Fail2ban blocking long working extension

FreePBX Security
1

running on Freepbx17 with latest updates.

Freepbx IP is 192.168.50.70 one extension on my home subnet with IP 192.168.55.134 got banned by Fail2ban after weeks of working without issues. Both networks are connected by site to site VPNs and I had no problem accessing web interface from ..55 subnet.

Its definitely not related to vpn setup because we have 6 more subnets with identical setup with 4-8 extensions on each currently working without issues.

192.168.55.0 network was assigned Trusted(excluded from firewall) I tried changing it to Local trusted and still got banned.

Changed passwords on both ends and still got banned

Tried whitelisting and also got banned.

What finally helped is deleting extension and creating a new one with different number. Now extension is registered with the same IP but different extension number.

Any idea what caused it

2

Do you mean 192.168.55.0/24 rather than 192.168.55.00?

3

Typo corrected

4

Can you share the fail2ban logs to see if the asterisk jail is blocking that ip ?

grep -r “192.168.55.134” /var/log/fail2ban.log*

5

IP was definetly blocked by fail2ban becuase i received email notifications from fail2ban.

i dont understand why it was blocked suddenly and why its working again when i changed the extension number.

network was set as trusted and IP whitelisted. when i changed extension number it registered right away, while IP didnt change.

Im just trying to understand what else could trigger fail2ban to sudently block working extension

6

We will need the logs tho, so we can see what’s the jail involved here.

7

grep -r “192.168.55.134” /var/log/fail2ban.log*

did not provide any results

when i openned log file it was full of [‘get’, ‘ignoreip’] and [‘set’, ‘addignoreip’, ‘’] errors

found few topics on this bug and will try patching on friday

Screenshot from 2026-02-23 09-10-05
Screenshot from 2026-02-23 09-10-05494×113 11.1 KB

8

It worked without quotes

grep 192.168.55.134 /var/log/fail2ban.log*

here is part of it

first line repeats since begining of the log 2026-02-15 every 5 minutes or so i cut it out

… /var/log/fail2ban.log-20260222:2026-02-17 19:55:14,208 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘apache-api’, ‘delignoreip’, ‘192.168.55.134’] has failed. Received ValueError(‘list.remove(x): x not in list’)
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14 : delignoreip 192.168.55.134 in jail apache-api
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14 : delignoreip 192.168.55.134 in jail apache-api
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14,324 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘apache-badbots’, ‘delignoreip’, ‘192.168.55.134’] has failed. Received ValueError(‘list.remove(x): x not in list’)
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14 : delignoreip 192.168.55.134 in jail apache-badbots
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14 : delignoreip 192.168.55.134 in jail apache-badbots
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14,439 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘apache-tcpwrapper’, ‘delignoreip’, ‘192.168.55.134’] has failed. Received ValueError(‘list.remove(x): x not in list’)
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14 : delignoreip 192.168.55.134 in jail apache-tcpwrapper
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14 : delignoreip 192.168.55.134 in jail apache-tcpwrapper
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14,562 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘asterisk-iptables’, ‘delignoreip’, ‘192.168.55.134’] has failed. Received ValueError(‘list.remove(x): x not in list’)
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14 : delignoreip 192.168.55.134 in jail asterisk-iptables
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14 : delignoreip 192.168.55.134 in jail asterisk-iptables
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14,675 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘openvpn’, ‘delignoreip’, ‘192.168.55.134’] has failed. Received ValueError(‘list.remove(x): x not in list’)
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14 : delignoreip 192.168.55.134 in jail openvpn
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14 : delignoreip 192.168.55.134 in jail openvpn
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14,788 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘pbx-gui’, ‘delignoreip’, ‘192.168.55.134’] has failed. Received ValueError(‘list.remove(x): x not in list’)
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14 : delignoreip 192.168.55.134 in jail pbx-gui
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14 : delignoreip 192.168.55.134 in jail pbx-gui
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14,901 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘recidive’, ‘delignoreip’, ‘192.168.55.134’] has failed. Received ValueError(‘list.remove(x): x not in list’)
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14 : delignoreip 192.168.55.134 in jail recidive
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14 : delignoreip 192.168.55.134 in jail recidive
/var/log/fail2ban.log-20260222:2026-02-17 19:55:15,011 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘ssh-iptables’, ‘delignoreip’, ‘192.168.55.134’] has failed. Received ValueError(‘list.remove(x): x not in list’)
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14 : delignoreip 192.168.55.134 in jail ssh-iptables
/var/log/fail2ban.log-20260222:2026-02-17 19:55:14 : delignoreip 192.168.55.134 in jail ssh-iptables
/var/log/fail2ban.log-20260222:2026-02-17 19:55:15,126 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘sshd’, ‘delignoreip’, ‘192.168.55.134’] has failed. Received ValueError(‘list.remove(x): x not in list’)
/var/log/fail2ban.log-20260222:2026-02-17 19:55:15 : delignoreip 192.168.55.134 in jail sshd
/var/log/fail2ban.log-20260222:2026-02-17 19:55:15 : delignoreip 192.168.55.134 in jail sshd
/var/log/fail2ban.log-20260222:2026-02-17 19:55:15,249 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘vsftpd-iptables’, ‘delignoreip’, ‘192.168.55.134’] has failed. Received ValueError(‘list.remove(x): x not in list’)
/var/log/fail2ban.log-20260222:2026-02-17 19:55:15 : delignoreip 192.168.55.134 in jail vsftpd-iptables
/var/log/fail2ban.log-20260222:2026-02-17 19:55:15 : delignoreip 192.168.55.134 in jail vsftpd-iptables
/var/log/fail2ban.log-20260222:2026-02-17 20:01:00 : addignoreip 192.168.55.134 in jail apache-api
/var/log/fail2ban.log-20260222:2026-02-17 20:01:00 : addignoreip 192.168.55.134 in jail apache-api
/var/log/fail2ban.log-20260222:2026-02-17 20:01:00 : addignoreip 192.168.55.134 in jail apache-badbots
/var/log/fail2ban.log-20260222:2026-02-17 20:01:00 : addignoreip 192.168.55.134 in jail apache-badbots
/var/log/fail2ban.log-20260222:2026-02-17 20:01:00 : addignoreip 192.168.55.134 in jail apache-tcpwrapper
/var/log/fail2ban.log-20260222:2026-02-17 20:01:00 : addignoreip 192.168.55.134 in jail apache-tcpwrapper
/var/log/fail2ban.log-20260222:2026-02-17 20:01:00 : addignoreip 192.168.55.134 in jail asterisk-iptables
/var/log/fail2ban.log-20260222:2026-02-17 20:01:00 : addignoreip 192.168.55.134 in jail asterisk-iptables
/var/log/fail2ban.log-20260222:2026-02-17 20:01:01 : addignoreip 192.168.55.134 in jail openvpn
/var/log/fail2ban.log-20260222:2026-02-17 20:01:01 : addignoreip 192.168.55.134 in jail openvpn
/var/log/fail2ban.log-20260222:2026-02-17 20:01:01 : addignoreip 192.168.55.134 in jail pbx-gui
/var/log/fail2ban.log-20260222:2026-02-17 20:01:01 : addignoreip 192.168.55.134 in jail pbx-gui
/var/log/fail2ban.log-20260222:2026-02-17 20:01:01 : addignoreip 192.168.55.134 in jail recidive
/var/log/fail2ban.log-20260222:2026-02-17 20:01:01 : addignoreip 192.168.55.134 in jail recidive
/var/log/fail2ban.log-20260222:2026-02-17 20:01:01 : addignoreip 192.168.55.134 in jail ssh-iptables
/var/log/fail2ban.log-20260222:2026-02-17 20:01:01 : addignoreip 192.168.55.134 in jail ssh-iptables
/var/log/fail2ban.log-20260222:2026-02-17 20:01:01 : addignoreip 192.168.55.134 in jail sshd
/var/log/fail2ban.log-20260222:2026-02-17 20:01:01 : addignoreip 192.168.55.134 in jail sshd
/var/log/fail2ban.log-20260222:2026-02-17 20:01:01 : addignoreip 192.168.55.134 in jail vsftpd-iptables
/var/log/fail2ban.log-20260222:2026-02-17 20:01:01 : addignoreip 192.168.55.134 in jail vsftpd-iptables
/var/log/fail2ban.log-20260222:2026-02-17 20:01:03,121 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 20:05:46,160 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 20:10:14,875 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 20:15:20,756 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 20:20:28,102 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 20:25:51,198 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 20:30:52,533 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 20:35:43,032 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 20:41:05,053 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 20:45:48,019 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 20:50:45,258 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 20:55:49,613 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 21:01:01,072 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 21:05:13,288 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 21:10:25,259 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 21:15:45,499 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 21:20:19,424 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 21:25:46,422 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 21:30:10,713 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 21:35:58,919 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 21:40:18,477 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 21:45:59,813 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 21:50:07,325 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 21:55:14,618 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 22:00:49,520 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 22:05:19,685 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 22:11:04,728 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 22:15:55,332 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 22:20:51,730 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 22:25:06,253 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 22:33:20,851 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 22:35:40,180 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 22:40:59,744 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 22:45:20,039 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 22:50:54,291 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 22:55:49,554 fail2ban.transmitter [2098]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-17 23:03:16,461 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-17 23:03:16
/var/log/fail2ban.log-20260222:2026-02-17 23:03:16,462 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-17 23:03:16
/var/log/fail2ban.log-20260222:2026-02-17 23:03:16,463 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-17 23:03:16
/var/log/fail2ban.log-20260222:2026-02-17 23:03:16,465 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-17 23:03:16
/var/log/fail2ban.log-20260222:2026-02-17 23:03:16,466 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-17 23:03:16
/var/log/fail2ban.log-20260222:2026-02-17 23:03:16,467 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-17 23:03:16
/var/log/fail2ban.log-20260222:2026-02-17 23:03:16,468 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-17 23:03:16
/var/log/fail2ban.log-20260222:2026-02-17 23:03:16,469 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-17 23:03:16
/var/log/fail2ban.log-20260222:2026-02-17 23:03:16,470 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-17 23:03:16
/var/log/fail2ban.log-20260222:2026-02-17 23:03:16,471 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-17 23:03:16
/var/log/fail2ban.log-20260222:2026-02-17 23:03:16,472 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-17 23:03:16
/var/log/fail2ban.log-20260222:2026-02-17 23:03:16,474 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-17 23:03:16
/var/log/fail2ban.log-20260222:2026-02-17 23:03:16,555 fail2ban.actions [1817]: NOTICE [asterisk-iptables] Ban 192.168.55.134
/var/log/fail2ban.log-20260222:2026-02-17 23:03:16,562 fail2ban.filter [1817]: INFO [recidive] Found 192.168.55.134 - 2026-02-17 23:03:16
/var/log/fail2ban.log-20260222:2026-02-18 23:03:16,467 fail2ban.actions [1817]: NOTICE [asterisk-iptables] Unban 192.168.55.134
/var/log/fail2ban.log-20260222:2026-02-18 23:03:17,952 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-18 23:03:17
/var/log/fail2ban.log-20260222:2026-02-18 23:03:17,953 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-18 23:03:17
/var/log/fail2ban.log-20260222:2026-02-18 23:03:17,980 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-18 23:03:17
/var/log/fail2ban.log-20260222:2026-02-18 23:03:17,981 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-18 23:03:17
/var/log/fail2ban.log-20260222:2026-02-18 23:03:18,008 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-18 23:03:18
/var/log/fail2ban.log-20260222:2026-02-18 23:03:18,009 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-18 23:03:18
/var/log/fail2ban.log-20260222:2026-02-18 23:03:18,030 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-18 23:03:18
/var/log/fail2ban.log-20260222:2026-02-18 23:03:18,031 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-18 23:03:18
/var/log/fail2ban.log-20260222:2026-02-18 23:03:18,032 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-18 23:03:18
/var/log/fail2ban.log-20260222:2026-02-18 23:03:18,033 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-18 23:03:18
/var/log/fail2ban.log-20260222:2026-02-18 23:03:18,508 fail2ban.actions [1817]: NOTICE [asterisk-iptables] Ban 192.168.55.134
/var/log/fail2ban.log-20260222:2026-02-18 23:03:18,515 fail2ban.filter [1817]: INFO [recidive] Found 192.168.55.134 - 2026-02-18 23:03:18
/var/log/fail2ban.log-20260222:2026-02-19 08:47:10,438 fail2ban.actions [1817]: NOTICE [asterisk-iptables] Unban 192.168.55.134
/var/log/fail2ban.log-20260222:2026-02-19 08:47:10 : unbanip 192.168.55.134 in jail asterisk-iptables
/var/log/fail2ban.log-20260222:2026-02-19 08:47:36,958 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-19 08:47:36
/var/log/fail2ban.log-20260222:2026-02-19 08:47:36,959 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-19 08:47:36
/var/log/fail2ban.log-20260222:2026-02-19 08:47:36,982 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-19 08:47:36
/var/log/fail2ban.log-20260222:2026-02-19 08:47:36,983 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-19 08:47:36
/var/log/fail2ban.log-20260222:2026-02-19 08:47:37,002 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-19 08:47:36
/var/log/fail2ban.log-20260222:2026-02-19 08:47:37,002 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-19 08:47:36
/var/log/fail2ban.log-20260222:2026-02-19 08:47:37,029 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-19 08:47:37
/var/log/fail2ban.log-20260222:2026-02-19 08:47:37,030 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-19 08:47:37
/var/log/fail2ban.log-20260222:2026-02-19 08:47:37,031 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-19 08:47:37
/var/log/fail2ban.log-20260222:2026-02-19 08:47:37,032 fail2ban.filter [1817]: INFO [asterisk-iptables] Found 192.168.55.134 - 2026-02-19 08:47:37
/var/log/fail2ban.log-20260222:2026-02-19 08:47:37,126 fail2ban.actions [1817]: NOTICE [asterisk-iptables] Ban 192.168.55.134
/var/log/fail2ban.log-20260222:2026-02-19 08:47:37,133 fail2ban.filter [1817]: INFO [recidive] Found 192.168.55.134 - 2026-02-19 08:47:37
/var/log/fail2ban.log-20260222:2026-02-19 08:50:32 : addignoreip 192.168.55.134 in jail apache-api
/var/log/fail2ban.log-20260222:2026-02-19 08:50:32 : addignoreip 192.168.55.134 in jail apache-badbots
/var/log/fail2ban.log-20260222:2026-02-19 08:50:33 : addignoreip 192.168.55.134 in jail apache-tcpwrapper
/var/log/fail2ban.log-20260222:2026-02-19 08:50:33 : addignoreip 192.168.55.134 in jail asterisk-iptables
/var/log/fail2ban.log-20260222:2026-02-19 08:50:33 : addignoreip 192.168.55.134 in jail openvpn
/var/log/fail2ban.log-20260222:2026-02-19 08:50:33 : addignoreip 192.168.55.134 in jail pbx-gui
/var/log/fail2ban.log-20260222:2026-02-19 08:50:33 : addignoreip 192.168.55.134 in jail pbx-gui
/var/log/fail2ban.log-20260222:2026-02-19 08:50:33 : addignoreip 192.168.55.134 in jail recidive
/var/log/fail2ban.log-20260222:2026-02-19 08:50:33 : addignoreip 192.168.55.134 in jail recidive
/var/log/fail2ban.log-20260222:2026-02-19 08:50:33 : addignoreip 192.168.55.134 in jail ssh-iptables
/var/log/fail2ban.log-20260222:2026-02-19 08:50:33 : addignoreip 192.168.55.134 in jail ssh-iptables
/var/log/fail2ban.log-20260222:2026-02-19 08:50:33 : addignoreip 192.168.55.134 in jail sshd
/var/log/fail2ban.log-20260222:2026-02-19 08:50:33 : addignoreip 192.168.55.134 in jail sshd
/var/log/fail2ban.log-20260222:2026-02-19 08:50:33 : addignoreip 192.168.55.134 in jail vsftpd-iptables
/var/log/fail2ban.log-20260222:2026-02-19 08:50:33 : addignoreip 192.168.55.134 in jail vsftpd-iptables
/var/log/fail2ban.log-20260222:2026-02-19 08:50:34,263 fail2ban.actions [1817]: NOTICE [asterisk-iptables] Unban 192.168.55.134
/var/log/fail2ban.log-20260222:2026-02-19 08:50:34 : unbanip 192.168.55.134 in jail asterisk-iptables
/var/log/fail2ban.log-20260222:2026-02-19 08:50:34 : unbanip 192.168.55.134 in jail asterisk-iptables
/var/log/fail2ban.log-20260222:2026-02-19 08:50:36,378 fail2ban.transmitter [1817]: ERROR Command [‘set’, ‘addignoreip’, ‘192.168.55.134’] has failed. Received Exception(“Invalid command ‘192.168.55.134’ (no set action or not yet implemented)”)
/var/log/fail2ban.log-20260222:2026-02-19 08:51:27,075 fail2ban.filter [1817]: INFO [asterisk-iptables] Ignore 192.168.55.134 by ip
/var/log/fail2ban.log-20260222:2026-02-19 08:51:27,075 fail2ban.filter [1817]: INFO [asterisk-iptables] Ignore 192.168.55.134 by ip
/var/log/fail2ban.log-20260222:2026-02-19 08:51:27,102 fail2ban.filter [1817]: INFO [asterisk-iptables] Ignore 192.168.55.134 by ip
/var/log/fail2ban.log-20260222:2026-02-19 08:51:27,102 fail2ban.filter [1817]: INFO [asterisk-iptables] Ignore 192.168.55.134 by ip
/var/log/fail2ban.log-20260222:2026-02-19 08:51:27,130 fail2ban.filter [1817]: INFO [asterisk-iptables] Ignore 192.168.55.134 by ip …
keeps repeating last entry another few hundred times

9

Did you try to upgrade sysadmin module ?
I think we had a bug months ago.

10

everything is up to date

Screenshot from 2026-02-24 10-11-37
Screenshot from 2026-02-24 10-11-37635×193 19.2 KB

11

Can you paste the output from this command?
cat /etc/fail2ban/jail.local

12

***********:~# cat /etc/fail2ban/jail.local

Configuration automatically generated via the Sysadmin Module

This file will be overwritten by Sysadmin on startup. If you modify

this file, your changes will be lost. DO NOT MODIFY THIS FILE!

generated: Tue, 24 Feb 2026 18:11:33 +0000

[DEFAULT]
ignoreip = 127.0.0.1 127.0.1.1 192.168.50.70
sendername = *****PBX Alerts
bantime = 86400
findtime = 600
maxretry = 8
backend = auto

[asterisk-iptables]
enabled = true
filter = asterisk
action = iptables-allports[name=SIP, protocol=all]
sendmail[name=SIP, [email protected]**, sender=noreply@**.com]
logpath = /var/log/asterisk/fail2ban

[pbx-gui]
enabled = true
filter = freepbx
action = iptables-allports[name=PBX-GUI, protocol=all]
sendmail[name=PBX-GUI, [email protected]**, sender=noreply@**.com]
logpath = /var/log/asterisk/freepbx_security.log

[ssh-iptables]
enabled = true
filter = sshd
action = iptables-multiport[name=SSH, protocol=tcp, port=ssh]
sendmail[name=SSH, [email protected]**, sender=noreply@**.com]
logpath = /var/log/auth.log

[apache-tcpwrapper]
enabled = true
filter = apache-auth
action = iptables-allports[name=apache-auth, protocol=all]
sendmail[name=apache-auth, [email protected]**, sender=noreply@**.com]
logpath = /var/log/apache2/error.log

[vsftpd-iptables]
enabled = true
filter = vsftpd
action = iptables-multiport[name=FTP, protocol=tcp, port=ftp]
sendmail[name=FTP, [email protected]**, sender=noreply@**.com]
logpath = /var/log/vsftpd.log

[apache-badbots]
enabled = true
filter = apache-badbots
action = iptables-multiport[name=BadBots, protocol=tcp, port=“http,https”]
sendmail[name=BadBots, [email protected]**, sender=noreply@**.com]
logpath = /var/log/apache2/*access.log

[apache-api]
enabled = true
filter = apache-api
action = iptables-multiport[name=api, protocol=tcp, port=“http,https”]
sendmail[name=api, [email protected]**, sender=noreply@**.com]
logpath = /var/log/apache2/*access.log

[openvpn]
enabled = true
filter = openvpn
action = iptables-multiport[name=openvpn, protocol=udp, port=1194]
sendmail[name=openvpn, [email protected]**, sender=noreply@**.com]
logpath = /var/log/openvpn.log

[sshd]
enabled = true
filter = sshd
action = iptables-multiport[name=sshd, protocol=tcp, port=ssh]
sendmail[name=sshd, [email protected]**, sender=noreply@**.com]
logpath = /var/log/asterisk/fail2ban

[recidive]

recidivist.

Noun: A convicted criminal who reoffends, especially repeatedly.

enabled = true
filter = recidive
logpath = /var/log/fail2ban.log*
action = iptables-allports[name=recidive, protocol=all]
sendmail[name=recidive, [email protected]**, sender=noreply@**.com]
bantime = 604800 ; 1 week
findtime = 86400 ; 1 day
maxretry = 20

13

What’s the IP that it’s being banned?
Cause the only whitelisted IP is 192.168.50.70, and I see others in the log.

If that’s not the ip banned, add it to the whitelist: fwconsole firewall trust THAT-IP

14

I have a lot of whitelisted IPs through Web GUI in the Intrusion Detection, I dont know where freepbx stores them, but they are somewhere and none of them are being banned suddently, it only happened to one of them after months of working properly.
I added another IP to Whitelist for testing purposes and thats what was generated in fail2ban.log

2026-02-24 11:55:05 : addignoreip 192.168.55.40 in jail apache-api
2026-02-24 11:55:05 : addignoreip 192.168.55.40 in jail apache-api
2026-02-24 11:55:06 : addignoreip 192.168.55.40 in jail apache-badbots
2026-02-24 11:55:06 : addignoreip 192.168.55.40 in jail apache-badbots
2026-02-24 11:55:06 : addignoreip 192.168.55.40 in jail apache-tcpwrapper
2026-02-24 11:55:06 : addignoreip 192.168.55.40 in jail apache-tcpwrapper
2026-02-24 11:55:06 : addignoreip 192.168.55.40 in jail asterisk-iptables
2026-02-24 11:55:06 : addignoreip 192.168.55.40 in jail asterisk-iptables
2026-02-24 11:55:06 : addignoreip 192.168.55.40 in jail openvpn
2026-02-24 11:55:06 : addignoreip 192.168.55.40 in jail openvpn
2026-02-24 11:55:06 : addignoreip 192.168.55.40 in jail pbx-gui
2026-02-24 11:55:06 : addignoreip 192.168.55.40 in jail pbx-gui
2026-02-24 11:55:06 : addignoreip 192.168.55.40 in jail recidive
2026-02-24 11:55:06 : addignoreip 192.168.55.40 in jail recidive
2026-02-24 11:55:06 : addignoreip 192.168.55.40 in jail ssh-iptables
2026-02-24 11:55:06 : addignoreip 192.168.55.40 in jail ssh-iptables
2026-02-24 11:55:06 : addignoreip 192.168.55.40 in jail sshd
2026-02-24 11:55:06 : addignoreip 192.168.55.40 in jail sshd
2026-02-24 11:55:07 : addignoreip 192.168.55.40 in jail vsftpd-iptables
2026-02-24 11:55:07 : addignoreip 192.168.55.40 in jail vsftpd-iptables

15

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.