{"action":"created","issue":{"url":"https://api.github.com/repos/fail2ban/fail2ban/issues/1277","labels_url":"https://api.github.com/repos/fail2ban/fail2ban/issues/1277/labels{/name}","comments_url":"https://api.github.com/repos/fail2ban/fail2ban/issues/1277/comments","events_url":"https://api.github.com/repos/fail2ban/fail2ban/issues/1277/events","html_url":"https://github.com/fail2ban/fail2ban/issues/1277","id":123278525,"number":1277,"title":"fail2ban's logfile fills disk in out of memory situation","user":{"login":"Orbixx","id":1606867,"avatar_url":"https://avatars.githubusercontent.com/u/1606867?v=3","gravatar_id":"","url":"https://api.github.com/users/Orbixx","html_url":"https://github.com/Orbixx","followers_url":"https://api.github.com/users/Orbixx/followers","following_url":"https://api.github.com/users/Orbixx/following{/other_user}","gists_url":"https://api.github.com/users/Orbixx/gists{/gist_id}","starred_url":"https://api.github.com/users/Orbixx/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Orbixx/subscriptions","organizations_url":"https://api.github.com/users/Orbixx/orgs","repos_url":"https://api.github.com/users/Orbixx/repos","events_url":"https://api.github.com/users/Orbixx/events{/privacy}","received_events_url":"https://api.github.com/users/Orbixx/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"sebres","id":3769657,"avatar_url":"https://avatars.githubusercontent.com/u/3769657?v=3","gravatar_id":"","url":"https://api.github.com/users/sebres","html_url":"https://github.com/sebres","followers_url":"https://api.github.com/users/sebres/followers","following_url":"https://api.github.com/users/sebres/following{/other_user}","gists_url":"https://api.github.com/users/sebres/gists{/gist_id}","starred_url":"https://api.github.com/users/sebres/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sebres/subscriptions","organizations_url":"https://api.github.com/users/sebres/orgs","repos_url":"https://api.github.com/users/sebres/repos","events_url":"https://api.github.com/users/sebres/events{/privacy}","received_events_url":"https://api.github.com/users/sebres/received_events","type":"User","site_admin":false},"milestone":null,"comments":40,"created_at":"2015-12-21T13:19:52Z","updated_at":"2015-12-22T20:45:18Z","closed_at":null,"body":"So putting aside my memory consumption problem with fail2ban at the moment, which looks like it might be resolved in #1234...\r\n\r\nOnce my system runs out of memory, fail2ban continuously fills its log file with this kind of output:\r\n\r\n```\r\n2015-12-21 09:58:00,065 fail2ban.action         [20922]: ERROR   ipset add fail2ban-sshd 80.82.79.29 timeout 600 -exist -- failed with [Errn\r\no 12] Cannot allocate memory\r\n2015-12-21 09:58:00,065 fail2ban.actions        [20922]: ERROR   Failed to execute ban jail 'sshd' action 'firewallcmd-ipset' info 'CallingM\r\nap({'ipjailmatches': <function <lambda> at 0x7ff8f6d63050>, 'matches': 'Nov 29 00:00:50 server sshd[28731]: pam_unix(sshd:auth): authenticat\r\nion failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.82.79.29  user=ftp\\nNov 29 00:00:52 server sshd[28731]: Failed password for ftp f\r\nrom 80.82.79.29 port 49445 ssh2\\nNov 29 00:00:52 server sshd[28733]: Invalid user test from 80.82.79.29\\nNov 29 00:00:52 server sshd[28733]:\r\n pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.82.79.29\\nNov 29 00:00:54 server sshd[28733]: Fa\r\niled password for invalid user test from 80.82.79.29 port 50032 ssh2\\nNov 29 00:00:55 server sshd[28735]: Invalid user osmc from 80.82.79.29\r\n\\nNov 29 00:00:55 server sshd[28735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.82.79.29\\nN\r\nov 29 00:00:57 server sshd[28735]: Failed password for invalid user osmc from 80.82.79.29 port 50627 ssh2\\nNov 29 00:00:57 server sshd[28737\r\n]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.82.79.29  user=operator\\nNov 29 00:00:59 serve\r\nr sshd[28737]: Failed password for operator from 80.82.79.29 port 51164 ssh2', 'ip': '80.82.79.29', 'ipmatches': <function <lambda> at 0x7ff\r\n8eb237f50>, 'ipfailures': <function <lambda> at 0x7ff8f6d630c8>, 'time': 1450691880.062108, 'failures': 10, 'ipjailfailures': <function <lam\r\nbda> at 0x7ff8f6d63140>})': local variable 'retcode' referenced before assignment\r\n2015-12-21 09:58:00,065 fail2ban.actions        [20922]: NOTICE  [sshd] Ban 81.108.80.81\r\n2015-12-21 09:58:00,068 fail2ban.action         [20922]: ERROR   ipset add fail2ban-sshd 81.108.80.81 timeout 600 -exist -- failed with [Err\r\nno 12] Cannot allocate memory\r\n2015-12-21 09:58:00,068 fail2ban.actions        [20922]: ERROR   Failed to execute ban jail 'sshd' action 'firewallcmd-ipset' info 'CallingM\r\nap({'ipjailmatches': <function <lambda> at 0x7ff8f6d63320>, 'matches': 'Oct  7 22:48:01 server sshd[21573]: Invalid user zhangyan from 81.10\r\n8.80.81\\nOct  7 22:48:01 server sshd[21573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpc41-w\r\natf10-2-0-cust80.15-2.cable.virginm.net\\nOct  7 22:48:03 server sshd[21573]: Failed password for invalid user zhangyan from 81.108.80.81 por\r\nt 57520 ssh2\\nOct  7 22:48:04 server sshd[21575]: Invalid user dff from 81.108.80.81\\nOct  7 22:48:04 server sshd[21575]: pam_unix(sshd:auth\r\n): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpc41-watf10-2-0-cust80.15-2.cable.virginm.net\\nOct  7 22:48:06 server\r\n sshd[21575]: Failed password for invalid user dff from 81.108.80.81 port 58216 ssh2\\nOct  7 22:48:07 server sshd[21577]: pam_unix(sshd:auth\r\n): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpc41-watf10-2-0-cust80.15-2.cable.virginm.net  user=root\\nOct  7 22:4\r\n8:09 server sshd[21577]: Failed password for root from 81.108.80.81 port 59102 ssh2\\nOct  7 22:48:11 server sshd[21579]: pam_unix(sshd:auth)\r\n: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpc41-watf10-2-0-cust80.15-2.cable.virginm.net  user=root\\nOct  7 22:48\r\n:13 server sshd[21579]: Failed password for root from 81.108.80.81 port 59967 ssh2', 'ip': '81.108.80.81', 'ipmatches': <function <lambda> a\r\nt 0x7ff8f6d632a8>, 'ipfailures': <function <lambda> at 0x7ff8f6d63398>, 'time': 1450691880.065618, 'failures': 10, 'ipjailfailures': <functi\r\non <lambda> at 0x7ff8f6d63410>})': local variable 'retcode' referenced before assignment\r\n2015-12-21 09:58:00,069 fail2ban.actions        [20922]: NOTICE  [sshd] Ban 82.138.1.118\r\n2015-12-21 09:58:00,076 fail2ban.action         [20922]: ERROR   ipset add fail2ban-sshd 82.138.1.118 timeout 600 -exist -- failed with [Err\r\nno 12] Cannot allocate memory\r\n2015-12-21 09:58:00,076 fail2ban.actions        [20922]: ERROR   Failed to execute ban jail 'sshd' action 'firewallcmd-ipset' info 'CallingM\r\nap({'ipjailmatches': <function <lambda> at 0x7ff8f6d635f0>, 'matches': 'Nov 17 13:50:06 server sshd[950]: pam_unix(sshd:auth): authenticatio\r\nn failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118  user=root\\nNov 17 13:50:09 server sshd[950]: Failed password for root fr\r\nom 82.138.1.118 port 30695 ssh2\\nNov 17 13:59:45 server sshd[1857]: Invalid user nmis from 82.138.1.118\\nNov 17 13:59:45 server sshd[1857]: \r\npam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 13:59:47 server sshd[1857]: Fai\r\nled password for invalid user nmis from 82.138.1.118 port 20584 ssh2\\nNov 17 14:09:13 server sshd[3223]: pam_unix(sshd:auth): authentication\r\n failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118  user=root\\nNov 17 14:09:14 server sshd[3223]: Failed password for root fr\r\nom 82.138.1.118 port 22207 ssh2\\nNov 17 14:18:28 server sshd[4099]: Invalid user tc from 82.138.1.118\\nNov 17 14:18:28 server sshd[4099]: pa\r\nm_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 14:18:31 server sshd[4099]: Faile\r\nd password for invalid user tc from 82.138.1.118 port 33977 ssh2\\nNov 17 13:50:06 server sshd[950]: pam_unix(sshd:auth): authentication fail\r\nure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118  user=root\\nNov 17 13:50:09 server sshd[950]: Failed password for root from 82.\r\n138.1.118 port 30695 ssh2\\nNov 17 13:59:45 server sshd[1857]: Invalid user nmis from 82.138.1.118\\nNov 17 13:59:45 server sshd[1857]: pam_un\r\nix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 13:59:47 server sshd[1857]: Failed pa\r\nssword for invalid user nmis from 82.138.1.118 port 20584 ssh2\\nNov 17 14:09:13 server sshd[3223]: pam_unix(sshd:auth): authentication failu\r\nre; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118  user=root\\nNov 17 14:09:14 server sshd[3223]: Failed password for root from 82.\r\n138.1.118 port 22207 ssh2\\nNov 17 14:18:28 server sshd[4099]: Invalid user tc from 82.138.1.118\\nNov 17 14:18:28 server sshd[4099]: pam_unix\r\n(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 14:18:31 server sshd[4099]: Failed pass\r\nword for invalid user tc from 82.138.1.118 port 33977 ssh2\\nNov 17 13:50:06 server sshd[950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118  user=root\\nNov 17 13:50:09 server sshd[950]: Failed password for root from 82.138.1.118 port 30695 ssh2\\nNov 17 13:59:45 server sshd[1857]: Invalid user nmis from 82.138.1.118\\nNov 17 13:59:45 server sshd[1857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 13:59:47 server sshd[1857]: Failed password for invalid user nmis from 82.138.1.118 port 20584 ssh2\\nNov 17 14:09:13 server sshd[3223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118  user=root\\nNov 17 14:09:14 server sshd[3223]: Failed password for root from 82.138.1.118 port 22207 ssh2\\nNov 17 14:18:28 server sshd[4099]: Invalid user tc from 82.138.1.118\\nNov 17 14:18:28 server sshd[4099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 14:18:31 server sshd[4099]: Failed password for invalid user tc from 82.138.1.118 port 33977 ssh2\\nNov 17 13:50:06 server sshd[950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118  user=root\\nNov 17 13:50:09 server sshd[950]: Failed password for root from 82.138.1.118 port 30695 ssh2\\nNov 17 13:59:45 server sshd[1857]: Invalid user nmis from 82.138.1.118\\nNov 17 13:59:45 server sshd[1857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 13:59:47 server sshd[1857]: Failed password for invalid user nmis from 82.138.1.118 port 20584 ssh2\\nNov 17 14:09:13 server sshd[3223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118  user=root\\nNov 17 14:09:14 server sshd[3223]: Failed password for root from 82.138.1.118 port 22207 ssh2\\nNov 17 14:18:28 server sshd[4099]: Invalid user tc from 82.138.1.118\\nNov 17 14:18:28 server sshd[4099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 14:18:31 server sshd[4099]: Failed password for invalid user tc from 82.138.1.118 port 33977 ssh2\\nNov 17 15:22:33 server sshd[9160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118  user=root\\nNov 17 15:22:35 server sshd[9160]: Failed password for root from 82.138.1.118 port 21620 ssh2\\nNov 17 15:22:38 server sshd[9160]: Failed password for root from 82.138.1.118 port 21620 ssh2\\nNov 17 15:32:09 server sshd[9489]: Invalid user cisco from 82.138.1.118\\nNov 17 15:32:09 server sshd[9489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 15:32:12 server sshd[9489]: Failed password for invalid user cisco from 82.138.1.118 port 52414 ssh2\\nNov 17 15:41:10 server sshd[9829]: Invalid user Administrator from 82.138.1.118\\nNov 17 15:41:10 server sshd[9829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 15:41:12 server sshd[9829]: Failed password for invalid user Administrator from 82.138.1.118 port 31897 ssh2\\nNov 17 15:59:17 server sshd[10950]: Invalid user unknown from 82.138.1.118\\nNov 17 15:59:17 server sshd[10950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 15:22:33 server sshd[9160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118  user=root\\nNov 17 15:22:35 server sshd[9160]: Failed password for root from 82.138.1.118 port 21620 ssh2\\nNov 17 15:22:38 server sshd[9160]: Failed password for root from 82.138.1.118 port 21620 ssh2\\nNov 17 15:32:09 server sshd[9489]: Invalid user cisco from 82.138.1.118\\nNov 17 15:32:09 server sshd[9489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 15:32:12 server sshd[9489]: Failed password for invalid user cisco from 82.138.1.118 port 52414 ssh2\\nNov 17 15:41:10 server sshd[9829]: Invalid user Administrator from 82.138.1.118\\nNov 17 15:41:10 server sshd[9829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 15:41:12 server sshd[9829]: Failed password for invalid user Administrator from 82.138.1.118 port 31897 ssh2\\nNov 17 15:59:17 server sshd[10950]: Invalid user unknown from 82.138.1.118\\nNov 17 15:59:17 server sshd[10950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 15:59:19 server sshd[10950]: Failed password for invalid user unknown from 82.138.1.118 port 62329 ssh2\\nNov 17 15:22:33 server sshd[9160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118  user=root\\nNov 17 15:22:35 server sshd[9160]: Failed password for root from 82.138.1.118 port 21620 ssh2\\nNov 17 15:22:38 server sshd[9160]: Failed password for root from 82.138.1.118 port 21620 ssh2\\nNov 17 15:32:09 server sshd[9489]: Invalid user cisco from 82.138.1.118\\nNov 17 15:32:09 server sshd[9489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 15:32:12 server sshd[9489]: Failed password for invalid user cisco from 82.138.1.118 port 52414 ssh2\\nNov 17 15:41:10 server sshd[9829]: Invalid user Administrator from 82.138.1.118\\nNov 17 15:41:10 server sshd[9829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 15:41:12 server sshd[9829]: Failed password for invalid user Administrator from 82.138.1.118 port 31897 ssh2\\nNov 17 15:59:17 server sshd[10950]: Invalid user unknown from 82.138.1.118\\nNov 17 15:59:17 server sshd[10950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 15:59:19 server sshd[10950]: Failed password for invalid user unknown from 82.138.1.118 port 62329 ssh2\\nNov 17 16:35:25 server sshd[13765]: Invalid user nsrecover from 82.138.1.118\\nNov 17 16:35:25 server sshd[13765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 16:35:27 server sshd[13765]: Failed password for invalid user nsrecover from 82.138.1.118 port 12501 ssh2\\nNov 17 16:53:32 server sshd[14919]: Invalid user mininet from 82.138.1.118\\nNov 17 16:53:32 server sshd[14919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 16:53:34 server sshd[14919]: Failed password for invalid user mininet from 82.138.1.118 port 48633 ssh2\\nNov 17 17:02:32 server sshd[15267]: Invalid user cubie from 82.138.1.118\\nNov 17 17:02:32 server sshd[15267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:02:35 server sshd[15267]: Failed password for invalid user cubie from 82.138.1.118 port 44108 ssh2\\nNov 17 17:11:36 server sshd[15645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118  user=root\\nNov 17 17:11:38 server sshd[15645]: Failed password for root from 82.138.1.118 port 61287 ssh2\\nNov 17 17:29:35 server sshd[16689]: Invalid user Cisco from 82.138.1.118\\nNov 17 17:29:35 server sshd[16689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:29:36 server sshd[16689]: Failed password for invalid user Cisco from 82.138.1.118 port 40605 ssh2\\nNov 17 17:38:32 server sshd[17006]: Invalid user applmgr from 82.138.1.118\\nNov 17 17:38:32 server sshd[17006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:38:34 server sshd[17006]: Failed password for invalid user applmgr from 82.138.1.118 port 19914 ssh2\\nNov 17 17:47:32 server sshd[17318]: Invalid user vagrant from 82.138.1.118\\nNov 17 17:47:32 server sshd[17318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:47:34 server sshd[17318]: Failed password for invalid user vagrant from 82.138.1.118 port 14406 ssh2\\nNov 17 17:56:32 server sshd[17697]: Invalid user db2inst1 from 82.138.1.118\\nNov 17 17:56:32 server sshd[17697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:29:35 server sshd[16689]: Invalid user Cisco from 82.138.1.118\\nNov 17 17:29:35 server sshd[16689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:29:36 server sshd[16689]: Failed password for invalid user Cisco from 82.138.1.118 port 40605 ssh2\\nNov 17 17:38:32 server sshd[17006]: Invalid user applmgr from 82.138.1.118\\nNov 17 17:38:32 server sshd[17006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:38:34 server sshd[17006]: Failed password for invalid user applmgr from 82.138.1.118 port 19914 ssh2\\nNov 17 17:47:32 server sshd[17318]: Invalid user vagrant from 82.138.1.118\\nNov 17 17:47:32 server sshd[17318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:47:34 server sshd[17318]: Failed password for invalid user vagrant from 82.138.1.118 port 14406 ssh2\\nNov 17 17:56:32 server sshd[17697]: Invalid user db2inst1 from 82.138.1.118\\nNov 17 17:56:32 server sshd[17697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:56:34 server sshd[17697]: Failed password for invalid user db2inst1 from 82.138.1.118 port 22645 ssh2\\nNov 17 17:29:35 server sshd[16689]: Invalid user Cisco from 82.138.1.118\\nNov 17 17:29:35 server sshd[16689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:29:36 server sshd[16689]: Failed password for invalid user Cisco from 82.138.1.118 port 40605 ssh2\\nNov 17 17:38:32 server sshd[17006]: Invalid user applmgr from 82.138.1.118\\nNov 17 17:38:32 server sshd[17006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:38:34 server sshd[17006]: Failed password for invalid user applmgr from 82.138.1.118 port 19914 ssh2\\nNov 17 17:47:32 server sshd[17318]: Invalid user vagrant from 82.138.1.118\\nNov 17 17:47:32 server sshd[17318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:47:34 server sshd[17318]: Failed password for invalid user vagrant from 82.138.1.118 port 14406 ssh2\\nNov 17 17:56:32 server sshd[17697]: Invalid user db2inst1 from 82.138.1.118\\nNov 17 17:56:32 server sshd[17697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:56:34 server sshd[17697]: Failed password for invalid user db2inst1 from 82.138.1.118 port 22645 ssh2\\nNov 17 17:29:35 server sshd[16689]: Invalid user Cisco from 82.138.1.118\\nNov 17 17:29:35 server sshd[16689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:29:36 server sshd[16689]: Failed password for invalid user Cisco from 82.138.1.118 port 40605 ssh2\\nNov 17 17:38:32 server sshd[17006]: Invalid user applmgr from 82.138.1.118\\nNov 17 17:38:32 server sshd[17006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:38:34 server sshd[17006]: Failed password for invalid user applmgr from 82.138.1.118 port 19914 ssh2\\nNov 17 17:47:32 server sshd[17318]: Invalid user vagrant from 82.138.1.118\\nNov 17 17:47:32 server sshd[17318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:47:34 server sshd[17318]: Failed password for invalid user vagrant from 82.138.1.118 port 14406 ssh2\\nNov 17 17:56:32 server sshd[17697]: Invalid user db2inst1 from 82.138.1.118\\nNov 17 17:56:32 server sshd[17697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.138.1.118\\nNov 17 17:56:34 server sshd[17697]: Failed password for invalid user db2inst1 from 82.138.1.118 port 22645 ssh2', 'ip': '82.138.1.118', 'ipmatches': <function <lambda> at 0x7ff8f6d63578>, 'ipfailures': <function <lambda> at 0x7ff8f6d63668>, 'time': 1450691880.069012, 'failures': 133, 'ipjailfailures': <function <lambda> at 0x7ff8f6d636e0>})': local variable 'retcode' referenced before assignment\r\n```\r\n\r\nBeing out of memory is obviously the root cause and should be fixed, but this behaviour should not be occurring either. Can I enable some kind of error output throttling while I try to figure out what is causing this memory issue? Can I reduce the verbosity of these errors?\r\n\r\nCentOS Linux release 7.2.1511 (Core) \r\nfail2ban.noarch 0.9.3-1.el7    epel\r\nPython 2.7.5\r\n\r\nSwitched logging to debug and here's what I get for one instance of the error:\r\n\r\n```\r\n2015-12-21 13:33:47,949 fail2ban.actions        [2204]: NOTICE  [sshd] Ban 80.82.75.56\r\n2015-12-21 13:33:47,950 fail2ban.action         [2204]: DEBUG   \r\n2015-12-21 13:33:47,950 fail2ban.action         [2204]: DEBUG   Nothing to do\r\n2015-12-21 13:33:47,952 fail2ban.action         [2204]: DEBUG   ipset add fail2ban-sshd 80.82.75.56 timeout 600 -exist\r\n2015-12-21 13:33:47,952 fail2ban.action         [2204]: ERROR   ipset add fail2ban-sshd 80.82.75.56 timeout 600 -exist -- failed with [Errno 12] Cannot allocate memory\r\n2015-12-21 13:33:47,952 fail2ban.actions        [2204]: ERROR   Failed to execute ban jail 'sshd' action 'firewallcmd-ipset' info 'CallingMap({'ipjailmatches': <function <lambda> at 0x7ffa9749d140>, 'matches': 'Sep 26 10:48:27 server sshd[29097]: Invalid user ubnt from 80.82.75.56\\nSep 26 10:48:27 server sshd[29097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.82.75.56\\nSep 26 10:48:29 server sshd[29097]: Failed password for invalid user ubnt from 80.82.75.56 port 55879 ssh2\\nSep 26 10:48:30 server sshd[29099]: Invalid user admin from 80.82.75.56\\nSep 26 10:48:30 server sshd[29099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.82.75.56\\nSep 26 10:48:32 server sshd[29099]: Failed password for invalid user admin from 80.82.75.56 port 58003 ssh2\\nSep 26 10:48:33 server sshd[29101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.82.75.56  user=root\\nSep 26 10:48:35 server sshd[29101]: Failed password for root from 80.82.75.56 port 58607 ssh2\\nSep 26 10:48:35 server sshd[29103]: Invalid user user from 80.82.75.56\\nSep 26 10:48:35 server sshd[29103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.82.75.56\\nSep 26 17:05:05 server sshd[12890]: Invalid user ubnt from 80.82.75.56\\nSep 26 17:05:05 server sshd[12890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.82.75.56\\nSep 26 17:05:07 server sshd[12890]: Failed password for invalid user ubnt from 80.82.75.56 port 58827 ssh2\\nSep 26 17:05:08 server sshd[12892]: Invalid user admin from 80.82.75.56\\nSep 26 17:05:08 server sshd[12892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.82.75.56\\nSep 26 17:05:10 server sshd[12892]: Failed password for invalid user admin from 80.82.75.56 port 59523 ssh2\\nSep 26 17:05:13 server sshd[12894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.82.75.56  user=root\\nSep 26 17:05:15 server sshd[12894]: Failed password for root from 80.82.75.56 port 60257 ssh2\\nSep 26 17:05:16 server sshd[12896]: Invalid user user from 80.82.75.56\\nSep 26 17:05:16 server sshd[12896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.82.75.56', 'ip': '80.82.75.56', 'ipmatches': <function <lambda> at 0x7ffa9749d320>, 'ipfailures': <function <lambda> at 0x7ffa9749d0c8>, 'time': 1450704827.94964, 'failures': 20, 'ipjailfailures': <function <lambda> at 0x7ffa9749d050>})': local variable 'retcode' referenced before assignment\r\nTraceback (most recent call last):\r\n  File \"/usr/lib/python2.7/site-packages/fail2ban/server/actions.py\", line 319, in __checkBan\r\n    action.ban(aInfo.copy())\r\n  File \"/usr/lib/python2.7/site-packages/fail2ban/server/action.py\", line 306, in ban\r\n    if not self._processCmd(self.actionban, aInfo):\r\n  File \"/usr/lib/python2.7/site-packages/fail2ban/server/action.py\", line 532, in _processCmd\r\n    return self.executeCmd(realCmd, self.timeout)\r\n  File \"/usr/lib/python2.7/site-packages/fail2ban/server/action.py\", line 592, in executeCmd\r\n    std_level = retcode == 0 and logging.DEBUG or logging.ERROR\r\nUnboundLocalError: local variable 'retcode' referenced before assignment\r\n```\r\n\r\nJust before these errors start spewing out, fail2ban's memory consumption jumps from a nominal amount to filling the entire server's memory."},"comment":{"url":"https://api.github.com/repos/fail2ban/fail2ban/issues/comments/166725561","html_url":"https://github.com/fail2ban/fail2ban/issues/1277#issuecomment-166725561","issue_url":"https://api.github.com/repos/fail2ban/fail2ban/issues/1277","id":166725561,"user":{"login":"sebres","id":3769657,"avatar_url":"https://avatars.githubusercontent.com/u/3769657?v=3","gravatar_id":"","url":"https://api.github.com/users/sebres","html_url":"https://github.com/sebres","followers_url":"https://api.github.com/users/sebres/followers","following_url":"https://api.github.com/users/sebres/following{/other_user}","gists_url":"https://api.github.com/users/sebres/gists{/gist_id}","starred_url":"https://api.github.com/users/sebres/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sebres/subscriptions","organizations_url":"https://api.github.com/users/sebres/orgs","repos_url":"https://api.github.com/users/sebres/repos","events_url":"https://api.github.com/users/sebres/events{/privacy}","received_events_url":"https://api.github.com/users/sebres/received_events","type":"User","site_admin":false},"created_at":"2015-12-22T20:45:18Z","updated_at":"2015-12-22T20:45:18Z","body":"So, I have added a new commit ab7666566105c009b9fc3fcfbf249983cbe73eb5 into my branch https://github.com/sebres/fail2ban/tree/f2b-perfom-prepare-716, to fix this issue. This version of fail2ban will hold only last 50 entries in matches resp. list of failures. \r\nCan you please test it...\r\n\r\nBTW. You should clean up the entries in your database, contains very large data-block (matches are extream large): For example stop f2b, (backup fail2ban.sqlite3-database before) empty table `bans` with the statement `delete from bans` and start f2b again.\r\n"}}