• The APS Catalog has been deprecated and removed from all Plesk Obsidian versions.
    Applications already installed from the APS Catalog will continue working. However, Plesk will no longer provide support for APS applications.
  • Please be aware: with the Plesk Obsidian 18.0.78 release, the support for the ngx_pagespeed.so module will be deprecated and removed from the sw-nginx package.

Question I installed fail2ban but it doesn't block these attacks and ips

shopuser

Regular Pleskian
I installed fail2ban but it doesn't block these attacks and ips

Oct 28 19:11:11 server authpsa[487]: No such user '[email protected]' in mail authorization database
Oct 28 19:11:11 server courier-imapd: LOGIN FAILED, method=PLAIN, ip=[::ffff:85.95.203.99], port=[58892]
Oct 28 19:11:16 server courier-imapd: Disconnected, ip=[::ffff:85.95.203.99], port=[58892], time=5
Oct 28 19:11:17 server courier-imaps: Connection, ip=[::ffff:85.95.203.99], port=[38000]
Oct 28 19:11:17 server authpsa[485]: No such user '[email protected]' in mail authorization database
Oct 28 19:11:17 server courier-imaps: LOGIN FAILED, method=PLAIN, ip=[::ffff:85.95.203.99], port=[38000]
Oct 28 19:11:22 server courier-imaps: Disconnected, ip=[::ffff:85.95.203.99], port=[38000], time=5, starttls=1
Oct 28 19:11:23 server courier-imapd: Connection, ip=[::ffff:85.95.203.99], port=[59450]
Oct 28 19:11:23 server authpsa[487]: No such user '[email protected]' in mail authorization database
Oct 28 19:11:23 server courier-imapd: LOGIN FAILED, method=PLAIN, ip=[::ffff:85.95.203.99], port=[59450]
Oct 28 19:11:28 server courier-imapd: Disconnected, ip=[::ffff:85.95.203.99], port=[59450], time=5
Oct 28 19:11:29 server courier-imaps: Connection, ip=[::ffff:85.95.203.99], port=[38572]
Oct 28 19:11:29 server authpsa[486]: No such user '[email protected]' in mail authorization database
Oct 28 19:11:29 server courier-imaps: LOGIN FAILED, method=PLAIN, ip=[::ffff:85.95.203.99], port=[38572]
Oct 28 19:11:34 server courier-imaps: Disconnected, ip=[::ffff:85.95.203.99], port=[38572], time=5, starttls=1
Oct 28 19:11:34 server courier-imapd: Connection, ip=[::ffff:85.95.203.99], port=[59774]




i have all jails activated.



jorgee-bots Aktiv
named-ddos-udp Aktiv
named-refused-tcp Aktiv
named-refused-udp Aktiv
plesk-apache Aktiv
plesk-apache-badbot Aktiv
plesk-courierimap Aktiv
plesk-modsecurity Aktiv
plesk-panel Aktiv
plesk-postfix Aktiv
plesk-proftpd Aktiv
plesk-roundcube Aktiv
plesk-wordpress Aktiv
postfix-auth Aktiv
postfix-flood-attack Aktiv
recidive Aktiv
ssh Aktiv

i dont have a user with the name [email protected], but this is a valid mail adress, the mail adress have a alias to login.
 
Back
Top