Restarted f2b and captured some log output..
1. Why would it try to create the f2b-ssh ipset again without checking to
see if it already exists?
2. What's with iptables-restore? Is it mixing firewalld-ipset and multiport?
2020-04-05 09:38:19,590 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- exec: ipset create f2b-sshd hash:ip timeout 600
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -p all -m
multiport --dports ssh -m set --match-set f2b-sshd src -j REJECT
--reject-with icmp-port-unreachable
2020-04-05 09:38:19,591 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'ipset v7.5: Set cannot be created: set with the
same name already exists'
2020-04-05 09:38:19,591 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore
-w -n' failed: iptables-restore v1.8.3 (legacy): multiport needs `-p tcp',
`-p udp', `-p udplite', `-p sctp' or `-p dccp'"
2020-04-05 09:38:19,591 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'Error occurred at line: 2'
2020-04-05 09:38:19,591 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Try `iptables-restore -h' or 'iptables-restore
--help' for more information."
2020-04-05 09:38:19,591 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: ''
2020-04-05 09:38:19,591 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- returned 13
2020-04-05 09:38:19,591 fail2ban.actions [81857]: ERROR Failed to
execute ban jail 'sshd' action 'firewallcmd-ipset' info 'ActionInfo({'ip':
'129.226.134.112', 'family': 'inet4', 'fid': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74dff80>, 'raw-ticket': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74e0680>})': Error starting action
Jail('sshd')/firewallcmd-ipset: 'Script error'
2020-04-05 09:38:19,592 fail2ban.actions [81857]: NOTICE [sshd]
Restore Ban 138.68.18.232
2020-04-05 09:38:19,838 fail2ban.filter [81857]: INFO [sshd]
Found 138.68.18.232 - 2020-04-05 09:34:46
2020-04-05 09:38:19,840 fail2ban.filter [81857]: INFO [sshd]
Found 178.33.45.156 - 2020-04-05 09:35:22
2020-04-05 09:38:19,841 fail2ban.filter [81857]: INFO [sshd]
Found 45.14.38.4 - 2020-04-05 09:35:34
2020-04-05 09:38:19,842 fail2ban.filter [81857]: INFO [sshd]
Found 103.79.79.151 - 2020-04-05 09:36:09
2020-04-05 09:38:19,842 fail2ban.filter [81857]: INFO [sshd]
Found 103.79.79.151 - 2020-04-05 09:36:11
2020-04-05 09:38:19,843 fail2ban.filter [81857]: INFO [sshd]
Found 193.252.189.177 - 2020-04-05 09:36:58
2020-04-05 09:38:19,855 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- exec: ipset create f2b-sshd hash:ip timeout 600
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -p all -m
multiport --dports ssh -m set --match-set f2b-sshd src -j REJECT
--reject-with icmp-port-unreachable
2020-04-05 09:38:19,855 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'ipset v7.5: Set cannot be created: set with the
same name already exists'
2020-04-05 09:38:19,855 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore
-w -n' failed: iptables-restore v1.8.3 (legacy): multiport needs `-p tcp',
`-p udp', `-p udplite', `-p sctp' or `-p dccp'"
2020-04-05 09:38:19,856 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'Error occurred at line: 2'
2020-04-05 09:38:19,856 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Try `iptables-restore -h' or 'iptables-restore
--help' for more information."
2020-04-05 09:38:19,856 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: ''
2020-04-05 09:38:19,856 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- returned 13
2020-04-05 09:38:19,856 fail2ban.actions [81857]: ERROR Failed to
execute ban jail 'sshd' action 'firewallcmd-ipset' info 'ActionInfo({'ip':
'138.68.18.232', 'family': 'inet4', 'fid': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74dff80>, 'raw-ticket': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74e0680>})': Error starting action
Jail('sshd')/firewallcmd-ipset: 'Script error'
2020-04-05 09:38:19,856 fail2ban.actions [81857]: NOTICE [sshd]
Restore Ban 142.93.211.44
2020-04-05 09:38:20,119 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- exec: ipset create f2b-sshd hash:ip timeout 600
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -p all -m
multiport --dports ssh -m set --match-set f2b-sshd src -j REJECT
--reject-with icmp-port-unreachable
2020-04-05 09:38:20,119 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'ipset v7.5: Set cannot be created: set with the
same name already exists'
2020-04-05 09:38:20,119 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore
-w -n' failed: iptables-restore v1.8.3 (legacy): multiport needs `-p tcp',
`-p udp', `-p udplite', `-p sctp' or `-p dccp'"
2020-04-05 09:38:20,119 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'Error occurred at line: 2'
2020-04-05 09:38:20,120 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Try `iptables-restore -h' or 'iptables-restore
--help' for more information."
2020-04-05 09:38:20,120 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: ''
2020-04-05 09:38:20,120 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- returned 13
2020-04-05 09:38:20,120 fail2ban.actions [81857]: ERROR Failed to
execute ban jail 'sshd' action 'firewallcmd-ipset' info 'ActionInfo({'ip':
'142.93.211.44', 'family': 'inet4', 'fid': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74dff80>, 'raw-ticket': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74e0680>})': Error starting action
Jail('sshd')/firewallcmd-ipset: 'Script error'
2020-04-05 09:38:20,120 fail2ban.actions [81857]: NOTICE [sshd]
Restore Ban 157.245.83.8
2020-04-05 09:38:20,395 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- exec: ipset create f2b-sshd hash:ip timeout 600
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -p all -m
multiport --dports ssh -m set --match-set f2b-sshd src -j REJECT
--reject-with icmp-port-unreachable
2020-04-05 09:38:20,395 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'ipset v7.5: Set cannot be created: set with the
same name already exists'
2020-04-05 09:38:20,395 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore
-w -n' failed: iptables-restore v1.8.3 (legacy): multiport needs `-p tcp',
`-p udp', `-p udplite', `-p sctp' or `-p dccp'"
2020-04-05 09:38:20,395 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'Error occurred at line: 2'
2020-04-05 09:38:20,395 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Try `iptables-restore -h' or 'iptables-restore
--help' for more information."
2020-04-05 09:38:20,395 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: ''
2020-04-05 09:38:20,396 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- returned 13
2020-04-05 09:38:20,396 fail2ban.actions [81857]: ERROR Failed to
execute ban jail 'sshd' action 'firewallcmd-ipset' info 'ActionInfo({'ip':
'157.245.83.8', 'family': 'inet4', 'fid': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74dff80>, 'raw-ticket': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74e0680>})': Error starting action
Jail('sshd')/firewallcmd-ipset: 'Script error'
2020-04-05 09:38:20,396 fail2ban.actions [81857]: NOTICE [sshd]
Restore Ban 164.132.225.250
2020-04-05 09:38:20,674 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- exec: ipset create f2b-sshd hash:ip timeout 600
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -p all -m
multiport --dports ssh -m set --match-set f2b-sshd src -j REJECT
--reject-with icmp-port-unreachable
2020-04-05 09:38:20,675 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'ipset v7.5: Set cannot be created: set with the
same name already exists'
2020-04-05 09:38:20,675 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore
-w -n' failed: iptables-restore v1.8.3 (legacy): multiport needs `-p tcp',
`-p udp', `-p udplite', `-p sctp' or `-p dccp'"
2020-04-05 09:38:20,675 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'Error occurred at line: 2'
2020-04-05 09:38:20,675 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Try `iptables-restore -h' or 'iptables-restore
--help' for more information."
2020-04-05 09:38:20,675 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: ''
2020-04-05 09:38:20,675 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- returned 13
2020-04-05 09:38:20,675 fail2ban.actions [81857]: ERROR Failed to
execute ban jail 'sshd' action 'firewallcmd-ipset' info 'ActionInfo({'ip':
'164.132.225.250', 'family': 'inet4', 'fid': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74dff80>, 'raw-ticket': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74e0680>})': Error starting action
Jail('sshd')/firewallcmd-ipset: 'Script error'
2020-04-05 09:38:20,676 fail2ban.actions [81857]: NOTICE [sshd]
Restore Ban 178.33.45.156
2020-04-05 09:38:20,939 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- exec: ipset create f2b-sshd hash:ip timeout 600
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -p all -m
multiport --dports ssh -m set --match-set f2b-sshd src -j REJECT
--reject-with icmp-port-unreachable
2020-04-05 09:38:20,939 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'ipset v7.5: Set cannot be created: set with the
same name already exists'
2020-04-05 09:38:20,939 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore
-w -n' failed: iptables-restore v1.8.3 (legacy): multiport needs `-p tcp',
`-p udp', `-p udplite', `-p sctp' or `-p dccp'"
2020-04-05 09:38:20,939 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'Error occurred at line: 2'
2020-04-05 09:38:20,940 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Try `iptables-restore -h' or 'iptables-restore
--help' for more information."
2020-04-05 09:38:20,940 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: ''
2020-04-05 09:38:20,940 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- returned 13
2020-04-05 09:38:20,940 fail2ban.actions [81857]: ERROR Failed to
execute ban jail 'sshd' action 'firewallcmd-ipset' info 'ActionInfo({'ip':
'178.33.45.156', 'family': 'inet4', 'fid': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74dff80>, 'raw-ticket': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74e0680>})': Error starting action
Jail('sshd')/firewallcmd-ipset: 'Script error'
2020-04-05 09:38:20,940 fail2ban.actions [81857]: NOTICE [sshd]
Restore Ban 182.162.104.153
2020-04-05 09:38:21,204 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- exec: ipset create f2b-sshd hash:ip timeout 600
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -p all -m
multiport --dports ssh -m set --match-set f2b-sshd src -j REJECT
--reject-with icmp-port-unreachable
2020-04-05 09:38:21,204 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'ipset v7.5: Set cannot be created: set with the
same name already exists'
2020-04-05 09:38:21,204 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore
-w -n' failed: iptables-restore v1.8.3 (legacy): multiport needs `-p tcp',
`-p udp', `-p udplite', `-p sctp' or `-p dccp'"
2020-04-05 09:38:21,204 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'Error occurred at line: 2'
2020-04-05 09:38:21,204 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Try `iptables-restore -h' or 'iptables-restore
--help' for more information."
2020-04-05 09:38:21,204 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: ''
2020-04-05 09:38:21,204 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- returned 13
2020-04-05 09:38:21,204 fail2ban.actions [81857]: ERROR Failed to
execute ban jail 'sshd' action 'firewallcmd-ipset' info 'ActionInfo({'ip':
'182.162.104.153', 'family': 'inet4', 'fid': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74dff80>, 'raw-ticket': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74e0680>})': Error starting action
Jail('sshd')/firewallcmd-ipset: 'Script error'
2020-04-05 09:38:21,205 fail2ban.actions [81857]: NOTICE [sshd]
Restore Ban 192.241.255.92
2020-04-05 09:38:21,470 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- exec: ipset create f2b-sshd hash:ip timeout 600
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -p all -m
multiport --dports ssh -m set --match-set f2b-sshd src -j REJECT
--reject-with icmp-port-unreachable
2020-04-05 09:38:21,471 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'ipset v7.5: Set cannot be created: set with the
same name already exists'
2020-04-05 09:38:21,471 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore
-w -n' failed: iptables-restore v1.8.3 (legacy): multiport needs `-p tcp',
`-p udp', `-p udplite', `-p sctp' or `-p dccp'"
2020-04-05 09:38:21,471 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'Error occurred at line: 2'
2020-04-05 09:38:21,471 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Try `iptables-restore -h' or 'iptables-restore
--help' for more information."
2020-04-05 09:38:21,471 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: ''
2020-04-05 09:38:21,471 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- returned 13
2020-04-05 09:38:21,471 fail2ban.actions [81857]: ERROR Failed to
execute ban jail 'sshd' action 'firewallcmd-ipset' info 'ActionInfo({'ip':
'192.241.255.92', 'family': 'inet4', 'fid': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74dff80>, 'raw-ticket': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74e0680>})': Error starting action
Jail('sshd')/firewallcmd-ipset: 'Script error'
2020-04-05 09:38:21,472 fail2ban.actions [81857]: NOTICE [sshd]
Restore Ban 193.252.189.177
2020-04-05 09:38:21,736 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- exec: ipset create f2b-sshd hash:ip timeout 600
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -p all -m
multiport --dports ssh -m set --match-set f2b-sshd src -j REJECT
--reject-with icmp-port-unreachable
2020-04-05 09:38:21,737 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'ipset v7.5: Set cannot be created: set with the
same name already exists'
2020-04-05 09:38:21,737 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore
-w -n' failed: iptables-restore v1.8.3 (legacy): multiport needs `-p tcp',
`-p udp', `-p udplite', `-p sctp' or `-p dccp'"
2020-04-05 09:38:21,737 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'Error occurred at line: 2'
2020-04-05 09:38:21,737 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Try `iptables-restore -h' or 'iptables-restore
--help' for more information."
2020-04-05 09:38:21,737 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: ''
2020-04-05 09:38:21,738 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- returned 13
2020-04-05 09:38:21,738 fail2ban.actions [81857]: ERROR Failed to
execute ban jail 'sshd' action 'firewallcmd-ipset' info 'ActionInfo({'ip':
'193.252.189.177', 'family': 'inet4', 'fid': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74dff80>, 'raw-ticket': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74e0680>})': Error starting action
Jail('sshd')/firewallcmd-ipset: 'Script error'
2020-04-05 09:38:21,738 fail2ban.actions [81857]: NOTICE [sshd]
Restore Ban 206.189.164.136
2020-04-05 09:38:22,008 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- exec: ipset create f2b-sshd hash:ip timeout 600
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -p all -m
multiport --dports ssh -m set --match-set f2b-sshd src -j REJECT
--reject-with icmp-port-unreachable
2020-04-05 09:38:22,009 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'ipset v7.5: Set cannot be created: set with the
same name already exists'
2020-04-05 09:38:22,009 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore
-w -n' failed: iptables-restore v1.8.3 (legacy): multiport needs `-p tcp',
`-p udp', `-p udplite', `-p sctp' or `-p dccp'"
2020-04-05 09:38:22,009 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'Error occurred at line: 2'
2020-04-05 09:38:22,009 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Try `iptables-restore -h' or 'iptables-restore
--help' for more information."
2020-04-05 09:38:22,009 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: ''
2020-04-05 09:38:22,009 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- returned 13
2020-04-05 09:38:22,009 fail2ban.actions [81857]: ERROR Failed to
execute ban jail 'sshd' action 'firewallcmd-ipset' info 'ActionInfo({'ip':
'206.189.164.136', 'family': 'inet4', 'fid': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74dff80>, 'raw-ticket': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74e0680>})': Error starting action
Jail('sshd')/firewallcmd-ipset: 'Script error'
2020-04-05 09:38:22,010 fail2ban.actions [81857]: NOTICE [sshd]
Restore Ban 213.230.67.32
2020-04-05 09:38:22,268 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- exec: ipset create f2b-sshd hash:ip timeout 600
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -p all -m
multiport --dports ssh -m set --match-set f2b-sshd src -j REJECT
--reject-with icmp-port-unreachable
2020-04-05 09:38:22,269 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'ipset v7.5: Set cannot be created: set with the
same name already exists'
2020-04-05 09:38:22,269 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore
-w -n' failed: iptables-restore v1.8.3 (legacy): multiport needs `-p tcp',
`-p udp', `-p udplite', `-p sctp' or `-p dccp'"
2020-04-05 09:38:22,269 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'Error occurred at line: 2'
2020-04-05 09:38:22,269 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Try `iptables-restore -h' or 'iptables-restore
--help' for more information."
2020-04-05 09:38:22,269 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: ''
2020-04-05 09:38:22,269 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- returned 13
2020-04-05 09:38:22,270 fail2ban.actions [81857]: ERROR Failed to
execute ban jail 'sshd' action 'firewallcmd-ipset' info 'ActionInfo({'ip':
'213.230.67.32', 'family': 'inet4', 'fid': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74dff80>, 'raw-ticket': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74e0680>})': Error starting action
Jail('sshd')/firewallcmd-ipset: 'Script error'
2020-04-05 09:38:22,270 fail2ban.actions [81857]: NOTICE [sshd]
Restore Ban 220.149.231.165
2020-04-05 09:38:22,558 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- exec: ipset create f2b-sshd hash:ip timeout 600
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -p all -m
multiport --dports ssh -m set --match-set f2b-sshd src -j REJECT
--reject-with icmp-port-unreachable
2020-04-05 09:38:22,558 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'ipset v7.5: Set cannot be created: set with the
same name already exists'
2020-04-05 09:38:22,558 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore
-w -n' failed: iptables-restore v1.8.3 (legacy): multiport needs `-p tcp',
`-p udp', `-p udplite', `-p sctp' or `-p dccp'"
2020-04-05 09:38:22,559 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'Error occurred at line: 2'
2020-04-05 09:38:22,559 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Try `iptables-restore -h' or 'iptables-restore
--help' for more information."
2020-04-05 09:38:22,559 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: ''
2020-04-05 09:38:22,559 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- returned 13
2020-04-05 09:38:22,559 fail2ban.actions [81857]: ERROR Failed to
execute ban jail 'sshd' action 'firewallcmd-ipset' info 'ActionInfo({'ip':
'220.149.231.165', 'family': 'inet4', 'fid': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74dff80>, 'raw-ticket': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74e0680>})': Error starting action
Jail('sshd')/firewallcmd-ipset: 'Script error'
2020-04-05 09:38:22,559 fail2ban.actions [81857]: NOTICE [sshd]
Restore Ban 45.14.38.4
2020-04-05 09:38:22,817 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- exec: ipset create f2b-sshd hash:ip timeout 600
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -p all -m
multiport --dports ssh -m set --match-set f2b-sshd src -j REJECT
--reject-with icmp-port-unreachable
2020-04-05 09:38:22,818 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'ipset v7.5: Set cannot be created: set with the
same name already exists'
2020-04-05 09:38:22,818 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore
-w -n' failed: iptables-restore v1.8.3 (legacy): multiport needs `-p tcp',
`-p udp', `-p udplite', `-p sctp' or `-p dccp'"
2020-04-05 09:38:22,818 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'Error occurred at line: 2'
2020-04-05 09:38:22,818 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Try `iptables-restore -h' or 'iptables-restore
--help' for more information."
2020-04-05 09:38:22,818 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: ''
2020-04-05 09:38:22,818 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- returned 13
2020-04-05 09:38:22,818 fail2ban.actions [81857]: ERROR Failed to
execute ban jail 'sshd' action 'firewallcmd-ipset' info 'ActionInfo({'ip':
'45.14.38.4', 'family': 'inet4', 'fid': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74dff80>, 'raw-ticket': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74e0680>})': Error starting action
Jail('sshd')/firewallcmd-ipset: 'Script error'
2020-04-05 09:38:22,819 fail2ban.actions [81857]: NOTICE [sshd]
Restore Ban 51.68.121.235
2020-04-05 09:38:23,084 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- exec: ipset create f2b-sshd hash:ip timeout 600
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -p all -m
multiport --dports ssh -m set --match-set f2b-sshd src -j REJECT
--reject-with icmp-port-unreachable
2020-04-05 09:38:23,085 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'ipset v7.5: Set cannot be created: set with the
same name already exists'
2020-04-05 09:38:23,085 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore
-w -n' failed: iptables-restore v1.8.3 (legacy): multiport needs `-p tcp',
`-p udp', `-p udplite', `-p sctp' or `-p dccp'"
2020-04-05 09:38:23,085 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'Error occurred at line: 2'
2020-04-05 09:38:23,085 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Try `iptables-restore -h' or 'iptables-restore
--help' for more information."
2020-04-05 09:38:23,085 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: ''
2020-04-05 09:38:23,085 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- returned 13
2020-04-05 09:38:23,085 fail2ban.actions [81857]: ERROR Failed to
execute ban jail 'sshd' action 'firewallcmd-ipset' info 'ActionInfo({'ip':
'51.68.121.235', 'family': 'inet4', 'fid': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74dff80>, 'raw-ticket': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74e0680>})': Error starting action
Jail('sshd')/firewallcmd-ipset: 'Script error'
2020-04-05 09:38:23,086 fail2ban.actions [81857]: NOTICE [sshd]
Restore Ban 79.137.82.213
2020-04-05 09:38:23,366 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- exec: ipset create f2b-sshd hash:ip timeout 600
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -p all -m
multiport --dports ssh -m set --match-set f2b-sshd src -j REJECT
--reject-with icmp-port-unreachable
2020-04-05 09:38:23,367 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'ipset v7.5: Set cannot be created: set with the
same name already exists'
2020-04-05 09:38:23,367 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore
-w -n' failed: iptables-restore v1.8.3 (legacy): multiport needs `-p tcp',
`-p udp', `-p udplite', `-p sctp' or `-p dccp'"
2020-04-05 09:38:23,367 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'Error occurred at line: 2'
2020-04-05 09:38:23,367 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Try `iptables-restore -h' or 'iptables-restore
--help' for more information."
2020-04-05 09:38:23,367 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: ''
2020-04-05 09:38:23,367 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- returned 13
2020-04-05 09:38:23,367 fail2ban.actions [81857]: ERROR Failed to
execute ban jail 'sshd' action 'firewallcmd-ipset' info 'ActionInfo({'ip':
'79.137.82.213', 'family': 'inet4', 'fid': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74dff80>, 'raw-ticket': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74e0680>})': Error starting action
Jail('sshd')/firewallcmd-ipset: 'Script error'
2020-04-05 09:38:23,368 fail2ban.actions [81857]: NOTICE [sshd]
Restore Ban 80.58.155.116
2020-04-05 09:38:23,649 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- exec: ipset create f2b-sshd hash:ip timeout 600
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -p all -m
multiport --dports ssh -m set --match-set f2b-sshd src -j REJECT
--reject-with icmp-port-unreachable
2020-04-05 09:38:23,649 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'ipset v7.5: Set cannot be created: set with the
same name already exists'
2020-04-05 09:38:23,649 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Error: COMMAND_FAILED: '/usr/sbin/iptables-restore
-w -n' failed: iptables-restore v1.8.3 (legacy): multiport needs `-p tcp',
`-p udp', `-p udplite', `-p sctp' or `-p dccp'"
2020-04-05 09:38:23,649 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: 'Error occurred at line: 2'
2020-04-05 09:38:23,649 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: "Try `iptables-restore -h' or 'iptables-restore
--help' for more information."
2020-04-05 09:38:23,649 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- stderr: ''
2020-04-05 09:38:23,649 fail2ban.utils [81857]: ERROR
7f7cb74c9ad0 -- returned 13
2020-04-05 09:38:23,649 fail2ban.actions [81857]: ERROR Failed to
execute ban jail 'sshd' action 'firewallcmd-ipset' info 'ActionInfo({'ip':
'80.58.155.116', 'family': 'inet4', 'fid': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74dff80>, 'raw-ticket': <function
Actions.ActionInfo.<lambda> at 0x7f7cb74e0680>})': Error starting action
Jail('sshd')/firewallcmd-ipset: 'Script error'
2020-04-05 09:38:23,650 fail2ban.actions [81857]: WARNING [sshd]
45.14.38.4 already banned
2020-04-05 09:38:23,650 fail2ban.actions [81857]: WARNING [sshd]
138.68.18.232 already banned
2020-04-05 09:38:23,650 fail2ban.actions [81857]: WARNING [sshd]
79.137.82.213 already banned
2020-04-05 09:38:23,650 fail2ban.actions [81857]: WARNING [sshd]
178.33.45.156 already banned
2020-04-05 09:38:23,650 fail2ban.actions [81857]: WARNING [sshd]
142.93.211.44 already banned
2020-04-05 09:38:23,650 fail2ban.actions [81857]: WARNING [sshd]
103.79.79.151 already banned
2020-04-05 09:38:23,650 fail2ban.actions [81857]: WARNING [sshd]
182.162.104.153 already banned
2020-04-05 09:38:23,650 fail2ban.actions [81857]: WARNING [sshd]
129.226.134.112 already banned
2020-04-05 09:38:23,651 fail2ban.actions [81857]: WARNING [sshd]
193.252.189.177 already banned
2020-04-05 09:38:23,651 fail2ban.actions [81857]: WARNING [sshd]
45.14.38.4 already banned
2020-04-05 09:38:23,851 fail2ban.actions [81857]: WARNING [sshd]
138.68.18.232 already banned
2020-04-05 09:38:23,851 fail2ban.actions [81857]: WARNING [sshd]
103.79.79.151 already banned
2020-04-05 09:38:23,852 fail2ban.actions [81857]: WARNING [sshd]
182.162.104.153 already banned
2020-04-05 09:38:23,852 fail2ban.actions [81857]: WARNING [sshd]
45.14.38.4 already banned
2020-04-05 09:38:23,852 fail2ban.actions [81857]: WARNING [sshd]
138.68.18.232 already banned
2020-04-05 09:38:23,852 fail2ban.actions [81857]: WARNING [sshd]
193.252.189.177 already banned
Thanks,
Richard
>
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
