Simple Fail2banNotifier for exception_notification (will submit a pull request and update gist when accepted).See: https://dradisframework.com/academy/knowledge-base/ruby/ruby-on-rails/protect-rails-application-with-fail2ban.html

fail2ban_notifier.rb

class Fail2banNotifier
  def initialize(options)
    @default_options = options
    @default_options[:logfile] ||= Rails.root.join('log', 'fail2ban.log')

    # Roll over every 30M, keep 10 files
    @logger ||= Logger.new(@default_options[:logfile], 10, 30*1024*1024)
  end

  def call(exception, options={})
    env = options[:env]
    request = ActionDispatch::Request.new(env)

    # <ip> : <exception class> : <method> <path> -- <params>
    msg = "%s : %s : %s %s -- %s" % [
      request.remote_ip,
      exception.class,
      request.request_method,
      env["PATH_INFO"],
      request.filtered_parameters.inspect
    ]
    @logger.error(msg)
  end
end

jail.local

# Custom Rails app jail. Add to /etc/fail2ban/jail.local
[rails-app]
enabled = true
port = http,https
filter = rails-app
logpath = /path/to/app/log/fail2ban.log
bantime = 3600
findtime = 600
maxretry = 10

rails-app.conf

# Custom Rails app filter. Place in /etc/fail2ban/filter.d/
[Definition]
failregex = : <HOST> :
ignoreregex =

Clean looking code! But am I missing a crucial piece or how is this tying into a, for example, login process? Am I supposed to throw an exception on a failed login that will trigger this fail2ban log? Won't this also trigger on 'regular' exceptions found, rewarding end users with a ban for finding a bug in my code? :)