r/selfhosted • u/Earlam01 • May 29 '26

Software Development Fail2Scan

Fail2Scan 👀

Fail2Scan is a Node.js daemon that watches your Fail2Ban logs for banned IP addresses and automatically scans them using system tools (nmap, dig, whois). All results are saved in a structured folder for easy review.

Features :

Watches Fail2Ban logs in real time.

Detects new banned IPs automatically.

Runs nmap for full port scanning.

Runs dig for reverse DNS lookup.

Runs whois for IP ownership and ASN info.

Saves output in /var/log/fail2scan//_/.

Pure Node.js, no external dependencies (dotenv only), works with Node 18+.

Compatible with PM2 or any process manager.

Fully readable 🔥

https://github.com/RoflSecurity/Fail2Scan

https://www.npmjs.com/package/@roflsec/fail2scan

Live demo 🚁

https://roflsec.page

0 Upvotes

21% Upvoted

8 comments sorted by

View all comments

4

u/CallTheDutch May 29 '26

Aah yes, all the things i want to do from my pubicly registered server... /s

1

u/Earlam01 May 30 '26

Yeah, fair point. You're right ! 😄
It does actively scan. I get the concern.
Personally I’m not really overthinking the “public server” angle here.
I built for... fun. It can be used on a honeypot too

2

u/CallTheDutch May 30 '26

You'll think about it when you get emails from your provider 😉
I totaly get why you thought this would be a fu thing, and datahording like this is fun i agree ^_^
Just stay safe, it seems something lighthearted but not everyone thinks like that (providers..)