On 24/08/2019 6.45 PM, Mike wrote: > I've moved ssh to a non-standard port and it has been discovered by > some hackers. I'm noticing repeated attempts to connect and login > even though the IPs are supposedly banned. > > NOTICE [sshd] 54.34.136.87 already banned > I do not understand, if I've banned an IP why they're still getting through? > "Already banned" implies that the IP is banned on another port. Have you changed your filter to ban the new port? Did you unban all of the previously banned standard SSH port IPs?
-- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
