• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
Resource icon

Instruction [Fail2ban] Bash script to group multiple banned IP into subnets

Overview Reviews (2)
Whenever you end-up with a large number of banned IP's in fail2ban you might want to know if there are multiple IP's banned from the same subnet. This scripts groups all banned IP's into /24 subnets.

By default the script returns all subnets...
You do not have permission to view the full content of this resource. Log in or register now.
  • Like
Reactions: Bitpalast
Author
Kaspar
Views
1,282
First release
Last update
Rating
5.00 star(s) 2 ratings

Share this resource

Latest reviews

P
Now wouldn't it be great if this could be run as a cron job to automatically add these via the Plesk Fail2Ban CLI :)
Upvote 0 Downvote
Bitpalast
The script addresses one major caveat of long-term ip banning: The number of iptables entries increases, and once it reaches a high number (e.g. >10,000), the kernel becomes quite busy with analyzing network traffic. For that reason it is essential to decrease the number of iptables entries. One method to achieve this is to group ip addresses by subnets, ban the subnets instead and remove the single ban entries from iptables. This script lets you identify the subnets easily that ought to be banned.
Upvote 1 Downvote
Read more…
Back
Top