fail2ban

Hi guys, Having trouble loading more that 2 jails - fail2ban times out when starting. There are just too many logs to read. I need to increase the TimeoutStartSec value, but I can't find where this should go. As per Fail2Ban hangs on start: Action already exists or fail2ban.service start...

Hello, i would like to use Fail 2 Ban on Plesk Onyx Version 17.8.11 Update #64 CentOS Linux 7.6.1810 (Core)‬ and would like to know, before activating if - The Hosted Wordpress Domains are using Cloudflare, do I have to exclude Cloudflare IPs under Trusted Ips? - All Jails can be turned on...

Hi there, I try to install the extensions ModSecurity and Fail2ban in Plesk via the Advisor. Unfortunately I get an error after a few seconds - ERR_TIMED_OUT. I activated port 8447 in the firewall. What could be the problem? Thanks, David

Hi all My maillog shows several failed mail authentication attempts. Fail2ban is configured from Pesk Onyx webui Defaults jails have simply lowered maxretry values and increased ban periods. Regarding to the config files and the logs, i cant figure out why Fail2ban does not ban an attacker...

Here's my error. Plesk Onyx 17.8.11 Update #49 fail2ban.action [10650]: ERROR iptables -w -n -L INPUT | grep -q 'f2b-apache[ \t]' -- stdout: '' fail2ban.action [10650]: ERROR iptables -w -n -L INPUT | grep -q 'f2b-apache[ \t]' -- stderr: '' fail2ban.action [10650]: ERROR iptables -w -n -L INPUT...

Currently, Fail2Ban with IPv4 and IPv6 is and will only be provided when using Plesk Onyx 17.9.* There's lots of form posts already on this subject, but if you use Plesk Onyx 17.5.3 and/or Plesk Onyx 17.8.11 then please vote for this functionality to be backported to these releases TODAY. Go...

Dear fellow Pleskians, Following quite a few hours of reading posts on this forum, and the Plesk docs (Protection Against Brute Force Attacks (Fail2Ban)), and a few interesting technical chats with more experienced people, I've significantly reduced the no of IPs hammering my server. Now I...

Our own experience with Plesk is very good so far :) This forum is great and if/when you use the Direct Support provided by Plesk, that's extremely efficient too. However... some Plesk updates are well overdue now and there doesn't apppear to be any factual answers, from anywhere at Plesk other...

We have always run OSSEC. I see Plesks implementation of fail2ban seems to have rules specific to Plesk. Would we run into issues with running both these programs at the same time? We are also running CSF firewall with LFD. Are there Plesk rules for OSSEC somewhere or can we setup fail2ban just...

I am new to fail2ban I just migrated from Cpanel/CSF/LFD to Plesk/fail2ban. I need to get Fail2ban to start sending me emails with logs/hitblocks and whois, I have the below action config from Plesk, but not able to make it send me logs or block hits for that IP. Can you someone help...

Dear friends, I have installed Fail2ban and I am testing jails so I have made almost all jails active, I have also changed the ssh port. I have noticed that dovecot has blocked our company ip so people were not able to work on their own mail clients form their computers. Shall I switch dovecot...

Hi, on one of our SSD Servers, there was some Spam sending Problem last Week ago. The Client had some Viruses on PC and Spammer logged in with Password on that Client Mailbox. After we changed the Password, this Botnet permanently ran against this Mailbox and after 36 hours it looked like he...

Recently, I decided to install the Plesk Extension: 'Plesk Firewall'. Upon installation, I set the Global Policy to deny all incoming connections. I then created the overriding rule to accept connections from my IP address. Initially, this worked fine. Anyone not coming from my IP...

Hello, last night I noticed that fail2ban banned some GoogleBot IPs (66.249.69.xx) because of the recidive jail. Maybe Google spiders pointed to some client-denied link and fail2ban triggered the jail. How can I whitelist the whole google.com / googlebot.com domains from Plesk ? I see I can...

Hi, I would like to integrate AbuseIPDB with Fail2Ban. My server is running Plesk Onyx Version 17.8.11 Update #14 on CentOS Linux 7.5.1804. The Fail2Ban version on this is v0.9.6... The required version to integrate Fail2Ban with AbuseIPDB is v0.10.0 (January 2017). See also: Integrating...

Hey there, often large Companies with lot's of Workstation are getting blocked because 1 Client in their Office is trying to log in with wrong Password (imap/pop/smtp) - then the whole Office of them is getting blocked and the search which PC/which User is causing the block.starts ... It would...

OS: ‪CentOS Linux 7.4.1708 (Core)‬ Product: Plesk Onyx 17.5.3 Update #44 Hi, I logged in to my server today as root there was a message "There were 4524 failed login attempts since the last successful login." Fail2Ban jails are all enabled and green. There is only one IP address banned in...

Hi, I've noticed recently that this message appears on the Fail2Ban Jails page: Warning: Fail2Ban might not operate properly if there are many domains and Fail2Ban has to monitor too many log files. This rather obscure message raises a couple of questions: 1. What does "might not operate...

When are you going to upgrade such important software like Fail2ban ? It's 0.10.2 released officially already as I see you still have outdated 0.9.6 ?

Plesk Onyx on CentOS An nginx proxy is in front of the plesk login: https://login.mydomain.tld <=> https://localhost:8443 via proxy_pass location / { proxy_pass https://myIP-address:8443; proxy_set_header Host $host...