Self-host Fail2Ban-Report
0.5.0Multi-server Fail2Ban dashboard with UFW blocklist sync
- Stars
- 302
- Requires
- Awk, Curl, Fail2Ban, Jq, PHP, UFW
What is Fail2Ban-Report?
Fail2Ban-Report is a self-hosted web-based dashboard for monitoring and managing Fail2Ban across multiple Linux servers. It parses Fail2Ban logs into daily JSON event files, provides searchable and filterable event reports with aggregated statistics, and enables centralized UFW IP blocklist management through a pull-based synchronization system. The backend consists of shell scripts that run via cron to process logs and sync blocklists with UFW, while the frontend is a PHP web interface with role-based authentication (admin/viewer). It supports optional integrations with AbuseIPDB and IPInfo.io for IP reputation lookups. The project is licensed under GPL-3.0 and runs on typical Linux setups including Raspberry Pi.
Should you self-host Fail2Ban-Report?
Fail2Ban-Report scores 43/100 on selfhost.directory (how scoring works) and ranks #59 of 78 in Security. It has 302 GitHub stars.
There was no stable release in the past 12 months, so check the repository's recent activity before you rely on it.
Setup is advanced: plan for several services and some ongoing maintenance. It is GPL-3.0-licensed and written mostly in PHP.
Its closest alternative on selfhost.directory is pentagi (83/100, 32 629 stars). It scores higher overall, so compare the two before you pick. See Fail2Ban-Report vs pentagi side by side.
Features
- Aggregated statistics
- Bulk Actions
- Jail- and server-specific blocklists
- Lightweight, no database
- Multi-server dashboard
- Optional AbuseIPDB integrationRequires free API key
- Optional IPInfo.io integrationRequires free API key
- Pending status for actions
- Role-based authentication
- Searchable & filterable event reports
Fail2Ban-Report README
More in Log Management
fluentdFluentd is a self-hosted, open-source data collector that unifies logging infrastructure with 500+ plugins for sources and destinations.
GeoMetrikksGeoMetrikks is a self-hosted, open-source service that tails reverse proxy logs, performs GeoLite2 lookups, and displays requests on a live MapLibre map with analytics.
gigapipeSelf-hosted open-source observability backend merging four telemetry types into ClickHouse with Loki, Prometheus, Tempo and Pyroscope protocol support.
grafanaGrafana is a self-hosted, open-source observability platform for querying, visualizing, and alerting on telemetry data from many sources.
graylogSelf-hosted open-source log management and SIEM server: aggregate and search logs, transform them in pipelines, alert and build dashboards.
hertzbeatApache HertzBeat is a self-hosted, open-source observability system unifying agentless metrics and logs collection, alerting, and notification dispatch.
highlightSelf-hosted open-source monitoring platform combining session replay, error monitoring, logging and distributed tracing, with Docker deployment and dozens of client SDKs.
howlerHowler is a self-hosted log monitor that watches files and sends alerts to Discord, Gotify, or Slack. Runs via Docker or Java JAR with a web UI.
hyperdxSelf-hosted, open-source observability platform unifying logs, metrics, traces and session replays on any ClickHouse cluster, with ingestion through OpenTelemetry.
logarrLogarr is a self-hosted, open-source PHP web app that consolidates and displays log files in a single-page interface for easy monitoring.
LogchefLightweight, single-binary log analytics interface for ClickHouse, focused on high-performance querying and visualization
LogDeckSelf-hosted log viewer for Docker/Podman that stores history, sends alerts, edits container resources live — one Go binary with CLI and MCP server.
0 comments