is it possible to notify me, then the “BanCounter” (fail2ban.jails_in_jail) count in 5 minutes more then 3 new IPs?
Thx for this great tool and your help.
my test-config looks like that:
lookup: average -1m collected_total_raw
warn: $this > 2
delay: down 5m multiplier 1.5 max 1h
info: fail2ban more then 2 in 1 minute