Input New extension released : Flex Firewall for Plesk Windows

[Frank.P]

Server operating system version

Windows

Today was added new extension to catalogue.

Check it free from website or plesk catalogue.

Flex Firewall for Plesk Windows - Plesk Extensions

ext.plesk.com

 

[Frank.P]

Flex Firewall for Plesk Windows

Plesk Extension to Manage Firewall

www.plesk.com

 

[Kaspar@Plesk]

Excellent addition to the Plesk extension catalog for Windows users. Great work!

 

[katilarap]

Hello, after the Flex Firewall Manager add-on, there is constantly high CPU usage and when I examine the system's event viewer, I see similar attempts, but I think it is constantly triggering the Flex Firewall and causing high CPU usage. What can I do about it?

 

[katilarap]

Hello, after the Flex Firewall Manager add-on, there is constantly high CPU usage and when I examine the system's event viewer, I see similar attempts, but I think it is constantly triggering the Flex Firewall and causing high CPU usage. What can I do about it?

The logging below shows that Flex has high CPU usage for no reason at 9:15 and continues unabated.


1 28.03.2025 09:54:44 Server CPU {96 %} : Paused Detection 3 min
2 28.03.2025 09:54:44 Server Performance : Low
3 28.03.2025 09:54:44 Server RAM : 30 %
4 28.03.2025 09:54:44 Server CPU : 96 %
5 28.03.2025 09:51:44 Server CPU {96 %} : Paused Detection 3 min
6 28.03.2025 09:51:44 Server Performance : Low
7 28.03.2025 09:51:44 Server RAM : 30 %
8 28.03.2025 09:51:44 Server CPU : 96 %
9 28.03.2025 09:48:44 Server CPU {96 %} : Paused Detection 3 min
10 28.03.2025 09:48:44 Server Performance : Low
11 28.03.2025 09:48:44 Server RAM : 30 %
12 28.03.2025 09:48:44 Server CPU : 96 %
13 28.03.2025 09:45:44 Server CPU {96 %} : Paused Detection 3 min
14 28.03.2025 09:45:44 Server Performance : Low
15 28.03.2025 09:45:44 Server RAM : 30 %
16 28.03.2025 09:45:44 Server CPU : 96 %
17 28.03.2025 09:42:44 Server CPU {96 %} : Paused Detection 3 min
18 28.03.2025 09:42:44 Server Performance : Low
19 28.03.2025 09:42:44 Server RAM : 28 %
20 28.03.2025 09:42:44 Server CPU : 96 %
21 28.03.2025 09:39:44 Server CPU {96 %} : Paused Detection 3 min
22 28.03.2025 09:39:44 Server Performance : Low
23 28.03.2025 09:39:44 Server RAM : 28 %
24 28.03.2025 09:39:44 Server CPU : 96 %
25 28.03.2025 09:36:42 Server CPU {96 %} : Paused Detection 3 min
26 28.03.2025 09:36:42 Server Performance : Low
27 28.03.2025 09:36:42 Server RAM : 28 %
28 28.03.2025 09:36:42 Server CPU : 96 %
29 28.03.2025 09:33:43 Server CPU {96 %} : Paused Detection 3 min
30 28.03.2025 09:33:43 Server Performance : Low
31 28.03.2025 09:33:42 Server RAM : 28 %
32 28.03.2025 09:33:42 Server CPU : 96 %
33 28.03.2025 09:30:42 Server CPU {96 %} : Paused Detection 3 min
34 28.03.2025 09:30:42 Server Performance : Low
35 28.03.2025 09:30:42 Server RAM : 28 %
36 28.03.2025 09:30:42 Server CPU : 96 %
37 28.03.2025 09:27:42 Server CPU {96 %} : Paused Detection 3 min
38 28.03.2025 09:27:42 Server Performance : Low
39 28.03.2025 09:27:42 Server RAM : 28 %
40 28.03.2025 09:27:42 Server CPU : 96 %
41 28.03.2025 09:24:42 Server CPU {96 %} : Paused Detection 3 min
42 28.03.2025 09:24:42 Server Performance : Low
43 28.03.2025 09:24:42 Server RAM : 28 %
44 28.03.2025 09:24:42 Server CPU : 96 %
45 28.03.2025 09:21:42 Server CPU {96 %} : Paused Detection 3 min
46 28.03.2025 09:21:42 Server Performance : Low
47 28.03.2025 09:21:42 Server RAM : 28 %
48 28.03.2025 09:21:42 Server CPU : 96 %
49 28.03.2025 09:18:42 Server CPU {96 %} : Paused Detection 3 min
50 28.03.2025 09:18:42 Server Performance : Low
51 28.03.2025 09:18:42 Server RAM : 28 %
52 28.03.2025 09:18:42 Server CPU : 96 %
53 28.03.2025 09:15:42 Server CPU {96 %} : Paused Detection 3 min
54 28.03.2025 05:17:21 185.142.236.34 Abuse IP {Permanent} : 185.142.236.34 - FTP
55 28.03.2025 05:12:41 Server Performance : OK
56 28.03.2025 05:12:41 Server RAM : 31 %
57 28.03.2025 05:12:41 Server CPU : 6 %

 

[Frank.P]

Please go to Contact | Firewall Manager Extension for Plesk and ask support to check possible issuse with MODS_ECURITY

 

[Frank.P]

Look that post:

Question - modsecurity

--0c650000-F-- HTTP/1.1 500 Internal Server Error --0c650000-H-- Message: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "C:\/Program Files (x86)/Plesk/ModSecurity/rules/modsecurity_crs-plesk/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1367"] [id "920320"] [msg "Missing User...

talk.plesk.com

The ModSecurity error "Host header is a numeric IP address" means that someone tried to access your site using an IP address instead of a hostname. This could be the result of a scanner.

I think if somebody are scanning you, Firewall Manager is running hard to mitigate attack or this mass scan make an issuse in software.

 

[katilarap]

Look that post:

Question - modsecurity

--0c650000-F-- HTTP/1.1 500 Internal Server Error --0c650000-H-- Message: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "C:\/Program Files (x86)/Plesk/ModSecurity/rules/modsecurity_crs-plesk/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1367"] [id "920320"] [msg "Missing User...

talk.plesk.com

The ModSecurity error "Host header is a numeric IP address" means that someone tried to access your site using an IP address instead of a hostname. This could be the result of a scanner.

I think if somebody are scanning you, Firewall Manager is running hard to mitigate attack or this mass scan make an issuse in software.

I made all these adjustments but nothing changed, the high CPU usage problem continues and on Flex's own website it says the full version of Plesk panel is free, but when I want to ban an extra IP in the version I have, it asks for the pro version, why? I sent an email to Plesk support but still no response.

 

[Frank.P]

If show alert about pro version, something go wrong. I think Plesk cannot help you, because software is third party. Contact to Flex Support using form https:// firewall.flexservices.app/plesk/en/contact.html , always answerd less 5h.