fail2ban banned my ip for SSH.
In email I received that said I got banned via fail2ban after 5 attempts against SSH.
Which is not even truth i wasn't even loging to SSH.
I can still access webmin.
I shut down fail2ban and still same.
iptables -L it shows this.
Chain INPUT (policy ACCEPT) target prot opt source destination fail2ban-SSH tcp -- anywhere anywhere tcp dpt:ssh Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain fail2ban-SSH (1 references) target prot opt source destination RETURN all -- anywhere anywhere
I tried with
fail2ban-client set ssh-iptables unbanip myIP then it returned this: IP myIP is not banned
I tried with this too:
iptables -D fail2ban-ssh-iptables -s myIP -j DROP
And didn't recieve anything and I am still banned.
> fail2ban-client status Status |- Number of jail: 1 `- Jail list: ssh-iptables
I am also getting a lot of this emails:
Banned the following ip addresses on Thu Nov 14 20:05:01 EST 2013 282 with 282 connections
xxx xxx numbers different