Question I installed fail2ban but it doesn't block these attacks and ips

shopuser

Basic Pleskian
I installed fail2ban but it doesn't block these attacks and ips

Oct 28 19:11:11 server authpsa[487]: No such user '[email protected]' in mail authorization database
Oct 28 19:11:11 server courier-imapd: LOGIN FAILED, method=PLAIN, ip=[::ffff:85.95.203.99], port=[58892]
Oct 28 19:11:16 server courier-imapd: Disconnected, ip=[::ffff:85.95.203.99], port=[58892], time=5
Oct 28 19:11:17 server courier-imaps: Connection, ip=[::ffff:85.95.203.99], port=[38000]
Oct 28 19:11:17 server authpsa[485]: No such user '[email protected]' in mail authorization database
Oct 28 19:11:17 server courier-imaps: LOGIN FAILED, method=PLAIN, ip=[::ffff:85.95.203.99], port=[38000]
Oct 28 19:11:22 server courier-imaps: Disconnected, ip=[::ffff:85.95.203.99], port=[38000], time=5, starttls=1
Oct 28 19:11:23 server courier-imapd: Connection, ip=[::ffff:85.95.203.99], port=[59450]
Oct 28 19:11:23 server authpsa[487]: No such user '[email protected]' in mail authorization database
Oct 28 19:11:23 server courier-imapd: LOGIN FAILED, method=PLAIN, ip=[::ffff:85.95.203.99], port=[59450]
Oct 28 19:11:28 server courier-imapd: Disconnected, ip=[::ffff:85.95.203.99], port=[59450], time=5
Oct 28 19:11:29 server courier-imaps: Connection, ip=[::ffff:85.95.203.99], port=[38572]
Oct 28 19:11:29 server authpsa[486]: No such user '[email protected]' in mail authorization database
Oct 28 19:11:29 server courier-imaps: LOGIN FAILED, method=PLAIN, ip=[::ffff:85.95.203.99], port=[38572]
Oct 28 19:11:34 server courier-imaps: Disconnected, ip=[::ffff:85.95.203.99], port=[38572], time=5, starttls=1
Oct 28 19:11:34 server courier-imapd: Connection, ip=[::ffff:85.95.203.99], port=[59774]




i have all jails activated.



jorgee-bots Aktiv
named-ddos-udp Aktiv
named-refused-tcp Aktiv
named-refused-udp Aktiv
plesk-apache Aktiv
plesk-apache-badbot Aktiv
plesk-courierimap Aktiv
plesk-modsecurity Aktiv
plesk-panel Aktiv
plesk-postfix Aktiv
plesk-proftpd Aktiv
plesk-roundcube Aktiv
plesk-wordpress Aktiv
postfix-auth Aktiv
postfix-flood-attack Aktiv
recidive Aktiv
ssh Aktiv

i dont have a user with the name [email protected], but this is a valid mail adress, the mail adress have a alias to login.
 
Back
Top