Logging failed logins to control panel

[adhawkins]

Hi,

Are failed logins to the plesk control panel logged anywhere along with the source IP?

Thanks

Andy

 

[IgorG]

Try to check /usr/local/psa/admin/logs/httpsd_access_log

 

[adhawkins]

That's just a log of all HTTPS requests on the server. There's no indication that I can see of a failed Plesk login in there.

Andy

 

[IgorG]

This is all Plesk Control Panel logs:

Error log: /var/log/sw-cp-server/error_log
Access log: /usr/local/psa/admin/logs/httpsd_access_log
Panel log: /usr/local/psa/admin/logs/panel.log

 

[adhawkins]

Ah, doesn't look like it logs anything useful into any of those.

Seems a bit of an omission. We want to set up CSF / LFD to catch failed logins to Plesk (as it does SSH, FTP etc.) and block the IP automatically.

Is this possible?

Andy

 

[IgorG]

Here is discussion of fail2ban - http://forum.parallels.com/showthread.php?t=261464

 

[adhawkins]

Thanks, that might help me do something similar with CSF / LFD.

Andy