Setup Fail2Ban Log Analytics Graph With badips.com

This guide with badips.com is kind of officially known reporting and analysis system. You already have one config file in Fail2Ban software by badips.com. We are showing the steps of how to setup Fail2Ban log analytics graph with badips.com and get a basic online Pie Chart analysis of the attackers. It is very easy and free service. You should use it because the reporting attackers IPs is important.

 

What I Need to Setup Fail2Ban Log Analytics Graph With badips.com?

 

You need to follow some kind like our guide iptables Basics : Chapter 2 to install and setup Fail2Ban. If you already running Fail2Ban properly, you need not to read it. The graph will look like this :

 

Steps to Setup Fail2Ban Log Analytics Graph With badips.com

 

SSH to your server. If you run a cat on /etc/fail2ban/action.d/badips.conf file :

We were talking about this file at the beginning of this guide. If you followed our to setup Fail2Ban, it is just easy few steps. We gave the readers those configuration files which are on Github as gist for these two configuration files (they were too much easy, sufficient to the basic work) :

In both files, we had this stanza :

You will modify the entries like this :

We added two lines in both file’s that [sshd] entry. Save the files. Now restart and check status of Fail2Ban :

Service is running means everything is fine. Run a cat on Fail2Ban log :

Copy any of the attacker’s IP, suppose it is 218.161.3.238 (change with whatever attacker IP you have in log).

Now run these two commands :

At the end will get a response like this :

Instead of that 88f92219d8fc5b1b6ecc47e27b6c75b4d42f5c69 key, use your own key to compose this kind of URL :

This is a working example of Fail2Ban log analytics graph, open it on browser:

Tagged With fail2ban and analytics , fail2ban graph , log analytics how to graph

This Article Has Been Shared 652 Times!

Facebook Twitter Pinterest