• Dear Pleskians! The Plesk Forum will be undergoing scheduled maintenance on Monday, 7th of July, at 9:00 AM UTC. The expected maintenance window is 2 hours.
    Thank you in advance for your patience and understanding on the matter.

brute force

  1. Jürgen_T

    Question Massive Brute-Force Attacks on Plesk Panel – Looking for Additional Protection Measures

    Hello everyone, I’m running a Plesk panel that has been under a massive brute-force attack for some time. The login attempts are happening non-stop from globally distributed IPs, targeting users like admin, root, and even custom usernames. I have already implemented the following security...
  2. brother4

    Question Why isn't xmlrpc.php monitored by the WordPress jail in Fail2Ban?

    Hello! I've been using the WordPress jail in Fail2Ban to protect my WordPress installations from brute-force attacks. While I appreciate the protection it offers, I recently noticed a significant gap in its coverage that raises some concerns regarding security. Specifically, I’ve observed...
  3. F

    Question How to disable/restrict by IP <server-ip>/login_up.php ?

    Hi, I just noticed that when I access the IP address of my server with Chrome, I am redirected to the page <ip-address>/login_up.php or <server_name>/login_up Is there a way to restrict this page by IP as is the case when using port 8443? The "Restricting Administrative Access" feature only...
  4. M

    Issue Windows Firewall Blocked all IP Accidentally

    Hi, We have a Godaddy Server running Windows 2012. It is accessible through Remote Desktop and Plesk. We are getting a lot of brute force attacks on the MSSQL server. Going through the forums, we found that we can create inbound rule on the firewall to block the...
  5. Alaa Mansour

    Issue Firewall IP Ban (fail2ban) Wordpress

    Hello, everybody, after I have migrated the server, fail2ban no longer ban ip addresses automatically, and put them in a list in the firewall, I have to di it manually, even though the rules of the jails are as same as previous. I can see the IP address in the list of banned ip under the jail...
  6. ChrisMonder

    Resolved How to ignore POP3/IMAP login attempts for a non existent domain in my server?

    Hi all, I have a kind of annoying problem, in the past, my main server IP belong to a very known domain website, they move their website/email server to a new IP range and I got their IP assigned (didn't know about this when I received them). I have more than 500 daily attempts to login with a...
  7. EnriqueR

    Issue Named attack

    I am having a problem with my Plesk server since for a few weeks it is being attacked using brute force in named. I have noticed that in the file '/var/log/messages' the following line appears thousands of times: Nov 22 16:43:04 myserver named[571]: client x.x.x.x#49784: query (cache)...
Back
Top