• We value your experience with Plesk during 2024
    Plesk strives to perform even better in 2025. To help us improve further, please answer a few questions about your experience with Plesk Obsidian 2024.
    Please take this short survey:

    https://pt-research.typeform.com/to/AmZvSXkx
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
Resource icon

Instruction [Fail2ban] Bash script to group multiple banned IP into subnets

Whenever you end-up with a large number of banned IP's in fail2ban you might want to know if there are multiple IP's banned from the same subnet. This scripts groups all banned IP's into /24 subnets.

By default the script returns all subnets...
You do not have permission to view the full content of this resource. Log in or register now.
Author
Kaspar
Views
25,821
First release
Last update
Rating
5.00 star(s) 2 ratings

Latest reviews

Now wouldn't it be great if this could be run as a cron job to automatically add these via the Plesk Fail2Ban CLI :)
The script addresses one major caveat of long-term ip banning: The number of iptables entries increases, and once it reaches a high number (e.g. >10,000), the kernel becomes quite busy with analyzing network traffic. For that reason it is essential to decrease the number of iptables entries. One method to achieve this is to group ip addresses by subnets, ban the subnets instead and remove the single ban entries from iptables. This script lets you identify the subnets easily that ought to be banned.
Back
Top