Fail2Ban

Intrusion prevention software. Ban IPs that show malicious signs based on log file analysis.

About Fail2Ban

Fail2Ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It updates firewall rules to reject the IP address for a configurable amount of time.

Key Features

Log file monitoring
Configurable ban actions
Multiple jail support
Email notifications
Whitelisting & regex filters
iptables, nftables, firewalld support

Why choose Fail2Ban?

Fail2Ban is an open source alternative to CrowdSec, DenyHosts. Licensed under GPL-2.0, it gives you full access to the source code and the freedom to modify, self-host, and contribute. You can deploy it on your own servers for complete data ownership and privacy.