Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/shafiqsaaidin/fail2ban-telegram-notification
Send notification to Telegram when fail2ban ban and unband an IP Address to alert Network Admin
https://github.com/shafiqsaaidin/fail2ban-telegram-notification
fail2ban-telegram-notification notification ssh telegram telegram-bot
Last synced: 2 months ago
JSON representation
Send notification to Telegram when fail2ban ban and unband an IP Address to alert Network Admin
- Host: GitHub
- URL: https://github.com/shafiqsaaidin/fail2ban-telegram-notification
- Owner: shafiqsaaidin
- Created: 2018-02-19T12:52:25.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2021-01-11T03:18:47.000Z (over 3 years ago)
- Last Synced: 2024-01-29T08:59:11.839Z (5 months ago)
- Topics: fail2ban-telegram-notification, notification, ssh, telegram, telegram-bot
- Language: Shell
- Homepage:
- Size: 10.7 KB
- Stars: 72
- Watchers: 7
- Forks: 24
- Open Issues: 3
-
Metadata Files:
- Readme: README.md
Lists
- awesome-stars - shafiqsaaidin/fail2ban-telegram-notification - Send notification to Telegram when fail2ban ban and unband an IP Address to alert Network Admin (Shell)
README
# fail2ban-telegram-notification
Send notification to telegram when fail2ban ban an IP address and unband an IP address
### Requirement
- openssh
- vsftpd
- fail2ban
- curl
- telegram bot api
### Installation
`$ sudo apt install vsftpd fail2ban ssh-server`
### Configuration
#### Fail2ban
- Create a copy of jail.conf `cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local`.
- Create ban rules in jail.local
ignoreip = 127.0.0.1/8 192.168.1.101
bantime = 3600
findtime = 120
maxretry = 3
- Protect vsftpd with fail2ban. Make chage to [vsftpd] section in jail.local
enabled = true
filter = vsftpd
action =
iptables[name=VSFTPD, port=21, protocol=tcp]
telegram
- If you want to protect SSH with fail2ban add this to [sshd]
enabled = true
filter = sshd
maxretry = 3
logpath = /var/log/auth.log
action =
iptables[name=SSH, port=22, protocol=tcp]
telegram
- Make script directory to place our shell script
`sudo mkdir /etc/fail2ban/scripts/`
in the following directory add `fail2ban-telegram.sh`
- Copy telegram.conf to `/etc/fail2ban/action.d/` directory
`cp telegram.conf /etc/fail2ban/action.d/`
- Edit fail2ban-telegram.sh and replace the `apiToken` and `chatId` with your api. You must create telegram bot first and get the api key [here](https://www.sohamkamani.com/blog/2016/09/21/making-a-telegram-bot/)
### Start the service
systemctl start ssh-server
systemctl start vsftpd
systemctl start fail2ban
### Demo video
[](https://youtu.be/LYLiCK5XGXk)