Fail2ban Analyze

Analyze fail2ban logs to find most common ip's and plot histogram of access rates.

Example usage

Plot the histogram of the access hits

zcat /var/log/fail2ban.log* | ./fail2ban-analyze.py histogram

Rank IPs by bans, first 20 results

zcat /var/log/fail2ban.log* | ./fail2ban-analyze.py rank 4 --only-bans --count 20

Rank all IPs by bans, clobber by first 2 subnets

zcat /var/log/fail2ban.log* | ./fail2ban-analyze.py rank 2 --only-bans --count 20