fail2ban

Hi all, After I fresh install the Plesk with fail2ban and firewalld, I can't restart firewalld # systemctl restart firewalld Failed to restart firewalld.service: Transaction contains conflicting jobs 'restart' and 'stop' for fail2ban.service. Probably contradicting requirement dependencies...

Hello, After migrating from CentSO to Almalinux, Fail2ban is not working properly. The problem occurs on several servers. Not just one. The error is that Fail2ban does not create the rules in iptables, and for that reason it gives an error: I have uninstalled Fail2Ban and reinstalled it, but...

Logged in after a couple weeks to check my server on the backend and found it this way. My plesk firewall extension was uninstalled, UFW was turned off, and Fail2Ban was missing from Plesk. Is this just an update or something to do with Plesk or was I hacked? Seriously the Fail2ban and...

Hello! I've been using the WordPress jail in Fail2Ban to protect my WordPress installations from brute-force attacks. While I appreciate the protection it offers, I recently noticed a significant gap in its coverage that raises some concerns regarding security. Specifically, I’ve observed...

I have a firewall in front of the Plesk web server. (Endian Community) My web server is not very active, it has only 10-15 sites whose traffic shouldn't be more than 40-50GB monthly but I see 500-700GB traffic due to "bad bots". So from time to time, I go to Fail2Ban interface to look for IP...

I have a problem that after the last Plesk update, fail2ban no longer starts. I searched the forum and did several things: Reinstallation of fail2ban; Recreate log files; Remove fail2ban and remove files from /etc/fail2ban then reinstall; And it was not possible to start it. The error log is...

Whenever you end-up with a large number of banned IP's in fail2ban you might want to know if there are multiple IP's banned from the same subnet. This scripts groups all banned IP's into /24 subnets. By default the script returns all subnets with 10 or more IP's banned by fail2ban. You can...

Since the update to Plesk 18.0.63 trying to open from the Plesk UI via tools/fail2ban results in an error: f2bmng failed: ERROR:__main__:No section: 'plesk-one-week-ban' Trying the solution from...

Hello plesk users, we are trying to setup a fail2ban jail filter rule which can ban most badbots and mainly the big 4 aws-amazon, ovh, alibaba, and hetzner. We had follow from plesk official and/or from talk forum...

My host has just migrated my server from the Centos that I was on (I understand that is now end of life). I am now running AlmaLinux 8.9 (Midnight Oncilla) Product Plesk Obsidian Version 18.0.62 Update #2, last updated on July 25, 2024 05:16 AM However, since the migration has happened, I...

Hi, Running Plesk Obsidian Version 18.0.61 on Centos 7.9.2009 (for the last week before moving to Alma) in a LXC in Proxmox. Proxmox firewall enabled for the LXC, while iptable rules within the LXC works. From inside the Plesk LXC, if I add an iptable rule to block an IP , it actually does...

Hi, It seems the default installation of fail2ban does not work to block wordpress logins. For example, this is the log of one of our wordpress sites: And many more lines. However the IP is not blocked by the wordpress jail (or any other jail) So I assume this jail is not working. I didn´t...

Hello, I found a very nice article in plesk blog to block badbots with fail2ban. I have problems with ClaudeBot who is hitting the server all the time. The problem is that I have some problems with the article. First I edited /etc/fail2ban/filter.d/apache-badbots.conf as requested adding the...

So I am getting constant code 200 requests to my website with no user interaction, as in they never open an image or anything just scraping. This is just wasting server resources. So I have recently started using the badbots filter to get rid of some of that. Then for some odd reason, I was...

18.0.61 on Ubuntu 24.04 fresh install and fail2ban doesn't work. any solution? systemctl status fail2ban × fail2ban.service - Fail2Ban Service Loaded: loaded (/usr/lib/systemd/system/fail2ban.service; enabled; preset: enabled) Drop-In: /usr/lib/systemd/system/fail2ban.service.d...

Hello, good morning. I hope someone can give me a hand. I currently have a problem with fail2ban. At first everything was working fine but after modifying the fail2ban bad bot file How to Avoid High CPU Load & Block Bad Bots with Plesk I got some errors like the ones mentioned here: Unable to...

I have re-installed Fail2Ban: plesk installer --select-release-current --remove-component fail2ban (I also cleared the sqlite and other files) plesk installer --select-release-current --install-component fail2ban However, the standard Plesk jails and filters were not installed. Is there a way...

Hello good morning You already know me from this forum, I am new to the world of PLESK, I am configuring my server little by little, learning a lot. I have a question, I have IP Address Banning configured but I don't know if I have it configured correctly because looking at it I found that in...

Hi all, Do you know which program fails2ban works with under Almalinux9? Erwan

Hello, My linux level is way below beginner. Just setup my own server for development purposes. So am using fail2ban for fail ssh attempts, and I noticed that I am gettin g a lot of hits from bots in the error.log attempting to access standard login phps or pls. So I would like to add a...