sshfilter.sh using ipinfo API

sshfilter.sh

#!/bin/bash

# UPPERCASE space-separated country codes to ACCEPT
ALLOW_COUNTRIES="FR CH DE US"
LOGDENY_FACILITY="authpriv.notice"
TOKEN="token from ipinfo"

if [ $# -ne 1 ]; then
  echo "Usage:  `basename $0` <ip>" 1>&2
  exit 0 # return true in case of config issue
fi

COUNTRY=$(curl -s "https://ipinfo.io/$1" -H "Authorization: Bearer $TOKEN" | jq -r '. | "\(.country)"')

[[ $COUNTRY = "null" || $ALLOW_COUNTRIES =~ $COUNTRY ]] && RESPONSE="ALLOW" || RESPONSE="DENY"

if [[ "$RESPONSE" == "ALLOW" ]] ; then
  logger -p $LOGDENY_FACILITY "$RESPONSE sshd connection from $1 ($COUNTRY)"
  exit 0
else
  logger -p $LOGDENY_FACILITY "$RESPONSE sshd connection from $1 ($COUNTRY)"
  exit 1
fi