fail2ban

Hello, I've recently found several very strange entries in my access log: xx.xxx.xx.xx - - [08/Oct/2017:00:23:56 +0300] "" 400 0 "-" "-" there is no host, there is no post or get or anything.. only IP and error number, my question is how would Fail2Ban's filter look to ban this IP? failregex =...

Hello, i'm trying to manage ip ban's using Plesk XML API, i read api-rpc full reference without success in my search... Please, anyone can say me how to ban/unban specific ip manually using xml api? <packet> <ip-ban> <?????????????????? /> </ip-ban> </packet>

I have personally not that much interest in fail2ban. I've written something like that some 8 years ago myself without ever hearing of fail2ban. What I wrote then is similar to what fail2ban is doing now. I'm writing my iptables rules directly in a file and it's loaded automatically if the...

I woke to see that Fail2Ban had crashed and won't restart, start, stop, or respond to anything. I went in and "killall fail2ban-client" but that didn't help. "plesk repair -all" apparently can't get past "Repairing web server configuration" (sits there forever) There are no huge log files. Disk...

It seems that the existing bans get 'lost' on a Server Restart. I had over 55 pages (100 per page) before the restart, and only 7 now How can I make it save the bans it had before and keep using those? It seems counter intuitive to lose the bans of aholes from before the restart. I am truly...

After migration of a lot of domains from backup, fail2ban cannot be started. Plesk Onyx 17.5.3 Update #13 ‪Ubuntu 16.04.2 LTS‬ Error message: Fehler: Die Einstellungen können nicht gespeichert werden: f2bmng failed: Synchronizing state of fail2ban.service with SysV init with...

Hi, I want to add a custom action to all jails, this action calls a script that writes the ban info to mysql. When i run my script directly from the console, it works fine. But it does not get called with the actionban... First some info: Plesk 17.5.3 CentOS 7 Fail2Ban v0.9.6 MariaDB 5.5.52...

Hi, I have plesk Onyx 17.5.3 and Centos 6.9. Fail2ban add every day IP from the same ISP in blacklist: Orange, and only Orange. This is very annoying because people (and my clients) which are behind an Orange Internet Box not be able to view the websites hosted on my server. I can (and I did)...

Hi, I have came across this issue few times. Adding New Subcription with Wordpress is not covered by Wordpress Jail. According to Fail2Ban Log ONLY the Error Log for new Subcription is ADDED to Fail2Ban. So the issue seems to be any Jails with Access logs. Turning off and on the Fail2Ban...

Hi, I can't find here on forum similar question. I need to have open port 3306 for all IPs. Is it possible somehow to protect mysql authentification with Fail2Ban? I found that enabling general log can slow server, but also I saw that is possible to enable only "log_warnings = 2", Is someone...

Hi, I have a (relatively) new Plesk Onyx (Version 17.5.3 Update #7) install (all going very nicely so far...), however I have discovered a strange issue with some Fail2Ban jails, in particular the plesk -wordpress jail. I noticed that some jails weren't working after a server restart. All...

Hello I was upgrading my plesk to the new version, there is a problem with fail2ban service. When i tryed to enable i recive this error read under: Can some one help me?

Hi there, So after my first problems with fail2ban when I installed it manually on the server and locked myself out I just find out you can easily install fail2ban through a couple clicks within Plesk :D So got it installed but now I got issues with the jail. I choose the apache, panel and WP...

I have a website which uses the authentication provided by the protected directory setting and I am using Nginx fully. There are no fail2ban jails for Nginx so I decided to create one. This is what I did: Created a Jail Filter named "nginx-auth": [Definition] failregex = no user/password was...

Hi On my server I'm running firewalld on centos7 after which I installed plesk I have now installed Fail2ban and also did the plesk firewall which I found to just be iptables and not firewalld so I uninstalled that I want to know if the plesk Fail2ban will be aware of firewalld and will be...

while checking fail2ban log file, I found fail2ban filter errors for "plesk-postfix" and "plesk-dovecot". Could anyone please explain the errors? How do I solve the errors? Thanks in advance! 2017-04-28 09:04:58,664 fail2ban.filter [6069]: INFO [plesk-postfix] Found 190.107.28.228...

Getting the following: Error: Unable to save the settings: f2bmng failed: Traceback (most recent call last): File "/usr/bin/fail2ban-client", line 472, in <module> if client.start(sys.argv): File "/usr/bin/fail2ban-client", line 442, in start return self.__processCommand(args) File...

Hi, after the update fail2ban dosent work, after try to acivate a jail comes this error message the sected jails cant activated : f2bmng failed: ERROR NOK: ('plesk-proftpd',) ERROR NOK: ('database is locked',) ERROR:f2bmng:Command '['/usr/bin/fail2ban-client', 'reload', 'plesk-proftpd']'...

Hi, i know, probably a stupid Question. But if i have the IP from User. How can i find out, why he was blocked? Its always because some Homepage things, false Email Settings, FTP.... Does this require to set some debug Level? Is there something which is practicable and not harm Performance...

just wandering if it is on v0.10 as i need it to support ipv6 and the new Fail2Ban v0.10 supports the matching of the IPv6 addresses. would be good to have an update for it. source: GitHub - fail2ban/fail2ban: Daemon to ban hosts that cause multiple authentication errors