> > As I read it none of the events in your log are bans - so recidive would > ignore them. Here are some ban examples: > 2020-03-11 14:03:28 streamingbats fail2ban.actions [1179]: NOTICE > [apache] Ban 5.101.0.209 > 2020-03-11 14:11:11 streamingbats fail2ban.actions [1179]: NOTICE > [postfix] Ban 212.200.118.98 > 2020-03-11 14:11:11 streamingbats fail2ban.actions [1179]: NOTICE > [recidive] Ban 212.200.118.98 >
But there are those "already banned" warnings like the following, so why would the IP have access if it was already banned? 2020-03-11 11:14:38,796 fail2ban.actions [1539290]: WARNING [pam-generic] 150.136.217.144 already banned
_______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users