Critical Warning in real Action

[SubleXBle]

so I had an combined attack on one of my Webservers recently with ssh and apache-auth
All Attacks (1844) in one Minute : shown by Fail2Ban-Report as Critical Event in 2 Jails within one glance.
Scrolled a bit to see involved IPs, send the Auth Attackers to the blocklists and had the ranges and ISPs of the attacker within under 5 minutes.
So it works, as it can be a nice time-saver.