How to make Fail2ban monitor a specific website in Plesk and block failure login attempts

Question

How to make Fail2Ban monitor a specific website in Plesk and block failure login attempts?

Answer

1. Log in to Plesk.

2. Go to Tools & Settings > IP Address Banning (Fail2Ban) > switch to the Jails tab > click Add Jail.

3. On the Add Jail page, fill in the fields:

   • Name: website-login

   • Filter: apache-auth

   • Action field: iptables-multiport[name=”website-login”, port=”http,https,7080,7081″]

   • Log path: /var/www/vhosts/system/example.com/logs/error_log
     /var/log/httpd/*error_log

     Note: Replace example.com in the above log path with your domain name.

   

4. Click OK.

5. Witch to the Settings tab and make sure Enable intrusion detection is enabled.

   

6. Once the jail is enabled, all banned IP addresses (if any) will appear on the Banned IP Addresses tab.