When an IP is banned by Fail2Ban and you want to un-ban that IP, the command you need to run is:

sudo fail2ban-client set <jailname> unbanip ipaddress

You can get the jailname by running:

sudo fail2ban-client status

If you want to find what IPs are banned by Fail2Ban, you can check the IPTABLES by running:

sudo iptables -L -n

An example output would be:

Chain f2b-sshd (1 references)
target     prot opt source               destination
REJECT     all  --  188.29.164.197       0.0.0.0/0            reject-with icmp-p  ort-unreachable(1 references

To unban IP 188.29.164.197 from the sshd jail, the command would be:

sudo fail2ban-client set sshd unbanip 188.29.164.197

July 28, 2015 admin Linux Tutorial No comments

All my sites have been moved from shared hosting to a Virtual Private Server. Detected multiple hack attempts already 🙁

192.210.192.35 30 failed login attempts to account root (system) — Large number of attempts from this IP: 192.210.192.35 2013-03-11 13:56:27 2013-03-25 13:56:27
198.211.100.83 30 failed login attempts to account xxx (system) — Large number of attempts from this IP: 198.211.100.83 2013-03-11 17:57:24 2013-03-25 17:57:24
58.242.248.20 30 failed login attempts to account root (system) — Large number of attempts from this IP: 58.242.248.20 2013-03-11 23:36:02 2013-03-25 23:36:02
198.211.121.32 30 failed login attempts to account root (system) — Large number of attempts from this IP: 198.211.121.32 2013-03-11 23:33:57 2013-03-25 23:33:57
219.234.141.53 30 failed login attempts to account root (system) — Large number of attempts from this IP: 219.234.141.53 2013-03-13 07:43:19 2013-03-27 07:43:19
42.96.143.110 30 failed login attempts to account root (system) — Large number of attempts from this IP: 42.96.143.110 2013-03-12 23:55:03 2013-03-26 23:55:03
87.28.108.192 30 failed login attempts to account albert (system) — Large number of attempts from this IP: 87.28.108.192 2013-03-13 09:32:16 2013-03-27 09:32:16
1.214.35.220 15 failed login attempts to account root (system) — Large number of attempts from this IP: 1.214.35.220 2013-03-14 15:07:24 2013-03-28 15:07:24
220.174.236.210 15 failed login attempts to account test (system) — Large number of attempts from this IP: 220.174.236.210 2013-03-13 20:23:47 2013-03-27 20:23:47
193.68.63.234 15 failed login attempts to account root (system) — Large number of attempts from this IP: 193.68.63.234 2013-03-14 13:57:45 2013-03-28 13:57:45
198.27.65.106 15 failed login attempts to account root (system) — Large number of attempts from this IP: 198.27.65.106 2013-03-14 03:58:50 2013-03-28 03:58:50
31.210.110.205 15 failed login attempts to account root (system) — Large number of attempts from this IP: 31.210.110.205 2013-03-14 11:48:09 2013-03-28 11:48:09
80.243.185.137 15 failed login attempts to account root (system) — Large number of attempts from this IP: 80.243.185.137 2013-03-14 14:47:13 2013-03-28 14:47:13
119.254.227.60 15 failed login attempts to account root (system) — Large number of attempts from this IP: 119.254.227.60 2013-03-14 23:36:24 2013-03-28 23:36:24
115.95.166.247 15 failed login attempts to account root (system) — Large number of attempts from this IP: 115.95.166.247 2013-03-15 13:51:06 2013-03-29 13:51:06
216.119.158.136 15 failed login attempts to account test4 (system) — Large number of attempts from this IP: 216.119.158.136 2013-03-15 16:12:36 2013-03-29 16:12:36
183.62.57.77 15 failed login attempts to account root (system) — Large number of attempts from this IP: 183.62.57.77 2013-03-15 16:27:03 2013-03-29 16:27:03
125.46.5.42 15 failed login attempts to account www-data (system) — Large number of attempts from this IP: 125.46.5.42 2013-03-15 17:32:32 2013-03-29 17:32:32
31.186.83.104 15 failed login attempts to account root (system) — Large number of attempts from this IP: 31.186.83.104 2013-03-16 00:46:21 2013-03-30 00:46:21
212.55.8.177 15 failed login attempts to account bin (system) — Large number of attempts from this IP: 212.55.8.177 2013-03-16 01:23:22 2013-03-30 01:23:22
58.246.251.230 15 failed login attempts to account root (system) — Large number of attempts from this IP: 58.246.251.230 2013-03-16 09:27:56 2013-03-30 09:27:56
203.251.30.181 15 failed login attempts to account root (system) — Large number of attempts from this IP: 203.251.30.181 2013-03-17 08:29:24 2013-03-31 09:29:24
83.165.217.84 15 failed login attempts to account root (system) — Large number of attempts from this IP: 83.165.217.84 2013-03-17 08:21:52 2013-03-31 09:21:52
198.167.139.249 15 failed login attempts to account root (system) — Large number of attempts from this IP: 198.167.139.249 2013-03-17 12:37:21 2013-03-31 13:37:21
178.18.132.73 15 failed login attempts to account root (system) — Large number of attempts from this IP: 178.18.132.73 2013-03-18 01:21:31 2013-04-01 02:21:31
80.87.20.140 15 failed login attempts to account ssunni730 (system) — Large number of attempts from this IP: 80.87.20.140 2013-03-18 17:42:39 2013-04-01 18:42:39
198.100.103.50 15 failed login attempts to account root (system) — Large number of attempts from this IP: 198.100.103.50 2013-03-18 21:49:19 2013-04-01 22:49:19
200.207.223.73 15 failed login attempts to account root (system) — Large number of attempts from this IP: 200.207.223.73 2013-03-18 13:56:21 2013-04-01 14:56:21
113.10.1.5 15 failed login attempts to account root (system) — Large number of attempts from this IP: 113.10.1.5 2013-03-18 16:28:44 2013-04-01 17:28:44
61.153.98.18 15 failed login attempts to account root (system) — Large number of attempts from this IP: 61.153.98.18 2013-03-19 03:51:51 2013-04-02 04:51:51
61.183.35.174 15 failed login attempts to account root (system) — Large number of attempts from this IP: 61.183.35.174 2013-03-19 10:14:07 2013-04-02 11:14:07
125.23.218.133 15 failed login attempts to account luis (system) — Large number of attempts from this IP: 125.23.218.133 2013-03-19 12:45:14 2013-04-02 13:45:14

March 20, 2013 admin Personal No comments

VPS Panel
Create DNS for domain to use as NS

Creating the A records

Login to WHM and look under DNS Functions.
Click Edit DNS Zone and select the primary domain (the one that appears in your welcome email).
Click the Edit button and wait for the page to load.
Check your New Account Info email for the correct name server IPs.
EXAMPLE:
ns1.resellerdomain.com -> 123.123.123.123
ns2.resellerdomain.com -> 50.50.50.78
(If you only have one IP, please contact HostGator via live chat, telephone or email to obtain both nameserver IP addresses.)
This is exactly the information you need for the record name and address. Almost done!
Back at WHM, scroll down to where you see “Add New Entries Below this Line”.
In the first blank below that line, type ns1
Skip the 14400, and in the drop down select “A”.
A new box will appear. Erase “IP or Hostname” and type your NS1 IP address. EXAMPLE: 123.123.123.123
In the second blank below that line, type ns2
Skip the 14400, and in the drop down select “A”.
A new box will appear. Erase “IP or Hostname” and type your NS2 IP address. EXAMPLE: 50.50.50.78
Scroll all the way down and click the Save button.

March 11, 2013 admin Personal, Reference No comments