IP ban (Fail2ban) or login lockout

Cannot access panel (:10001) or SSH after many failed attempts — rate limit, Fail2ban and unban.

  1. Distinguish rate limit and Fail2ban

    Rate limit (Settings → Security) blocks only the login form for a few minutes — the page still loads with «Too many login attempts». Fail2ban ban on port 10001 blocks all TCP access to the panel from that IP (timeout/refused) — lasts hours per uadmin-panel-login jail bantime.

  2. Unban via panel

    If you can access the panel from another IP: Security → Banned IPs → Unban. For SSH: same module, sshd jail.

  3. Unban via SSH (root)

    When the panel is unreachable from your IP, connect from hypervisor console, another network or VPN:

    sudo fail2ban-client status
    sudo fail2ban-client status uadmin-panel-login
    sudo fail2ban-client status sshd
    
    # Unban jedne IP:
    sudo fail2ban-client set uadmin-panel-login unbanip YOUR.IP.HERE
    sudo fail2ban-client set sshd unbanip YOUR.IP.HERE
    
    # Privremeno isključi jail:
    sudo fail2ban-client stop uadmin-panel-login
  4. Prevention

    Add trusted IP in Security → Settings → ignoreip before testing brute-force protection. For production use VPN or fixed IP for admin access. Details in «Security module (Fail2ban)» guide.