fail2ban

A security service that blocks malicious login attempts using log analysis

18k 1.5k

last commit 2026-02-12

About

Daemon to ban hosts that cause multiple authentication errors

11+16

Log-Based Intrusion Detection
Core
Monitors log files to detect repeated authentication failures
Automated Banning
Core
Temporarily blocks IP addresses that trigger defined rules
Service Profiles
Core
Includes predefined rules for common services like SSH and web servers
Custom Filters
Allows defining custom patterns to match log events
Multiple Ban Actions
Supports firewall rules email notifications and custom actions
Whitelisting
Excludes trusted IP addresses from bans
Runtime Control
Manages jails and bans without restarting services
Self-Hosted Security Service
Run the service on your own servers