ls /etc/fail2ban/filter.d
and see if your jail is really there, and if so,
cat /etc/fail2ban/filter.d/sshd.conf
to see if it has bad code in it.
Wayne Sallee
wa...@waynesallee.com
http://www.WayneSallee.com
Original Message
*Subject: * Re: [Fail2ban-users] bans not working
> I've moved ssh to a non-standard port and it has been discovered by
> some hackers. I'm noticing repeated attempts to connect and login
> even though the IPs are supposedly banned.
>
> NOTICE [sshd] 54.34.136.87 already banned
> I do not understand, if I've banned an IP why they're still
On 24/08/2019 6.45 PM, Mike wrote:
> I've moved ssh to a non-standard port and it has been discovered by
> some hackers. I'm noticing repeated attempts to connect and login
> even though the IPs are supposedly banned.
>
> NOTICE [sshd] 54.34.136.87 already banned
> I do not understand, if I'v
I've moved ssh to a non-standard port and it has been discovered by
some hackers. I'm noticing repeated attempts to connect and login
even though the IPs are supposedly banned.
Stuff like this in my log file:
2019-08-24 20:41:04,837 fail2ban.filter [55597]:
INFO[sshd] Found 54