fail2ban - analyzing banned IPs to spot most active subnets

[freke]

Hi,

Dunno if the title makes sense - I currently use fail2ban on my mailserver (behind a m0n0wall firewall).

fail2ban currently bans any ip trying to login (pop3/imap AUTH) but failing (on first try) for 7 days - currently 1000+ IPs banned.

Code: Select all

mail ~ # fail2ban-client status dovecot
Status for the jail: dovecot
|- Filter
|  |- Currently failed: 0
|  |- Total failed:     538
|  `- File list:        /var/log/messages
`- Actions
   |- Currently banned: 1258
   |- Total banned:     1373
   `- Banned IP list:   1.220.145.45 1.61.122.13 103.107.248.17 103.108.87.142 103.111.219.133 103.113.3.106 103.113.3.150 103.113.3.180 103.113.3.202 103.113.3.78 103.115.180.166 103.12.114.38 103.16.25.110 103.16.25.6 103.18.83.107 103.200.217.10 103.207.4.242 103.207.97.199 103.208.137.139 103.211.49.202 103.212.211.4 103.215.16.238 103.220.31.210 103.226.143.254 103.226.143.6 103.228.118.122 103.228.119.209 103.230.153.131 103.233.116.70 103.244.4.140 103.247.103.198 103.250.158.21 103.29.142.99 103.30.92.172 103.31.157.206 103.35.109.210 103.36.101.4 103.36.9.13 103.37.29.226 103.46.233.242 103.57.80.53 103.61.197.62 103.67.196.22 103.75.209.50 103.78.13.119 103.78.72.158 103.83.164.195 103.87.24.74 103.87.26.205 103.94.7.250 103.94.7.254 103.95.98.74 104.237.252.186 106.243.144.238 107.195.24.105 109.110.29.89 109.120.235.23 109.172.63.150 109.188.79.159 109.201.161.62 109.201.96.171 109.201.97.179 109.229.45.146 109.237.92.167 109.238.208.138 109.245.236.109 109.92.142.38 109.94.182.128 110.137.26.211 110.232.80.234 110.232.84.58 110.232.87.93 110.44.112.166 110.50.86.45 110.54.240.57 110.76.149.22 110.77.135.54 110.93.213.105 111.59.53.130 112.16.214.182 112.163.153.102 112.222.61.180 112.78.141.211 112.78.43.58 113.137.29.67 113.161.34.49 113.161.49.99 113.161.78.86 113.172.181.145 113.20.47.4 113.53.228.77 113.53.29.95 114.129.19.174 114.199.112.170 114.4.208.6 114.69.232.66 114.69.244.210 114.7.112.118 115.124.64.131 115.135.184.36 115.84.112.138 115.88.60.251 116.104.252.22 116.50.29.50 117.102.103.19 117.102.64.10 117.2.121.67 117.74.120.37 117.74.120.55 117.74.125.154 118.172.127.132 118.179.177.230 118.97.206.238 119.1.98.121 119.18.153.78 119.18.159.146 119.18.159.6 119.2.88.221 119.40.84.254 12.157.150.230 120.203.25.58 121.138.155.41 121.153.131.147 121.173.238.41 121.173.85.76 121.175.83.186 122.3.255.114 122.50.8.70 122.52.233.104 123.231.12.21 125.163.141.54 125.186.23.169 125.254.90.166 128.201.76.146 13.229.226.148 13.53.137.223 134.0.63.134 136.169.243.39 138.122.4.217 138.97.244.130 14.160.23.139 14.161.0.62 14.161.44.45 14.162.146.164 14.237.166.44 14.251.224.2 143.0.177.198 148.77.34.194 157.119.207.10 157.25.23.231 160.177.173.184 162.246.211.20 162.246.211.27 162.246.212.123 164.160.142.193 164.163.48.44 164.215.204.75 165.16.54.202 167.249.14.30 168.181.128.148 168.181.196.28 168.196.195.30 168.228.185.128 168.232.136.113 170.0.125.0 170.0.125.36 170.0.125.40 170.0.125.90 170.0.126.167 170.0.126.188 170.0.126.228 170.233.112.142 170.239.248.153 170.239.248.30 170.239.28.32 170.244.5.26 170.245.202.254 170.245.28.183 170.245.31.4 170.247.125.221 170.254.173.19 170.254.174.201 170.78.99.201 170.80.36.2 170.82.126.118 170.83.156.22 170.83.215.114 170.84.152.66 175.137.174.230 175.138.132.152 175.140.155.81 175.208.251.15 176.102.224.51 176.103.74.89 176.124.96.194 176.124.96.197 176.196.251.246 177.10.197.177 177.10.77.129 177.101.180.29 177.101.181.126 177.101.239.18 177.107.133.230 177.107.186.126 177.107.188.182 177.107.50.18 177.11.244.4 177.11.67.158 177.12.87.203 177.128.235.40 177.129.204.35 177.129.24.210 177.135.103.25 177.135.103.94 177.136.37.181 177.137.193.103 177.155.128.199 177.19.181.169 177.19.238.230 177.190.145.196 177.190.68.175 177.191.195.21 177.200.160.138 177.200.160.182 177.200.247.235 177.21.120.102 177.21.220.211 177.21.222.195 177.22.184.173 177.22.184.219 177.220.141.134 177.220.170.34 177.23.107.86 177.23.184.46 177.36.132.158 177.36.159.34 177.37.96.254 177.38.10.229 177.38.160.122 177.39.214.123 177.44.18.114 177.44.18.17 177.54.224.245 177.55.59.36 177.66.115.182 177.67.241.172 177.67.241.252 177.69.124.245 177.69.216.237 177.72.74.167 177.72.80.134 177.72.82.141 177.73.107.174 177.73.188.18 177.73.20.50 177.74.128.143 177.75.161.142 177.75.214.149 177.8.219.51 177.85.116.185 177.85.80.172 177.86.118.16 177.87.12.90 177.87.15.230 177.87.154.66 177.91.186.33 177.91.64.37 177.94.243.188 178.150.132.221 178.173.171.10 178.183.1.9 178.213.138.54 178.213.57.25 178.218.58.234 178.253.43.237 178.76.238.246 178.79.46.5 179.108.251.86 179.184.14.150 179.189.230.26 179.255.176.11 179.42.162.11 180.180.170.127 180.226.74.254 180.250.53.6 181.10.26.61 181.143.193.170 181.143.216.82 181.164.156.94 181.196.246.246 181.58.255.100 182.0.198.46 182.16.163.162 182.16.175.158 182.16.179.82 182.160.125.50 182.253.16.170 182.253.78.2 182.52.51.27 182.53.197.204 182.76.237.118 183.81.156.200 183.82.123.193 183.89.196.109 185.136.133.205 185.14.148.74 185.140.232.158 185.140.235.236 185.142.235.49 185.143.176.14 185.161.112.158 185.186.81.250 185.214.187.38 185.27.61.230 185.30.176.74 185.30.177.238 185.30.177.49 185.42.226.130 185.46.109.182 185.46.110.153 185.53.152.189 185.81.157.108 185.81.157.169 185.81.157.17 185.81.157.240 185.81.157.36 185.81.157.40 185.81.157.41 185.81.157.5 186.115.101.155 186.119.121.26 186.154.52.175 186.159.1.58 186.178.10.6 186.193.20.50 186.193.24.136 186.211.4.2 186.215.197.183 186.219.27.190 186.219.3.21 186.226.162.142 186.226.166.35 186.226.192.14 186.235.84.238 186.236.102.98 186.248.105.222 186.248.108.2 186.249.23.253 186.250.221.22 186.251.103.131 186.26.124.170 186.5.221.105 186.67.85.251 186.7.70.199 186.74.221.210 186.96.100.70 186.96.125.115 187.1.32.102 187.102.71.1 187.102.96.72 187.16.246.76 187.19.127.178 187.32.75.173 187.44.0.31 187.72.160.39 187.92.175.52 187.95.124.89 188.169.192.103 188.234.214.221 188.235.61.20 188.237.135.3 188.241.45.85 188.244.20.242 188.26.5.254 188.43.37.237 189.112.244.94 189.114.67.213 189.14.225.144 189.201.217.106 189.204.6.157 189.216.48.246 189.26.128.138 189.38.2.198 189.45.192.4 190.121.142.2 190.123.90.26 190.131.220.130 190.14.170.196 190.186.33.237 190.52.129.192 190.57.154.218 191.100.30.160 191.102.126.138 191.241.38.229 191.242.127.6 191.242.73.29 191.6.133.50 191.7.211.174 191.97.19.6 192.169.218.61 194.1.193.162 194.126.180.181 195.123.182.13 195.158.92.104 195.175.206.238 195.239.26.38 195.33.240.222 195.8.52.228 196.223.138.19 196.23.22.27 196.250.39.65 196.3.100.45 196.50.243.138 197.157.219.168 197.210.141.26 197.235.12.130 197.35.228.25 199.48.241.212 200.162.162.119 200.186.33.42 200.196.239.2 200.222.29.179 200.35.56.89 200.75.222.198 200.77.186.170 200.77.186.181 200.77.186.199 200.77.186.211 201.11.180.140 201.140.110.78 201.148.180.250 201.150.51.138 201.150.56.8 201.155.196.97 201.158.105.157 201.17.20.244 201.175.51.152 201.182.91.254 201.20.88.130 201.20.88.131 201.219.197.138 201.55.103.34 201.7.1.42 201.91.194.218 202.152.142.172 202.162.194.60 202.169.242.235 202.169.245.10 202.169.246.34 202.182.54.186 202.188.42.72 202.43.112.194 202.43.117.134 202.46.3.22 202.51.189.134 202.56.161.178 202.57.36.116 202.57.50.130 202.57.50.59 202.57.52.158 202.57.52.210 202.57.52.230 202.57.52.98 202.57.63.182 202.70.47.162 202.74.246.18 202.75.97.82 202.93.35.19 203.128.74.227 203.128.77.170 203.153.108.219 209.112.236.17 210.16.84.182 210.245.34.51 212.109.39.180 212.152.34.52 212.19.20.87 212.200.160.230 212.200.26.10 212.55.87.217 212.72.149.234 213.138.73.82 213.139.53.174 213.148.198.54 213.160.183.164 213.240.249.114 213.6.17.2 213.6.68.206 213.87.224.215 217.17.111.83 217.79.206.36 218.201.83.148 218.76.140.155 220.121.112.170 220.232.134.253 221.6.87.210 222.102.231.215 222.124.30.122 222.165.230.16 222.218.17.20 223.100.152.42 24.198.153.105 24.232.140.49 31.13.11.158 31.13.34.202 31.131.66.93 31.173.165.124 31.173.89.209 36.228.7.252 36.65.150.33 36.66.216.210 36.66.222.130 36.67.211.203 36.67.224.65 36.67.75.35 36.7.172.12 36.74.106.216 36.78.210.47 36.89.139.107 36.89.149.31 36.89.225.127 37.1.221.161 37.235.136.171 37.59.8.29 38.122.98.58 39.40.149.103 41.169.151.82 41.205.13.126 41.206.54.66 41.215.19.158 41.215.33.186 41.223.232.10 41.43.213.33 41.73.234.195 41.75.120.10 41.79.49.23 42.189.75.137 43.224.8.12 43.225.169.6 43.251.214.250 43.251.99.104 45.112.56.10 45.116.3.249 45.228.4.54 45.231.120.114 45.4.58.154 45.7.200.24 45.7.200.26 45.71.75.138 46.225.119.60 46.249.63.226 5.149.105.154 50.106.215.186 50.204.122.174 51.75.92.213 58.20.187.21 59.145.238.110 59.22.173.1 59.6.180.232 59.91.122.1 59.94.116.82 60.2.101.221 60.50.141.193 60.53.139.48 60.53.42.59 61.163.2.246 61.54.245.72 61.6.152.143 61.6.233.104 63.142.229.26 64.139.79.35 66.118.198.247 66.158.234.120 66.76.115.99 67.52.33.147 68.112.190.168 70.133.242.9 70.28.47.241 71.122.164.51 72.89.243.220 77.232.24.51 77.244.26.125 77.244.66.192 77.77.9.107 77.87.215.86 77.94.125.54 78.108.246.50 78.134.73.148 78.26.151.248 78.36.202.9 78.38.67.210 78.56.102.89 78.61.157.167 78.85.17.243 79.106.115.105 79.106.35.194 79.106.35.59 79.106.36.13 79.126.194.149 79.127.33.147 79.161.252.14 79.188.40.186 79.189.251.118 80.127.116.96 80.188.112.168 80.191.169.66 80.22.131.131 80.252.137.185 80.59.193.212 80.64.172.68 80.73.87.206 80.78.75.26 80.89.137.214 80.94.118.192 80.94.22.55 81.170.250.118 81.211.68.14 81.24.82.33 81.30.203.202 81.30.215.23 82.114.79.86 82.117.213.30 82.135.136.153 82.135.249.133 82.137.250.156 82.137.255.48 82.147.116.201 82.151.113.56 82.160.150.76 82.166.152.154 82.199.118.18 82.200.86.58 82.85.144.72 83.103.195.183 83.143.203.162 83.169.214.166 83.2.100.224 83.219.142.223 83.219.143.142 83.219.159.255 83.228.47.75 83.242.249.222 84.22.138.150 84.238.140.196 84.47.162.66 84.51.0.194 85.105.34.128 85.113.60.66 85.15.40.35 85.15.42.208 85.172.31.117 85.175.101.3 85.175.97.57 85.175.99.117 85.90.203.166 86.101.50.85 86.109.60.58 86.34.157.3 87.117.10.107 87.124.164.14 87.225.107.22 87.255.79.223 88.119.128.181 88.119.135.155 88.207.201.116 88.255.40.207 88.26.255.75 88.87.87.205 89.102.203.9 89.109.33.36 89.16.103.241 89.17.232.46 89.212.90.179 89.216.105.145 89.223.10.70 89.37.119.16 89.42.198.152 90.151.83.235 90.178.41.140 90.178.66.121 90.188.21.217 90.188.252.215 90.71.49.120 91.105.106.118 91.122.37.92 91.143.32.164 91.185.36.26 91.197.135.132 91.205.128.232 91.219.252.186 91.225.123.3 91.225.203.145 91.225.97.250 91.233.156.158 91.237.121.11 91.238.243.215 91.240.97.241 91.245.26.4 91.92.209.130 91.92.78.142 91.92.81.16 92.115.128.193 92.207.253.226 92.241.93.154 92.243.126.25 92.50.45.67 92.50.59.98 93.33.234.116 93.84.64.81 94.228.17.204 94.236.153.77 94.240.25.16 94.255.83.207 95.163.141.82 95.185.88.232 95.38.212.65 95.47.56.215 96.94.188.177 97.90.49.141 98.207.120.166 88.250.105.120 75.148.56.218 95.82.11.44 131.161.175.233 177.72.82.8 185.101.236.217 81.31.238.196 182.253.78.146 177.86.156.76 78.139.50.233 168.232.188.90 217.13.222.129 122.180.253.6 177.11.17.230 177.84.17.22 67.204.47.131 185.126.156.10 177.36.201.81 179.107.67.80 117.102.82.42 103.83.178.174 186.233.55.177 95.170.118.79 179.1.91.130 41.206.60.6 84.52.94.221 177.21.47.22 203.173.92.194 103.86.195.194 109.164.113.55 89.28.14.239 189.14.193.94 89.249.248.178 45.227.151.58 83.219.149.199 209.146.23.182 169.239.121.238 45.168.214.13 88.147.144.219 45.124.24.35 71.39.105.129 190.147.210.126 202.57.44.210 110.169.80.155 202.79.34.210 177.11.65.94 179.184.11.180 210.245.51.31 195.117.107.182 177.92.9.12 189.52.165.134 219.159.70.68 23.25.96.205 103.84.38.158 92.39.130.130 168.121.139.199 105.27.173.50 191.243.206.2 95.31.12.156 114.33.151.23 36.82.113.8 218.200.55.214 114.69.233.182 109.87.122.175 202.80.118.90 85.192.0.223 191.7.192.140 185.81.157.64 170.0.124.10 181.90.249.152 202.57.52.242 181.49.7.146 210.245.51.42 221.226.65.10 200.175.239.162 114.199.113.38 78.90.248.140 41.180.80.26 103.217.156.21 177.129.90.17 182.253.81.130 158.140.138.76 111.30.23.107 81.214.50.30 154.70.135.235 191.6.132.126 103.87.26.230 31.29.62.188 186.226.164.171 177.66.180.197 143.255.155.181 177.200.254.73 186.42.185.94 103.94.4.26 212.107.237.28 218.107.46.228 190.7.21.13 170.0.125.57 159.65.236.74 168.103.20.54 41.160.6.186 177.39.211.91 180.250.198.102 138.59.40.33 220.227.147.150 89.148.196.249 92.27.199.119 186.225.98.234 118.179.200.131 176.31.126.84 62.169.184.227 103.220.205.110 62.6.237.182 202.51.113.134 182.71.22.70 177.23.163.154 123.15.58.162 177.104.219.141 202.57.43.250 96.77.43.233 83.228.102.154 177.72.169.63 122.54.131.137 24.121.221.253 80.245.125.138 203.188.242.114 77.233.11.21 103.109.92.234 103.242.216.198 218.154.250.1 179.191.23.2 95.65.69.139 88.135.44.28 177.38.199.34 187.95.123.74 138.94.189.96 187.87.206.158 95.182.64.41 203.176.176.130 46.29.224.222 202.57.58.50 103.235.67.226 66.194.210.175 116.212.150.62 213.208.176.86 177.52.249.77 170.0.124.55 89.22.152.124 80.78.75.170 106.244.72.125 103.250.166.12 185.134.232.26 201.87.233.110 109.172.77.218 202.93.226.170 81.26.130.121 91.240.125.60 12.249.121.70 176.223.1.70 119.18.148.2 92.255.164.166 190.109.80.34 220.133.250.85 195.246.107.34 185.135.78.147 213.14.6.2 202.51.178.126 170.0.125.37 186.237.129.90 201.150.34.82 109.122.101.226 103.58.16.46 190.214.47.217 177.223.98.150 109.87.193.159 170.79.91.98 177.103.220.193 92.50.38.98 118.174.65.251 177.67.10.16 88.212.61.148 170.239.115.222 78.108.245.211 200.146.236.217 177.53.45.39 177.10.46.4 119.46.2.242 197.255.181.137 177.70.165.9 109.199.255.172 168.121.137.58 177.101.60.82 213.163.36.106 91.237.161.141 80.237.79.29 45.70.112.186 103.210.142.54 190.14.158.147 103.95.97.178 191.37.16.64 185.187.204.42 43.248.24.106 212.107.232.45 176.235.191.130 203.128.78.182 89.108.135.138 168.195.83.230 116.58.235.44 190.12.13.146 193.140.109.150 202.57.58.82 217.12.62.34 182.52.132.14 112.78.185.228 197.254.7.178 80.25.229.117 63.33.59.227 90.154.28.172 180.250.196.178 89.208.9.105 124.105.249.210 177.101.182.82 117.4.1.25 180.250.54.161 116.97.44.94 50.253.49.189 177.101.55.134 177.39.230.5 148.77.34.200 171.252.205.13 201.222.29.86 194.208.68.199 37.153.56.159 110.232.80.71 80.78.70.1 86.111.144.10 92.255.236.166 74.50.132.25 170.79.122.172 118.97.171.52 111.251.205.174 89.46.238.133 82.117.245.87 138.122.105.195 1.179.196.65 101.255.51.198 191.37.79.6 85.112.57.29 45.118.61.4 186.87.132.220 47.49.147.253 1.10.185.91 122.139.5.237 170.0.126.148 213.175.67.67 177.22.184.175 109.195.177.204 77.104.73.157 82.202.210.45 94.233.6.166 177.86.116.4 193.106.231.145 37.57.119.90 202.51.98.150 170.244.5.30 203.142.70.218 187.162.191.119 110.74.221.89 185.30.177.53 168.196.13.2 201.59.187.162 83.110.18.65 89.137.11.41 190.0.61.18 201.139.88.52 45.233.79.10 177.190.177.246 202.51.189.126 92.38.76.65 86.100.126.27 103.87.54.7 129.205.140.9 202.70.147.78 88.230.171.82 188.113.239.223 211.178.234.66 89.31.111.217 125.161.139.159 210.107.217.56 60.184.68.37 85.144.43.62 119.192.237.60 218.201.233.164 112.135.104.193 41.230.11.194 187.253.190.131 113.166.120.101 116.193.223.101 85.109.70.157 77.239.200.15 185.3.213.80 103.225.223.42 95.30.220.43 118.175.226.140 188.186.184.42 170.81.153.198 103.251.58.51 185.81.157.212 177.67.162.43 122.54.65.150 202.162.196.181 201.192.253.58 201.7.216.202 188.240.196.66 177.73.8.198 177.38.2.27 103.35.109.138 106.245.197.234 177.38.2.115 202.62.95.226 91.243.166.27 80.48.183.166 41.215.4.178 103.106.100.90 213.6.66.162 177.39.228.4 193.59.77.113 202.160.166.68 202.51.111.38 103.57.80.56 5.137.168.47 46.150.71.27 87.117.55.25 129.208.93.159 190.245.178.92 115.187.50.103 39.42.135.174 156.222.163.87 83.219.145.206 88.245.175.131 5.14.93.213 170.233.29.12 188.233.104.103 176.105.196.176 116.206.42.109 156.204.57.158 103.255.6.87 186.119.75.136 94.158.37.162 77.122.13.13 201.213.126.216 177.195.24.143 145.255.174.71 177.10.248.218 103.204.83.158 93.170.163.180 118.137.170.91 197.54.112.217 103.7.148.158 92.98.123.124 188.163.16.93 117.56.240.97 191.185.49.239 197.39.212.26 115.178.253.42 46.36.76.115 197.149.65.210 87.116.179.35 46.164.228.225 43.250.241.2 170.246.97.218 178.46.211.99 181.51.60.48 5.139.173.220 115.78.14.128 200.225.223.131 83.234.8.214 187.102.16.204 1.53.137.92 177.73.88.197 123.7.54.235 203.150.195.70 103.109.3.10 45.6.122.10 45.124.24.163 24.73.209.146 84.198.109.120 79.165.101.195 168.90.91.22 177.0.57.204 201.47.245.162 46.49.34.47 91.247.250.215 43.254.176.249 191.243.72.34 60.161.139.49 88.2.219.22 95.143.135.51 200.29.235.221 181.209.75.123 38.107.92.246 176.62.188.193 45.237.96.6 120.236.135.204 89.108.158.114 202.57.49.186 197.234.221.190 187.87.192.42 45.169.196.2 85.135.95.218 118.163.135.18 125.213.150.218 119.2.48.178 87.252.180.235 36.228.8.57 201.150.42.77 1.255.70.86 202.21.127.132 103.36.10.13 170.233.243.6 177.86.80.57 186.248.175.4 78.56.73.169 61.50.130.146 177.10.143.118 177.11.85.77 91.210.228.30 114.5.83.18 104.196.44.213 180.250.152.36 85.237.63.124 177.184.72.22 43.229.252.187 139.255.16.171 36.67.93.209 177.126.214.59 80.245.115.97 60.30.224.189 78.107.248.3 45.4.158.21 92.62.72.252 71.180.95.32 43.248.24.226 167.250.160.50 103.84.39.49 92.241.17.232 103.109.0.242 103.57.80.84 190.79.49.106 82.114.75.104 124.128.25.147 85.15.47.176 223.25.14.66 61.37.212.83 190.211.129.66 113.11.110.40 212.205.21.131 104.237.227.198 188.121.103.187 92.241.66.138 118.36.137.236 201.184.175.90 185.253.74.206 103.228.119.169 37.57.12.231 222.103.227.194 80.98.170.41 213.222.34.200 1.179.180.98 78.157.21.40 182.253.142.40 117.74.120.123 110.50.85.162 119.18.152.158 177.85.114.94 119.18.153.154 217.67.182.170 178.252.142.242 189.126.52.238 183.89.196.135 177.126.81.33 80.32.125.207 36.37.72.162 37.32.11.152 202.57.52.214 85.237.44.125 79.101.33.118 103.59.200.26 117.74.121.63 1.212.111.164 177.73.4.17 201.150.34.10 81.15.212.7 113.160.247.180 170.84.48.102 181.113.67.178 95.86.32.4 178.134.71.146 85.112.42.199 182.52.87.107 187.87.218.6 113.22.98.244 112.170.31.133 90.177.99.111 179.96.216.1 46.201.226.135 178.124.150.115 88.230.20.209 156.194.167.175 122.162.17.186 101.27.192.211 178.54.144.140 171.244.99.251 212.42.200.140 103.66.50.58 189.26.160.153 95.44.124.190 91.135.244.100 5.155.106.9 180.106.51.38 94.233.232.33 39.45.196.147 187.84.82.161 200.69.81.10 95.38.212.67 145.255.28.122 103.216.82.207 186.216.81.21 37.224.75.98 118.179.206.10 81.183.253.34 186.226.198.178 119.82.242.58 91.185.236.24 168.90.90.57 190.85.212.134 167.249.76.19 177.23.162.2

What would be a good way to start analyzing this list and spot if there's any obvious subnets that I should think of perma-banning on my firewall?

[Ant P.]

Group the IPs by first 2 or 3 octets to surface the biggest problem sources, look up their subnets (optional), then consolidate them into a single range.

Brief example:

Code: Select all

$ perl6 -e '.say for words.classify(*.split(q{.})[^2].Str).sort(-*.value).head(5)' < t-1095418-ips.txt
202 57 => [202.57.36.116 202.57.50.130 202.57.50.59 202.57.52.158 202.57.52.210 202.57.52.230 202.57.52.98 202.57.63.182 202.57.44.210 202.57.52.242 202.57.43.250 202.57.58.50 202.57.58.82 202.57.49.186 202.57.52.214]
170 0 => [170.0.125.0 170.0.125.36 170.0.125.40 170.0.125.90 170.0.126.167 170.0.126.188 170.0.126.228 170.0.124.10 170.0.125.57 170.0.124.55 170.0.125.37 170.0.126.148]
185 81 => [185.81.157.108 185.81.157.169 185.81.157.17 185.81.157.240 185.81.157.36 185.81.157.40 185.81.157.41 185.81.157.5 185.81.157.64 185.81.157.212]
202 51 => [202.51.189.134 202.51.113.134 202.51.178.126 202.51.98.150 202.51.189.126 202.51.111.38]
177 101 => [177.101.180.29 177.101.181.126 177.101.239.18 177.101.60.82 177.101.182.82 177.101.55.134]

$ jwhois 202.57.36.116 | grep inetnum
inetnum:        202.57.32.0 - 202.57.63.255

$ ipcalc 202.57.32.0 - 202.57.63.255
deaggregate 202.57.32.0 - 202.57.63.255
202.57.32.0/19

# ban the range 202.57.32.0/19, remove single IPs from the list

[freke]

Awesome - thanks, I'll look into that