Security and protection1 min readUpdated

fail2ban: automatic bans and how to unban

Which behaviour gets an address banned, for how long, and how to free an address that was banned by mistake.

fail2ban reads the logs and bans addresses that behave like attackers, at the firewall, for every application and SSH.

JailBansFor
sshd5 failed SSH or SFTP logins in 10 minutes1 hour
Kept hitting the limitsAddresses that keep hitting the protection limits (about 150 times in 2 minutes)1 hour
Scanners4 requests for typical weak spots (.env, .git, wp-config backups, shells) in 10 minutes1 day
Repeat offenders (recidive)Addresses banned 5 times in a day1 week
Banned addresses per jail, each with an Unban button.
Banned addresses per jail, each with an Unban button.

Unban an address

Security tab, find the address in its jail and press Unban. If a colleague keeps getting banned for SFTP, check their client uses the right key or password and stops after a failure.

Our platform's addresses are never banned.

Did this solve it? If not, tell us what you see and we look at your server.

Open a ticket

Still stuck? Ask a person.

Tickets go straight to the engineers who run ShopWhizzy servers. Tell us the store, what you see and when it started, and we take it from there.