Open Source Fail2ban AlternativesFirewalls and other similar apps like Fail2ban

The best open source alternative to Fail2ban is CrowdSec. It's not free, so if you're looking for a free alternative, you could try CrowdSec or SSHGuard. If that doesn't suit you, our users have ranked more than 25 alternatives to Fail2ban and 14 is open source so hopefully you can find a suitable replacement. Other interesting open source alternatives to Fail2ban are EvlWatcher, reaction, Cyberarms Intrusion Detection and Defense and Pyruse.

More about Fail2ban
Copy a direct link to this comment to your clipboard
Alternatives
Fail2ban alternatives page was last updated

Alternatives list

  1. CrowdSec icon

    CrowdSec

     24 likes

    CrowdSec is a security automation engine, using both local IP behavior detection & our community-driven IP reputation database.

    Cost / License

    • Free Personal
    • Open Source (MIT)

    Application type

    Platforms

    • Linux
    • Self-Hosted
    Good alternative?
     
  2. SSHGuard icon

    SSHGuard

     26 likes

    SSHGuard monitors services through their logging activity. It reacts to messages about dangerous activity by blocking the source address with the local firewall. SSHGuard employs a clever parser that can transparently recognize several logging formats at once (syslog, syslog-ng...

    Cost / License

    • Free
    • Open Source

    Application type

    Platforms

    • Mac
    • Linux
    Good alternative?
     
    |
    1
  4. IPBanPro icon

    IPBanPro

     7 likes

    IPBan is a FREE and open source application that allows auto banning ip addresses from failed login attempts. Many sources are watched such as SSH, SMTP, SQL-Server, MySQL, RDP and dropped packets.

    18 IPBanPro alternatives

    Cost / License

    • Paid
    • Open Source (MIT)

    Application type

    Platforms

    • Windows
    • Linux
    Good alternative?
     
    |
    1
  5. EvlWatcher icon

    EvlWatcher

     3 likes

    Protected against RDP-Brute forcers. It installs a service which scans the event log for anomalies every 30 seconds (by default).

    Cost / License

    • Free
    • Open Source (MIT)

    Application type

    Platforms

    • Windows
    EvlWatcher screenshot 1
    Good alternative?
     
  6. reaction icon

    reaction

     3 likes

    Inspired by the honorable Fail2ban, it intend to provide a more lightweight (CPU wise) alternative, easy to configure and well documented.

    Cost / License

    • Free
    • Open Source

    Application type

    Platforms

    • Self-Hosted
    • Linux
    Read current ban state
    Good alternative?
     
  9. P

    Pyruse

     2 likes

    Light-weight and extra-configurable peruser of systemd journal logs: ban IP, send immediate email, daily report… all based on a single JSON configuration file.

    Cost / License

    • Free
    • Open Source

    Platforms

    • Linux
    • Self-Hosted
    Good alternative?
     
    |
    1
  10. Denyhosts icon

    Denyhosts

     9 likes

    The idea of denying access to SSH servers is nothing new and I was inspired by many other scripts that I discovered. However, none of them did things the way I envisioned them to. Also, they were all shell scripts which do not offer the elegance of Python.

    Cost / License

    • Free
    • Open Source

    Platforms

    • Linux
    Good alternative?
     
  11. S

    Sentry (Bruteforce attack blocker)

     1 like

    Prevents Brute Force Attacks Against SSH, FTP, SMTP and More.

    Cost / License

    • Free
    • Open Source

    Application type

    Platforms

    • Mac
    • Linux
    • BSD
    Good alternative?
     
  12. wail2ban icon

    wail2ban

     1 like

    wail2ban is a windows port of the basic functionality of fail2ban, and combining elements of ts_block.

    Cost / License

    Alerts

    • Discontinued

    Platforms

    • Windows
    Good alternative?
     
  13. IPQ BDB icon

    IPQ BDB

     3 likes

    IPQ BDB filtering is done by a user space netfilter daemon that issues verdicts after looking up the IP address in a Berkeley DB. The fuzzy blocking model, freely inspired by STOCKADE, is designed to block non-distributed dictionary attacks and mitigate spam.

    Cost / License

    • Free
    • Open Source

    Application type

    Platforms

    • Linux
    Good alternative?
     
    |
    2
  14. S

    SpyLog

     1 like

    Monitor logs from several sources and execute actions based on some rules. Can be used to protect against brute-force attacks.

    Cost / License

    • Free
    • Open Source (MIT)

    Platforms

    • Windows
    Good alternative?
     
12 of 14 Fail2ban alternatives