View fail2ban ban entries with iptables -L -v

Not sure why but the Edward Snowden address made me chuckle. (especially as it’s tied to a Tor server address???)

iptables -L -v
Chain INPUT (policy ACCEPT 16471 packets, 4561K bytes)
 pkts bytes target     prot opt in     out     source               destination         
  216 12760 DROP       all  --  any    any     219.239.241.175      anywhere            
   21  1260 DROP       all  --  any    any     208-115-111-70-reverse.wowrack.com  anywhere            
 119K   11M fail2ban-wordpress-scans  tcp  --  any    any     anywhere             anywhere             multiport dports http,https
12684 1193K fail2ban-ssh  tcp  --  any    any     anywhere             anywhere             multiport dports

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 16027 packets, 7062K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain fail2ban-ssh (1 references)
 pkts bytes target     prot opt in     out     source               destination         
12684 1193K RETURN     all  --  any    any     anywhere             anywhere            

Chain fail2ban-wordpress-scans (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   24  5162 REJECT     all  --  any    any     127.51.60.213.static.mundo-r.com  anywhere             reject-with icmp-port-unreachable
   72  3264 REJECT     all  --  any    any     edwardsnowden0.torservers.net  anywhere             reject-with icmp-port-unreachable
   48  2784 REJECT     all  --  any    any     sequoia.okra.nl      anywhere             reject-with icmp-port-unreachable
   72  4128 REJECT     all  --  any    any     hosted-by.snelis.com  anywhere             reject-with icmp-port-unreachable
 1794  108K REJECT     all  --  any    any     az0090.srv.az.pl     anywhere             reject-with icmp-port-unreachable
   71  3904 REJECT     all  --  any    any     hivede16-3349.fornex.org  anywhere             reject-with icmp-port-unreachable
  208 12432 REJECT     all  --  any    any     62-210-146-131.rev.poneytelecom.eu  anywhere             reject-with icmp-port-unreachable
   37  2528 REJECT     all  --  any    any     84-18-132-17.ip.bkom.it  anywhere             reject-with icmp-port-unreachable
   25  5289 REJECT     all  --  any    any     bd7968a5.virtua.com.br  anywhere             reject-with icmp-port-unreachable
   50  6623 REJECT     all  --  any    any     pppoe-109-197-193-202.evolife.su  anywhere             reject-with icmp-port-unreachable
 117K   11M RETURN     all  --  any    any     anywhere             anywhere 

Be the first to write a comment.

Your feedback