BanHammer: Fail2Ban Monitor

BanHammer connects directly to your Linux server and shows you — in real time — who is trying to break in and who has already been blocked by Fail2Ban.

• Live ban feed — watch new bans appear the moment they happen via WebSocket

• Jail overview — ssh, postfix, dovecot, and every other Fail2Ban jail at a glance

• World map — see blocked IPs plotted on an interactive globe with animated arc lines

• Statistics — top attackers by IP and country, trend charts, attack heatmap

• Manual unban & whitelist — unban IPs or whitelist them directly from the app

• Local notifications — get alerted when attack waves hit, repeat offenders appear, or your server goes offline

• Multiple servers — manage all your servers in one place

• Home Screen widgets — ban count and server status without opening the app

• iCloud sync — your server configurations survive app reinstalls (opt-in)

REQUIREMENTS

BanHammer requires the free, open-source banhammer-agent to be installed on your Linux server. The agent parses Fail2Ban logs in real time, stores events in a local SQLite database, and exposes a REST API + WebSocket endpoint. Setup takes about 5 minutes.

→ github.com/a6k/banhammer-agent

YOUR DATA STAYS ON YOUR SERVER

BanHammer connects directly from your device to your server — no cloud backend, no analytics, no third-party services. Your API key is stored in the device Keychain. Nothing leaves your infrastructure except the connection to your own server.

PERFECT FOR

Self-hosters, homelab operators, and sysadmins who want a native, beautiful iOS/macOS interface for their existing Fail2Ban setup — without SSH.