ban

Hi, when creating a new fail2ban jail in fail2ban (v1.1.0) through the Plesk UI (v18.0.70#1), the fail2ban service is restarted, clearing the banned IPs and forcing to restore all the previous bans. This causes a spike in CPU usage until all the IPs are banned again. Is that the desired...

I have a problem with a client. Every now and then, fail2ban blocks their IP because they have misconfigured email accounts on their network, which triggers the plesk-dovecot rule. This is fine, but the problem is that the client is unable to find the email program that's causing the problem...

How to set that other admin level Plesk users are able to also set and unblock IPs on the fail2ban system? I can set/clear IP Blocks when logged in as the primary admin, but other admins have a fail2ban button on their log in but the button only goes to a "permission denied" screen. The...

Hello everyone, I have successfully installed ModSecurity with NGINX on my Plesk server. Now, I want to use Fail2Ban to permanently block IPs of attackers that ModSecurity identifies. However, after installation, I noticed that the configuration files for ModSecurity were missing in Fail2Ban...

Hi all, After I fresh install the Plesk with fail2ban and firewalld, I can't restart firewalld # systemctl restart firewalld Failed to restart firewalld.service: Transaction contains conflicting jobs 'restart' and 'stop' for fail2ban.service. Probably contradicting requirement dependencies...

Hello, After migrating from CentSO to Almalinux, Fail2ban is not working properly. The problem occurs on several servers. Not just one. The error is that Fail2ban does not create the rules in iptables, and for that reason it gives an error: I have uninstalled Fail2Ban and reinstalled it, but...

Logged in after a couple weeks to check my server on the backend and found it this way. My plesk firewall extension was uninstalled, UFW was turned off, and Fail2Ban was missing from Plesk. Is this just an update or something to do with Plesk or was I hacked? Seriously the Fail2ban and...

Hello! I've been using the WordPress jail in Fail2Ban to protect my WordPress installations from brute-force attacks. While I appreciate the protection it offers, I recently noticed a significant gap in its coverage that raises some concerns regarding security. Specifically, I’ve observed...

I have a firewall in front of the Plesk web server. (Endian Community) My web server is not very active, it has only 10-15 sites whose traffic shouldn't be more than 40-50GB monthly but I see 500-700GB traffic due to "bad bots". So from time to time, I go to Fail2Ban interface to look for IP...

I have a problem that after the last Plesk update, fail2ban no longer starts. I searched the forum and did several things: Reinstallation of fail2ban; Recreate log files; Remove fail2ban and remove files from /etc/fail2ban then reinstall; And it was not possible to start it. The error log is...

Whenever you end-up with a large number of banned IP's in fail2ban you might want to know if there are multiple IP's banned from the same subnet. This scripts groups all banned IP's into /24 subnets. By default the script returns all subnets with 10 or more IP's banned by fail2ban. You can...

Since the update to Plesk 18.0.63 trying to open from the Plesk UI via tools/fail2ban results in an error: f2bmng failed: ERROR:__main__:No section: 'plesk-one-week-ban' Trying the solution from...

Hello plesk users, we are trying to setup a fail2ban jail filter rule which can ban most badbots and mainly the big 4 aws-amazon, ovh, alibaba, and hetzner. We had follow from plesk official and/or from talk forum...

My host has just migrated my server from the Centos that I was on (I understand that is now end of life). I am now running AlmaLinux 8.9 (Midnight Oncilla) Product Plesk Obsidian Version 18.0.62 Update #2, last updated on July 25, 2024 05:16 AM However, since the migration has happened, I...

Hi, Running Plesk Obsidian Version 18.0.61 on Centos 7.9.2009 (for the last week before moving to Alma) in a LXC in Proxmox. Proxmox firewall enabled for the LXC, while iptable rules within the LXC works. From inside the Plesk LXC, if I add an iptable rule to block an IP , it actually does...

Hi, It seems the default installation of fail2ban does not work to block wordpress logins. For example, this is the log of one of our wordpress sites: And many more lines. However the IP is not blocked by the wordpress jail (or any other jail) So I assume this jail is not working. I didn´t...

Hello, I found a very nice article in plesk blog to block badbots with fail2ban. I have problems with ClaudeBot who is hitting the server all the time. The problem is that I have some problems with the article. First I edited /etc/fail2ban/filter.d/apache-badbots.conf as requested adding the...

So I am getting constant code 200 requests to my website with no user interaction, as in they never open an image or anything just scraping. This is just wasting server resources. So I have recently started using the badbots filter to get rid of some of that. Then for some odd reason, I was...

18.0.61 on Ubuntu 24.04 fresh install and fail2ban doesn't work. any solution? systemctl status fail2ban × fail2ban.service - Fail2Ban Service Loaded: loaded (/usr/lib/systemd/system/fail2ban.service; enabled; preset: enabled) Drop-In: /usr/lib/systemd/system/fail2ban.service.d...

Hello, good morning. I hope someone can give me a hand. I currently have a problem with fail2ban. At first everything was working fine but after modifying the fail2ban bad bot file How to Avoid High CPU Load & Block Bad Bots with Plesk I got some errors like the ones mentioned here: Unable to...