fail2ban-reporter

Name: fail2ban-reporter
Availability: InStock
Author: jieni777

Report fail2ban bans to AbuseIPDB and send Telegram alerts.

1|Updated Jan 30, 2026

Search Tags:#security-automation #fail2ban #telegram-notifications #abuseipdb #ip-reporting #ssh-bruteforce

Ready to run

npx skills add https://github.com/jieni777/opencode-config-backup --skill fail2ban-reporter

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: fail2ban-reporter
Source: https://github.com/jieni777/opencode-config-backup/tree/main/skills/fail2ban-reporter
Command: npx skills add https://github.com/jieni777/opencode-config-backup --skill fail2ban-reporter

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires fail2ban, jq, curl, pass, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Auto-report fail2ban bans to AbuseIPDB to block attackers at a global level. Use when monitoring server security, reporting attackers, or checking banned IPs. Watches fail2ban for new bans, reports them to AbuseIPDB, and sends alerts.

Core Features & Use Cases

Monitor fail2ban bans and auto-report to AbuseIPDB with SSH brute-force categorization.
Send Telegram alerts when configured and provide logs for auditing.

Quick Start

Install the install script and configure your AbuseIPDB API key to enable auto-reporting.

Frequently Asked Questions about fail2ban-reporter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automatically report fail2ban bans to AbuseIPDB?▼

You can automatically report fail2ban bans to AbuseIPDB by installing a reporting script that watches fail2ban for new bans and sends them directly to the AbuseIPDB API using your key.

Can I receive Telegram alerts for SSH brute-force attacks banned by fail2ban?▼

Yes, you can configure optional Telegram alerts to receive immediate notifications when fail2ban bans an IP address for SSH brute-force or other jail scenarios.

What prerequisites are needed to auto-report fail2ban bans to AbuseIPDB?▼

To auto-report fail2ban bans, you need fail2ban, jq, curl, and pass installed on your system, along with a valid AbuseIPDB API key.

Does this auto-reporting method apply to jails other than SSH brute-force?▼

Yes, the auto-reporting mechanism applies to SSH brute-force categorization and can be extended to monitor and report bans from other fail2ban jail scenarios.

How do I audit fail2ban IP bans reported to AbuseIPDB?▼

You can audit reported fail2ban IP bans by reviewing the logs generated by the auto-reporting script, which provides records of all IPs sent to AbuseIPDB and Telegram alert activity.

What is the best way to block SSH brute-force attackers globally?▼

Reporting fail2ban bans to AbuseIPDB blocks SSH brute-force attackers globally by sharing malicious IP data across a centralized threat intelligence database.