🔐 Fail2Ban Daily Report Script

Security isn’t just about blocking attacks — it’s about knowing they happened. This lightweight Bash script integrates with Fail2Ban to generate daily email reports on SSH intrusion attempts, giving you clear, actionable visibility without logging into the server.

---

🧰 What It Does

• Pulls the list of IPs banned by the sshd jail
• Uses geoiplookup to identify attacker locations
• Formats a clean daily report:
  • ✅ IP Address
  • 🌍 Country of Origin
  • 🕒 Timestamp
• Emails the report to a predefined address

---

⚙️ Requirements

• fail2ban
• geoip-bin (for geoiplookup)
• CLI mail client (e.g., mutt, mailx, or ssmtp)
• Basic cron setup

---

📫 Why It Matters

Many sysadmins install Fail2Ban and forget it’s there. This script makes intrusion detection visible again — without manual log review. Perfect for: ✔️ Home lab monitoring ✔️ Lightweight VPS hardening ✔️ Situational awareness for SSH threats

---

📎 Project Link

🔗 GitHub Repository: mikecozier/fail2ban