Advanced IP Management System with Threat Intelligence Integration | byfranke.com

• Real-time IP threat analysis via AbuseIPDB
• Dual firewall management (UFW + Fail2Ban)
• Automatic security updates
• Secure API key storage
• Cross-platform support (APT/DNF/YUM based systems)
• Detailed threat reporting
• One-click mass unban
• New in v2.3: Threat intelligence report before banning IPs

sudo cd /etc
sudo git clone https://github.com/byfranke/IPDefender
sudo cd IPDefender
sudo chmod +x IPDefender.sh
sudo mv IPDefender.sh IPDefender

sudo IPDefender --install-deps

1. Create free account at AbuseIPDB
2. Get API key from dashboard
3. Configure in IPDefender:

sudo IPDefender --api-abuseipdb YOUR_API_KEY

# Ban IP with threat intelligence report
sudo IPDefender --ban 192.0.2.5 "SSH brute force"

# Bulk ban IPs from file (one per line)
sudo IPDefender --ban-list malicious_ips.txt "Botnet activity"

# Analyze IP reputation
sudo IPDefender --check 203.0.113.1

# List active bans
sudo IPDefender --list

# Update to latest version
sudo IPDefender --update

# Install and configure
sudo IPDefender --install-deps
sudo IPDefender --api-abuseipdb YOUR_KEY

# Investigate suspicious IP
sudo IPDefender --check 198.51.100.2

# Ban with threat intelligence (now shows report before banning)
sudo IPDefender --ban 198.51.100.2 "High threat score"

# Bulk ban from file (one IP per line)
sudo IPDefender --ban-list malicious_ips.txt "Botnet activity"

# Weekly maintenance
sudo IPDefender --update
sudo IPDefender --list

1. Threat Intelligence Before Banning

   • Automatic AbuseIPDB report when using --ban
   • Shows confidence score, reports, location and ISP
   • Helps make informed blocking decisions

2. Robust Bulk Processing

   • Improved whitespace handling in IP lists
   • Detailed summary with counts of:
     • New bans
     • Skipped (already banned)
     • Invalid IPs

3. Enhanced Update System

   • Installs to /usr/local/bin (standard for custom tools)
   • Automatic git dependency installation
   • Clear post-update instructions

4. Extended OS Support

   • Added YUM package manager (RHEL/CentOS)
   • Improved distro compatibility checks

• Linux (Debian/RedHat based distributions)
• Root privileges
• curl, jq, git
• UFW & Fail2Ban

Maintained by Frank E | Report Issue

This tool is maintained through community support. Help keep it active: