Make more Jails for Fail2Ban e.g. mysql error log
please make plesk saver with more helpful Jails for fail2ban
mysql error log
typo3 login fails
joomla login fails
an any more
From time to time TOR users attack my server. I would like to have a fail2ban jail for TOR that can be turned on and off. All IPs are listed here: https://check.torproject.org/torbulkexitlist
Or as a firewal rule.
I realize that the attacker can also use other services.
Mark P commented
2016-12-16T20:58:41+00:00 INFO 220.127.116.11 joomlafailure Username and password do not match or you do not have an account yet
Mark P commented
You can use Fail2ban with Joomla, but will need a regx creating to read joomla logs
Ivan Kamnev commented
Add jail for MySQL.
plesk-mysql looks for MySQL authentication failures and bans attackers for 10 minutes.
Jan Brockmann commented
Please add mysql to fail2ban as default
Mathias H commented
Magento 1.9 and 2!
ownCloud and Nextcloud
Peter Hornburg commented
It is possible, when activating the fail2ban plugin in Joomla. After that here will be an error entry in the apache error log.
This would also be a good idea for other CMS like Typo3
As you did with WordPress Fail2ban jail (failregex)- please add more cms jails like for drupal and joomla .
This is impossible. Because Joomla returns an HTTP 200 when a login fails, where WordPress (as it should) returns a 401. Fail2Ban checkes for those 401 return codes and bans accordingly.
Because Joomla always returns 200 (regardless of whether the login succeeded or not) there is no way to check for failed logins.
Andreas Kompatscher commented
Fail2ban Joomla Filter