fail2ban

Hey there, often large Companies with lot's of Workstation are getting blocked because 1 Client in their Office is trying to log in with wrong Password (imap/pop/smtp) - then the whole Office of them is getting blocked and the search which PC/which User is causing the block.starts ... It would...

OS: ‪CentOS Linux 7.4.1708 (Core)‬ Product: Plesk Onyx 17.5.3 Update #44 Hi, I logged in to my server today as root there was a message "There were 4524 failed login attempts since the last successful login." Fail2Ban jails are all enabled and green. There is only one IP address banned in...

Hi, I've noticed recently that this message appears on the Fail2Ban Jails page: Warning: Fail2Ban might not operate properly if there are many domains and Fail2Ban has to monitor too many log files. This rather obscure message raises a couple of questions: 1. What does "might not operate...

When are you going to upgrade such important software like Fail2ban ? It's 0.10.2 released officially already as I see you still have outdated 0.9.6 ?

Plesk Onyx on CentOS An nginx proxy is in front of the plesk login: https://login.mydomain.tld <=> https://localhost:8443 via proxy_pass location / { proxy_pass https://myIP-address:8443; proxy_set_header Host $host...

Hello, I've recently found several very strange entries in my access log: xx.xxx.xx.xx - - [08/Oct/2017:00:23:56 +0300] "" 400 0 "-" "-" there is no host, there is no post or get or anything.. only IP and error number, my question is how would Fail2Ban's filter look to ban this IP? failregex =...

Hello, i'm trying to manage ip ban's using Plesk XML API, i read api-rpc full reference without success in my search... Please, anyone can say me how to ban/unban specific ip manually using xml api? <packet> <ip-ban> <?????????????????? /> </ip-ban> </packet>

I have personally not that much interest in fail2ban. I've written something like that some 8 years ago myself without ever hearing of fail2ban. What I wrote then is similar to what fail2ban is doing now. I'm writing my iptables rules directly in a file and it's loaded automatically if the...

I woke to see that Fail2Ban had crashed and won't restart, start, stop, or respond to anything. I went in and "killall fail2ban-client" but that didn't help. "plesk repair -all" apparently can't get past "Repairing web server configuration" (sits there forever) There are no huge log files. Disk...

It seems that the existing bans get 'lost' on a Server Restart. I had over 55 pages (100 per page) before the restart, and only 7 now How can I make it save the bans it had before and keep using those? It seems counter intuitive to lose the bans of aholes from before the restart. I am truly...

After migration of a lot of domains from backup, fail2ban cannot be started. Plesk Onyx 17.5.3 Update #13 ‪Ubuntu 16.04.2 LTS‬ Error message: Fehler: Die Einstellungen können nicht gespeichert werden: f2bmng failed: Synchronizing state of fail2ban.service with SysV init with...

Hi, I want to add a custom action to all jails, this action calls a script that writes the ban info to mysql. When i run my script directly from the console, it works fine. But it does not get called with the actionban... First some info: Plesk 17.5.3 CentOS 7 Fail2Ban v0.9.6 MariaDB 5.5.52...

Hi, I have plesk Onyx 17.5.3 and Centos 6.9. Fail2ban add every day IP from the same ISP in blacklist: Orange, and only Orange. This is very annoying because people (and my clients) which are behind an Orange Internet Box not be able to view the websites hosted on my server. I can (and I did)...

Hi, I have came across this issue few times. Adding New Subcription with Wordpress is not covered by Wordpress Jail. According to Fail2Ban Log ONLY the Error Log for new Subcription is ADDED to Fail2Ban. So the issue seems to be any Jails with Access logs. Turning off and on the Fail2Ban...

Hi, I can't find here on forum similar question. I need to have open port 3306 for all IPs. Is it possible somehow to protect mysql authentification with Fail2Ban? I found that enabling general log can slow server, but also I saw that is possible to enable only "log_warnings = 2", Is someone...

Hi, I have a (relatively) new Plesk Onyx (Version 17.5.3 Update #7) install (all going very nicely so far...), however I have discovered a strange issue with some Fail2Ban jails, in particular the plesk -wordpress jail. I noticed that some jails weren't working after a server restart. All...

Hello I was upgrading my plesk to the new version, there is a problem with fail2ban service. When i tryed to enable i recive this error read under: Can some one help me?

Hi there, So after my first problems with fail2ban when I installed it manually on the server and locked myself out I just find out you can easily install fail2ban through a couple clicks within Plesk :D So got it installed but now I got issues with the jail. I choose the apache, panel and WP...

I have a website which uses the authentication provided by the protected directory setting and I am using Nginx fully. There are no fail2ban jails for Nginx so I decided to create one. This is what I did: Created a Jail Filter named "nginx-auth": [Definition] failregex = no user/password was...

Hi On my server I'm running firewalld on centos7 after which I installed plesk I have now installed Fail2ban and also did the plesk firewall which I found to just be iptables and not firewalld so I uninstalled that I want to know if the plesk Fail2ban will be aware of firewalld and will be...