Wow from 2013 until now , No Update ?? Why not USE CSF as you Defaul Firewall ?? .. Just Because it's free ?? Common ?? you need 10k votes to offer this ???

+1

who the f... whats china on servers? 99% of queries from this country trigle security apps. country block dont need to be 100% effective but is effencial to keep possibility of locking none-targeted users by default. MAKE THIS FEATURE AVALIBLE FOR PLESK! so we dont have to share our analytics with cloudflare-like companies!

Firewall should be able to block the IP of the selected country, i have the same traffic problem like others. Thanks in advance!

Firewall should be able to block the IP of the selected country. I have a lot of traffic from the IP 5.10. *. *

Thanks @Mikhail Krivoshein it might be a solution! i will gie it a try. I find this article on a plesk forum: https://talk.plesk.com/threads/how-do-i-install-the-geoip.337520/

IP has no country by design. Takes some effort to maintain a GeoIP database and even so it probably won't be precise.

Firewall should be able to block the IP of the selected country

Plesk must have this option if you want the most secured system

fk china..

+1 to this. The more security, the better.

it's really necessary, because the half of ucraine likes to attack my Server

Me too. Countries like China, Russia, etc. attack my servers constantly.

well it should be possible to block certain countries from accessing certain ports - for example mail ports ... to prevent password cracking attempts.

this feature is more important today than ever. i don't really understand why so few votes were made for it. :(

plesk is one of the best applications i used in my live. so you have to go forward.

This is a very important feature as people try and ***** SMTP passwords and even if paying for Imunify360 that doesnt help because each attempt comes from a new password. If you know which geographical location most of your users are from then we should be able to block IMAP/SMTP access from all countries and only allow certain countries. This works well in Juggernaut but seeing that I pay so much more from Imunify360 I would expect this to be standard in Imunify360

Have the same problem

Maintaining lists of IPs or even subnets by hand on multiple servers is neither practical nor secure enough. There are already projects that maintain such lists (honeypot, ip2location etc).

I have enabled fail2ban and greylisting but I still frequently see servers in the mail.log which try to login with dictionary passwords.
The only way I know to get rid of those is to deny them completely.
It is a pain to do this from the GUI and there should be a CLI for this.