Note: An updated version of this article to suit Plesk Onyx/Obsidian is available here: Plesk Onyx/Obsidian – Enable Fail2Ban.

This article will show you how to enable Fail2Ban within your Parallels Plesk 12 based Virtual Private Server (VPS). This was one of the great new security features introduced with Plesk 12, allowing you to continually monitor log files and ban users who are trying to gain access to your system.  Out of the box, this feature can monitor and ban:

  • Apache authentication attempts
  • Bad / Fake bots
  • IMAP / POP connection attempts
  • SMTP connection attempts
  • Webmail connection attempts
  • Plesk connection attempts
  • FTP connection attempts
  • SSH connection attempts

This provides a comprehensive set of services which are monitored and therefore can be protected against brute force hacking attempts.


  1. To enable, login to your Plesk within your VPS.
  2. Select Tools and Settings, then select IP Address Banning:
    plesk 12 - fail2ban - ip address banning
  3. Firstly, if you have a static IP for your office, you should add it to the Trusted IP Addresses.  This is to prevent any accidental triggers of the rules. To do so, click on the Trusted IP Addresses tab and click on “Add Trusted IP”:
    plesk 12 - add trusted ip address
    Enter the IP of your office Internet connection, you can verify this IP via our Client Info tool.
  4. Next, click on the Jails tab to enable / disable the particular services you wish to monitor:
    plesk 12 - fail2ban - jails
  5. Once you’re happy with the selected Jails, you can now enable the banning. Click on the Settings tab.
  6. Tick the “Enable intrusion detection” checkbox. You can also adjust how long the IP is banned for and also how many failures it requires before triggering a ban. Click OK to enable.
    plesk 12 - fail2ban - enable
  7. You now have Fail2Ban running on your Plesk Server.
  8. All IP’s which are currently banned (and what triggered the ban) are viewable within the main screen.
    plesk 12 - fail2ban - banned ip address(If you don’t see any IP’s listed here, it means nothing is currently banned)
Was this article helpful?

Related Articles