View Single Post
  #10  
Old 27th May 2010, 04:28
make-fun make-fun is offline
Member
 
Join Date: Jan 2008
Posts: 92
Thanks: 8
Thanked 8 Times in 7 Posts
Default

Quote:
Originally Posted by MET View Post
I'm not sure whether I understand these commands, but they didn't show anything on the CLI. .
Where is your fail2ban logfile?
Code:
grep -h "Ban " /var/log/fail2ban.log* | awk '{print $5,$1}' | sort | uniq -c
Should return a list with number of BANs per day and what filter was hit -- like here with postfix:
Code:
    123 [postfix] 2010-05-16
    114 [postfix] 2010-05-17
     75 [postfix] 2010-05-18
     45 [postfix] 2010-05-20
    104 [postfix] 2010-05-21
    100 [postfix] 2010-05-22
    103 [postfix] 2010-05-23
     43 [postfix] 2010-05-24
This normaly a good way to see if and what's happening, as you can compare "Ban ", "already banned", "Unban ". If you got nothing there, fail2ban never's done anything for you--it seems.
Reply With Quote