Run immediate

Hello, drupalbubb
you can use /admin/config/people/autoban/ban or drush autoban:ban for the 'Ban all' action.

Sorry for this unclearness @goodboy,
I want to run the "Ban all" action not manually or by cron, but when the event occurs.

@drupalbubb,
This is an interesting question. I haven't implemented it yet. It's not clear yet what event we're talking about.

Isn't the event if a log entry is written?

@drupalbubb, I think there is no such event..
In any case, I think it's too resource-intensive to run an IP ban check for each log entry writing. Perhaps it would be easier to make a separate cron, for example, every minute.

I am closing this, because my case is more something for the login security module, which is incomplete. Anyway, the attacker used a bot net with a lot of IP's, which did bypass the rules.

@drupalbubb,
I still haven't stopped thinking about your words and decided to make a Force mode. When it is enabled, all 404, 403 requests will be automatically blocked. I would be grateful if you could look at the dev → version of the site. You need to enable the Force mode checkbox in the general settings of the module. It is better to disable the Cron checkbox.

Thank you for your post.