Simple? Fail2ban Question

Discussion in 'Server Operation' started by willebanks, Apr 4, 2014.

  1. willebanks

    willebanks New Member

    Hi all,

    Noticed this in the IPTable Rules today.

    -A fail2ban-dovecot-pop3imap -s 201.49.221.34/32 -j DROP

    I have no idea who that IP belongs to or why it is even listed...

    Any thoughts?

    Will Banks
     
    willebanks, Apr 4, 2014
    #1
  2. dcurrey

    dcurrey Member

    Somebody from that ip tried to access your email imap or pop3 and keep using wrong password. Fail2ban blacklisted that ip. It will release it when the bantime expires. Think the default is 600 seconds.
     
    dcurrey, Apr 5, 2014
    #2

Share This Page