Back
/account/sessions/current 3 times = ban IP ?
Using postman, just made 3 times a GET on service /account/sessions/current 3 times, I get IP banned for 5 mins or so.
Is that by design ?
TL;DR
The user repeatedly made GET requests to '/account/sessions/current' using postman and was subsequently banned from the IP. It is unclear if this is intentional or a glitch. After an hour or so, found my issue :
2023-09-16 19:34:46,372 fail2ban.actions [239]: NOTICE [nginx-unauthorized] Ban XXX.XXX.XXX.XXX
