• Plesk Uservoice will be deprecated by October. Moving forward, all product feature requests and improvement suggestions will be managed through our new platform Plesk Productboard.
    To continue sharing your ideas and feedback, please visit features.plesk.com

Question I installed fail2ban but it doesn't block these attacks and ips

shopuser

Basic Pleskian
I installed fail2ban but it doesn't block these attacks and ips

Oct 28 19:11:11 server authpsa[487]: No such user '[email protected]' in mail authorization database
Oct 28 19:11:11 server courier-imapd: LOGIN FAILED, method=PLAIN, ip=[::ffff:85.95.203.99], port=[58892]
Oct 28 19:11:16 server courier-imapd: Disconnected, ip=[::ffff:85.95.203.99], port=[58892], time=5
Oct 28 19:11:17 server courier-imaps: Connection, ip=[::ffff:85.95.203.99], port=[38000]
Oct 28 19:11:17 server authpsa[485]: No such user '[email protected]' in mail authorization database
Oct 28 19:11:17 server courier-imaps: LOGIN FAILED, method=PLAIN, ip=[::ffff:85.95.203.99], port=[38000]
Oct 28 19:11:22 server courier-imaps: Disconnected, ip=[::ffff:85.95.203.99], port=[38000], time=5, starttls=1
Oct 28 19:11:23 server courier-imapd: Connection, ip=[::ffff:85.95.203.99], port=[59450]
Oct 28 19:11:23 server authpsa[487]: No such user '[email protected]' in mail authorization database
Oct 28 19:11:23 server courier-imapd: LOGIN FAILED, method=PLAIN, ip=[::ffff:85.95.203.99], port=[59450]
Oct 28 19:11:28 server courier-imapd: Disconnected, ip=[::ffff:85.95.203.99], port=[59450], time=5
Oct 28 19:11:29 server courier-imaps: Connection, ip=[::ffff:85.95.203.99], port=[38572]
Oct 28 19:11:29 server authpsa[486]: No such user '[email protected]' in mail authorization database
Oct 28 19:11:29 server courier-imaps: LOGIN FAILED, method=PLAIN, ip=[::ffff:85.95.203.99], port=[38572]
Oct 28 19:11:34 server courier-imaps: Disconnected, ip=[::ffff:85.95.203.99], port=[38572], time=5, starttls=1
Oct 28 19:11:34 server courier-imapd: Connection, ip=[::ffff:85.95.203.99], port=[59774]




i have all jails activated.



jorgee-bots Aktiv
named-ddos-udp Aktiv
named-refused-tcp Aktiv
named-refused-udp Aktiv
plesk-apache Aktiv
plesk-apache-badbot Aktiv
plesk-courierimap Aktiv
plesk-modsecurity Aktiv
plesk-panel Aktiv
plesk-postfix Aktiv
plesk-proftpd Aktiv
plesk-roundcube Aktiv
plesk-wordpress Aktiv
postfix-auth Aktiv
postfix-flood-attack Aktiv
recidive Aktiv
ssh Aktiv

i dont have a user with the name [email protected], but this is a valid mail adress, the mail adress have a alias to login.
 
Back
Top