skills.rest
jieni777
jieni777COMMUNITY
Explore all skills by this author →
GitHub

fail2ban-reporter

Report fail2ban bans to AbuseIPDB and send Telegram alerts.

1|Updated Jan 30, 2026
Search Tags:#security-automation#fail2ban#telegram-notifications#abuseipdb#ip-reporting#ssh-bruteforce
One-click install
npx skills add https://github.com/jieni777/opencode-config-backup --skill fail2ban-reporter
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: fail2ban-reporter
Source: https://github.com/jieni777/opencode-config-backup/tree/main/skills/fail2ban-reporter
Command: npx skills add https://github.com/jieni777/opencode-config-backup --skill fail2ban-reporter

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires fail2ban, jq, curl, pass, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Auto-report fail2ban bans to AbuseIPDB to block attackers at a global level. Use when monitoring server security, reporting attackers, or checking banned IPs. Watches fail2ban for new bans, reports them to AbuseIPDB, and sends alerts.

Core Features & Use Cases

  • Monitor fail2ban bans and auto-report to AbuseIPDB with SSH brute-force categorization.
  • Send Telegram alerts when configured and provide logs for auditing.

Quick Start

Install the install script and configure your AbuseIPDB API key to enable auto-reporting.

Frequently Asked Questions about fail2ban-reporter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically report fail2ban bans to AbuseIPDB?▼

You can automatically report fail2ban bans to AbuseIPDB by installing a reporting script that watches fail2ban for new bans and sends them directly to the AbuseIPDB API using your key.

Can I receive Telegram alerts for SSH brute-force attacks banned by fail2ban?▼

Yes, you can configure optional Telegram alerts to receive immediate notifications when fail2ban bans an IP address for SSH brute-force or other jail scenarios.

What prerequisites are needed to auto-report fail2ban bans to AbuseIPDB?▼

To auto-report fail2ban bans, you need fail2ban, jq, curl, and pass installed on your system, along with a valid AbuseIPDB API key.

Does this auto-reporting method apply to jails other than SSH brute-force?▼

Yes, the auto-reporting mechanism applies to SSH brute-force categorization and can be extended to monitor and report bans from other fail2ban jail scenarios.

How do I audit fail2ban IP bans reported to AbuseIPDB?▼

You can audit reported fail2ban IP bans by reviewing the logs generated by the auto-reporting script, which provides records of all IPs sent to AbuseIPDB and Telegram alert activity.

What is the best way to block SSH brute-force attackers globally?▼

Reporting fail2ban bans to AbuseIPDB blocks SSH brute-force attackers globally by sharing malicious IP data across a centralized threat intelligence database.

Related Skills

Explore More Software Engineering Skills→
realsigridjinrealsigridjin
20

configure-telegram

Configure Telegram bot notifications for OMC session activity.

Community
Advanced
jmagarjmagar
69

fail2ban-swag

Manage fail2ban jails, bans, and filters inside a SWAG container.

Community
Advanced
EojEdredEojEdred

security-dev01

Monitor validators and analyze SSH logs for security threats.

Community
Intermediate
stharroldstharrold

workflow-utilities

Consolidate workflow operations into a unified utility suite.

Community
Intermediate