cPHulk - Blacklisted IPs Still Appear In The One-Day Blocks History Report

[frontsysFDS]

Hi

I have cPHulk set up to automatically add IPs to the blacklist once they trigger my configuration settings, which works fine.
However, when I check the History Reports for One-Day Blocks, I see lists of IPs that are in the Blacklist.
Is this normal behaviour - I would assume that if the IP is already blocked, it should not trigger a One-Day Block.

Can you please advise what is normal behaviour once an IP is blacklisted.

I have attached screenshot from One-Day Block report and another showing the IP already in the Blacklist.

Thanks

 

[cPRex]

Hey there! I believe this to be normal behavior. The cPHulk system is still working and tracking the one-day blocks, in addition to what you've already put in the blacklist. That way, if for some reason the IP is removed from the blacklist, the other cPHulk rules will still apply to that IP address.

 

[frontsysFDS]

OK - Thanks.
I will assume that it is how it is meant to work.
Just seems odd that it will list multiple one-day blocks for an IP that is already blacklisted.