• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Resolved fail2ban do not start

  • Thread starter Deleted member 188409
  • Start date
D

Deleted member 188409

Guest
Hey,

my fail2ban doenst want to start. :( I'am not sure what are the next steps.

Plesk says:
Code: 
Fehler: Die Einstellungen können nicht gespeichert werden: f2bmng failed: Synchronizing state of fail2ban.service with SysV init with /lib/systemd/systemd-sysv-install...
Executing /lib/systemd/systemd-sysv-install enable fail2ban
Job for fail2ban.service failed because the control process exited with error code. See "systemctl status fail2ban.service" and "journalctl -xe" for details.
ERROR:__main__:Failed to start fail2ban service.

systemctl status fail2ban.service
Code: 
fail2ban.service - Fail2Ban Service
Loaded: loaded (/lib/systemd/system/fail2ban.service; enabled; vendor preset: enabled)
Active: failed (Result: start-limit-hit) since So 2019-01-13 20:31:03 CET; 2s ago
Docs: man:fail2ban(1)
Process: 18881 ExecStart=/usr/bin/fail2ban-client -x start (code=exited, status=255)

journalctl -xe
Code: 
Jan 14 10:24:47 xxx.yyy.tld /usr/lib/plesk-9.0/psa-pc-remote[356]: Message aborted.
Jan 14 10:24:52 xxx.yyy.tld plesk_saslauthd[27139]: select timeout, exiting
Jan 14 10:25:01 xxx.yyy.tld CRON[27185]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 14 10:25:01 xxx.yyy.tld CRON[27184]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 14 10:25:01 xxx.yyy.tld CRON[27187]: (root) CMD (/opt/psa/admin/bin/php -dauto_prepend_file=sdk.php '/opt/psa/admin/plib/modules/revisium-antivirus/scripts/ra_executor_run.php')
Jan 14 10:25:01 xxx.yyy.tld CRON[27186]: (root) CMD (/opt/psa/admin/bin/php -dauto_prepend_file=sdk.php '/opt/psa/admin/plib/modules/magicspam/scripts/ms_clean_queue.php')
Jan 14 10:25:01 xxx.yyy.tld sshd[27182]: Invalid user adela from 159.89.180.93
Jan 14 10:25:01 xxx.yyy.tld sshd[27182]: input_userauth_request: invalid user adela [preauth]
Jan 14 10:25:01 xxx.yyy.tld sshd[27182]: pam_unix(sshd:auth): check pass; user unknown
Jan 14 10:25:01 xxx.yyy.tld sshd[27182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.180.93
Jan 14 10:25:01 xxx.yyy.tld CRON[27184]: pam_unix(cron:session): session closed for user root
Jan 14 10:25:01 xxx.yyy.tld CRON[27185]: pam_unix(cron:session): session closed for user root
Jan 14 10:25:02 xxx.yyy.tld sshd[27182]: Failed password for invalid user adela from 159.89.180.93 port 41452 ssh2
Jan 14 10:25:03 xxx.yyy.tld sshd[27182]: Received disconnect from 159.89.180.93 port 41452:11: Bye Bye [preauth]
Jan 14 10:25:03 xxx.yyy.tld sshd[27182]: Disconnected from 159.89.180.93 port 41452 [preauth]
Jan 14 10:25:04 xxx.yyy.tld postfix/smtpd[27137]: connect from unknown[151.80.238.201]
Jan 14 10:25:04 xxx.yyy.tld plesk_saslauthd[27226]: listen=6, status=5, dbpath='/plesk/passwd.db', keypath='/plesk/passwd_db_key', chroot=1, unprivileged=1
Jan 14 10:25:04 xxx.yyy.tld plesk_saslauthd[27226]: privileges set to (108:114) (effective 108:114)
Jan 14 10:25:04 xxx.yyy.tld plesk_saslauthd[27226]: No such user '[email protected]' in mail authorization database
Jan 14 10:25:04 xxx.yyy.tld plesk_saslauthd[27226]: failed mail authentication attempt for user '[email protected]' (password len=12)
Jan 14 10:25:04 xxx.yyy.tld postfix/smtpd[27137]: warning: unknown[151.80.238.201]: SASL LOGIN authentication failed: authentication failure
Jan 14 10:25:04 xxx.yyy.tld postfix/smtpd[27137]: lost connection after AUTH from unknown[151.80.238.201]
Jan 14 10:25:04 xxx.yyy.tld postfix/smtpd[27137]: disconnect from unknown[151.80.238.201] ehlo=1 auth=0/1 commands=1/2
Jan 14 10:25:34 xxx.yyy.tld plesk_saslauthd[27226]: select timeout, exiting
Jan 14 10:25:47 xxx.yyy.tld postfix/smtpd[27137]: connect from unknown[178.62.196.23]
Jan 14 10:25:47 xxx.yyy.tld plesk_saslauthd[27229]: listen=6, status=5, dbpath='/plesk/passwd.db', keypath='/plesk/passwd_db_key', chroot=1, unprivileged=1
Jan 14 10:25:47 xxx.yyy.tld plesk_saslauthd[27229]: privileges set to (108:114) (effective 108:114)
Jan 14 10:25:47 xxx.yyy.tld plesk_saslauthd[27229]: failed mail authentication attempt for user 'web97p74' (password len=1)
Jan 14 10:25:47 xxx.yyy.tld postfix/smtpd[27137]: warning: unknown[178.62.196.23]: SASL LOGIN authentication failed: authentication failure
Jan 14 10:25:47 xxx.yyy.tld postfix/smtpd[27137]: disconnect from unknown[178.62.196.23] ehlo=1 auth=0/1 quit=1 commands=2/3
Jan 14 10:26:01 xxx.yyy.tld CRON[27230]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 14 10:26:01 xxx.yyy.tld CRON[27231]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 14 10:26:01 xxx.yyy.tld CRON[27232]: (root) CMD ([ -x /opt/psa/admin/sbin/backupmng ] && /opt/psa/admin/sbin/backupmng >/dev/null 2>&1)
Jan 14 10:26:01 xxx.yyy.tld CRON[27233]: (root) CMD (/opt/psa/admin/bin/php -dauto_prepend_file=sdk.php '/opt/psa/admin/plib/modules/revisium-antivirus/scripts/ra_executor_run.php')
Jan 14 10:26:01 xxx.yyy.tld CRON[27230]: pam_unix(cron:session): session closed for user root
Jan 14 10:26:02 xxx.yyy.tld CRON[27231]: pam_unix(cron:session): session closed for user root
Jan 14 10:26:05 xxx.yyy.tld postfix/smtpd[27137]: warning: hostname control.v545-5d8e5d8e.bid does not resolve to address 51.254.58.226
Jan 14 10:26:05 xxx.yyy.tld postfix/smtpd[27137]: connect from unknown[51.254.58.226]
Jan 14 10:26:05 xxx.yyy.tld plesk_saslauthd[27229]: No such user '[email protected]' in mail authorization database
Jan 14 10:26:05 xxx.yyy.tld plesk_saslauthd[27229]: failed mail authentication attempt for user '[email protected]' (password len=7)
Jan 14 10:26:05 xxx.yyy.tld postfix/smtpd[27137]: warning: unknown[51.254.58.226]: SASL LOGIN authentication failed: authentication failure
Jan 14 10:26:05 xxx.yyy.tld postfix/smtpd[27137]: lost connection after AUTH from unknown[51.254.58.226]
Jan 14 10:26:05 xxx.yyy.tld postfix/smtpd[27137]: disconnect from unknown[51.254.58.226] ehlo=1 auth=0/1 commands=1/2
Jan 14 10:26:35 xxx.yyy.tld plesk_saslauthd[27229]: select timeout, exiting
Jan 14 10:26:40 xxx.yyy.tld dovecot[746]: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=2.203.10.133, lip=81.169.193.28, mpid=27269, TLS, session=<VaZppGd/ccECywqF>
Jan 14 10:26:43 xxx.yyy.tld dovecot[746]: service=imap, [email protected], ip=[2.203.10.133]. Logged out rcvd=248, sent=1016
Jan 14 10:27:01 xxx.yyy.tld CRON[27272]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 14 10:27:01 xxx.yyy.tld CRON[27273]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 14 10:27:01 xxx.yyy.tld CRON[27274]: (root) CMD (/opt/psa/bin/sw-engine-pleskrun /opt/psa/admin/plib/DailyMaintainance/task-script.php StoreOutgoingMessagesStatistics >/dev/null 2>&1)
Jan 14 10:27:01 xxx.yyy.tld CRON[27275]: (root) CMD (/opt/psa/admin/bin/php -dauto_prepend_file=sdk.php '/opt/psa/admin/plib/modules/revisium-antivirus/scripts/ra_executor_run.php')
Jan 14 10:27:02 xxx.yyy.tld CRON[27273]: pam_unix(cron:session): session closed for user root
Jan 14 10:27:03 xxx.yyy.tld CRON[27272]: pam_unix(cron:session): session closed for user root
Jan 14 10:27:10 xxx.yyy.tld sshd[27309]: Invalid user stratos from 54.37.68.191
Jan 14 10:27:10 xxx.yyy.tld sshd[27309]: input_userauth_request: invalid user stratos [preauth]
Jan 14 10:27:10 xxx.yyy.tld sshd[27309]: pam_unix(sshd:auth): check pass; user unknown
Jan 14 10:27:10 xxx.yyy.tld sshd[27309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.68.191
Jan 14 10:27:12 xxx.yyy.tld sshd[27309]: Failed password for invalid user stratos from 54.37.68.191 port 37928 ssh2
Jan 14 10:27:12 xxx.yyy.tld sshd[27309]: Received disconnect from 54.37.68.191 port 37928:11: Bye Bye [preauth]
Jan 14 10:27:12 xxx.yyy.tld sshd[27309]: Disconnected from 54.37.68.191 port 37928 [preauth]
Jan 14 10:27:45 xxx.yyy.tld fail2ban-client[27317]: ERROR  There is no directory /var/run/fail2ban to contain the socket file /var/run/fail2ban/fail2ban.sock.
Jan 14 10:27:45 xxx.yyy.tld fail2ban-client[27319]: ERROR  There is no directory /var/run/fail2ban to contain the socket file /var/run/fail2ban/fail2ban.sock.
Jan 14 10:27:45 xxx.yyy.tld fail2ban-client[27321]: ERROR  There is no directory /var/run/fail2ban to contain the socket file /var/run/fail2ban/fail2ban.sock.
Jan 14 10:27:46 xxx.yyy.tld fail2ban-client[27323]: ERROR  There is no directory /var/run/fail2ban to contain the socket file /var/run/fail2ban/fail2ban.sock.
Jan 14 10:27:46 xxx.yyy.tld fail2ban-client[27325]: ERROR  There is no directory /var/run/fail2ban to contain the socket file /var/run/fail2ban/fail2ban.sock.

Thanks for your help
 
I have solved the problem by my self.
Re-insall are helpful
 
You must log in or register to reply here.

Similar threads

Ankebut
Resolved PHP 8.1 Another FPM instance seems to already listen on [...] php-fpm.sock
2
Replies
26
Views
10K
Ankebut
Ankebut
Q
Resolved problem with ram server
Replies
8
Views
1K
Qusay
Q
carini
Issue crontab does not end
Replies
0
Views
661
carini
carini
Mike23
Resolved Server Error 500 Zend_Db_Adapter_Exception SQLSTATE[HY000] [2002] No such file or directory
Replies
1
Views
1K
Mike23
Mike23
P
Issue fail2ban postfix.conf not filtering authentication failures (dictionary attacks)
Replies
0
Views
2K
PeterKi
P
Back
Top