Offenders (Fail2Ban TUI)

Offenders is a Linux terminal dashboard for Fail2Ban history and live jail status. Inspect banned IPs, ASN/Country summaries, jail settings and current membership; run on-demand Registration/RDNS lookups or a manual Coverage analysis for review.

Current dashboard with synthetic documentation addresses and no GeoIP databases.

• Explore rolling history periods, live jail status, and IP/ASN/Country summaries.
• Filter loaded results and investigate individual jails and IPs.
• Review Coverage evidence and explicitly validate copy-only filter candidates.

Reports and investigation are read-only with respect to Fail2Ban configuration and bans. There is no ban/unban action or automatic Fail2Ban mutation. Coverage never installs filters/jails or enables/reloads Fail2Ban. Persistent application changes are limited to explicit or opt-in GeoIP data/policy under your XDG data root; validation also uses temporary local sample files.

Quick start

Supported baseline: Ubuntu 24.04 / Python >=3.12 / Fail2Ban >=1.0.2. Fail2Ban, readable logs, and narrowly scoped noninteractive sudo permissions must be supplied separately; see installation and permissions.

Install from PyPI and run:

pipx install offenders
offenders

GeoIP enrichment is optional. Installation downloads no databases; an explicit update fetches DB-IP Lite, and automatic updates require opt-in. See the GeoIP guide for lifecycle and attribution. Coverage analysis and validation are explicit, manual, and copy-only; a sample match never establishes filter safety. See Coverage.

Documentation

Operator documentation · PyPI · Releases · Changelog · Development · MIT license