• The ImunifyAV extension is now deprecated and no longer available for installation.
    Existing ImunifyAV installations will continue operating for three months, and after that will automatically be replaced with the new Imunify extension. We recommend that you manually replace any existing ImunifyAV installations with Imunify at your earliest convenience.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
Resource icon

Instruction [Fail2ban] Bash script to group multiple banned IP into subnets

Whenever you end-up with a large number of banned IP's in fail2ban you might want to know if there are multiple IP's banned from the same subnet. This scripts groups all banned IP's into /24 subnets.

By default the script returns all subnets...
You do not have permission to view the full content of this resource. Log in or register now.
Author
Kaspar
Views
27,324
First release
Last update
Rating
5.00 star(s) 2 ratings

Latest reviews

Now wouldn't it be great if this could be run as a cron job to automatically add these via the Plesk Fail2Ban CLI :)
The script addresses one major caveat of long-term ip banning: The number of iptables entries increases, and once it reaches a high number (e.g. >10,000), the kernel becomes quite busy with analyzing network traffic. For that reason it is essential to decrease the number of iptables entries. One method to achieve this is to group ip addresses by subnets, ban the subnets instead and remove the single ban entries from iptables. This script lets you identify the subnets easily that ought to be banned.
Back
Top