• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Question I installed fail2ban but it doesn't block these attacks and ips

shopuser

Regular Pleskian
I installed fail2ban but it doesn't block these attacks and ips

Oct 28 19:11:11 server authpsa[487]: No such user '[email protected]' in mail authorization database
Oct 28 19:11:11 server courier-imapd: LOGIN FAILED, method=PLAIN, ip=[::ffff:85.95.203.99], port=[58892]
Oct 28 19:11:16 server courier-imapd: Disconnected, ip=[::ffff:85.95.203.99], port=[58892], time=5
Oct 28 19:11:17 server courier-imaps: Connection, ip=[::ffff:85.95.203.99], port=[38000]
Oct 28 19:11:17 server authpsa[485]: No such user '[email protected]' in mail authorization database
Oct 28 19:11:17 server courier-imaps: LOGIN FAILED, method=PLAIN, ip=[::ffff:85.95.203.99], port=[38000]
Oct 28 19:11:22 server courier-imaps: Disconnected, ip=[::ffff:85.95.203.99], port=[38000], time=5, starttls=1
Oct 28 19:11:23 server courier-imapd: Connection, ip=[::ffff:85.95.203.99], port=[59450]
Oct 28 19:11:23 server authpsa[487]: No such user '[email protected]' in mail authorization database
Oct 28 19:11:23 server courier-imapd: LOGIN FAILED, method=PLAIN, ip=[::ffff:85.95.203.99], port=[59450]
Oct 28 19:11:28 server courier-imapd: Disconnected, ip=[::ffff:85.95.203.99], port=[59450], time=5
Oct 28 19:11:29 server courier-imaps: Connection, ip=[::ffff:85.95.203.99], port=[38572]
Oct 28 19:11:29 server authpsa[486]: No such user '[email protected]' in mail authorization database
Oct 28 19:11:29 server courier-imaps: LOGIN FAILED, method=PLAIN, ip=[::ffff:85.95.203.99], port=[38572]
Oct 28 19:11:34 server courier-imaps: Disconnected, ip=[::ffff:85.95.203.99], port=[38572], time=5, starttls=1
Oct 28 19:11:34 server courier-imapd: Connection, ip=[::ffff:85.95.203.99], port=[59774]




i have all jails activated.



jorgee-bots Aktiv
named-ddos-udp Aktiv
named-refused-tcp Aktiv
named-refused-udp Aktiv
plesk-apache Aktiv
plesk-apache-badbot Aktiv
plesk-courierimap Aktiv
plesk-modsecurity Aktiv
plesk-panel Aktiv
plesk-postfix Aktiv
plesk-proftpd Aktiv
plesk-roundcube Aktiv
plesk-wordpress Aktiv
postfix-auth Aktiv
postfix-flood-attack Aktiv
recidive Aktiv
ssh Aktiv

i dont have a user with the name [email protected], but this is a valid mail adress, the mail adress have a alias to login.
 
Back
Top