if you wanted to block an IP address after 5 failures in five minutes, you’d set Findtime to 300. maxretry: This sets the maximum number of failed attempts that can be made to access the server from a single IP before a ban is imposed.