50-fail2ban 746 B

123456789101112131415161718
  1. #!/bin/bash
  2. logfile='/var/log/fail2ban.log*'
  3. mapfile -t lines < <(grep -hioP '(\[[a-z-]+\]) (ban|unban)' $logfile | sort | uniq -c)
  4. jails=($(printf -- '%s\n' "${lines[@]}" | grep -oP '\[\K[^\]]+' | sort | uniq))
  5. out=""
  6. for jail in ${jails[@]}; do
  7. bans=$(printf -- '%s\n' "${lines[@]}" | grep -iP "[[:digit:]]+ \[$jail\] ban" | awk '{print $1}')
  8. unbans=$(printf -- '%s\n' "${lines[@]}" | grep -iP "[[:digit:]]+ \[$jail\] unban" | awk '{print $1}')
  9. bans=${bans:-0} # default value
  10. unbans=${unbans:-0} # default value
  11. diff=$(($bans-$unbans))
  12. out+=$(printf "$jail, %+3s bans, %+3s unbans, %+3s active" $bans $unbans $diff)"\n"
  13. done
  14. printf "\nfail2ban status (monthly):\n"
  15. printf "$out" | column -ts $',' | sed -e 's/^/ /'