Open Source Fail2ban AlternativesFirewalls and other similar apps like Fail2ban

The best open source alternative to Fail2ban is CrowdSec. It's not free, so if you're looking for a free alternative, you could try CrowdSec or SSHGuard. If that doesn't suit you, our users have ranked more than 10 alternatives to Fail2ban and 14 is open source so hopefully you can find a suitable replacement. Other interesting open source alternatives to Fail2ban are EvlWatcher, Cyberarms Intrusion Detection and Defense, Pyruse and reaction.

Copy a direct link to this comment to your clipboard
Fail2ban alternatives page was last updated

Alternatives list

  1. CrowdSec icon
     21 likes

    CrowdSec is a security automation engine, using both local IP behavior detection & our community-driven IP reputation database.

    7 CrowdSec alternatives

    Cost / License

    • Free Personal
    • Open Source (MIT)

    Application type

    Platforms

    • Linux
    • Self-Hosted
     
  2. SSHGuard icon
     26 likes

    SSHGuard monitors services through their logging activity. It reacts to messages about dangerous activity by blocking the source address with the local firewall. SSHGuard employs a clever parser that can transparently recognize several logging formats at once (syslog, syslog-ng...

    Cost / License

    • Free
    • Open Source

    Application type

    Platforms

    • Mac
    • Linux
     
    |
    1
  3. IPBanPro icon
     7 likes

    IPBan is a FREE and open source application that allows auto banning ip addresses from failed login attempts. Many sources are watched such as SSH, SMTP, SQL-Server, MySQL, RDP and dropped packets.

    Cost / License

    • Paid
    • Open Source (MIT)

    Application types

    Platforms

    • Windows
    • Linux
     
    |
    1
  4. EvlWatcher icon
     3 likes

    Protected against RDP-Brute forcers. It installs a service which scans the event log for anomalies every 30 seconds (by default).

    Cost / License

    • Free
    • Open Source (MIT)

    Application type

    Platforms

    • Windows
     
  5.  2 likes

    Light-weight and extra-configurable peruser of systemd journal logs: ban IP, send immediate email, daily report… all based on a single JSON configuration file.

    Cost / License

    • Free
    • Open Source

    Platforms

    • Linux
    • Self-Hosted
     
    |
    1
  6. reaction icon
     2 likes

    Inspired by the honorable Fail2ban, it intend to provide a more lightweight (CPU wise) alternative, easy to configure and well documented.

    Cost / License

    • Free
    • Open Source

    Application type

    Platforms

    • Self-Hosted
    • Linux
     
  7. Denyhosts icon
     9 likes

    The idea of denying access to SSH servers is nothing new and I was inspired by many other scripts that I discovered. However, none of them did things the way I envisioned them to. Also, they were all shell scripts which do not offer the elegance of Python.

    Cost / License

    • Free
    • Open Source

    Platforms

    • Linux
     
  8. wail2ban icon
     1 like

    wail2ban is a windows port of the basic functionality of fail2ban, and combining elements of ts_block.

    Cost / License

    Alerts

    • Discontinued

    Platforms

    • Windows
     
  9. IPQ BDB icon
     3 likes

    IPQ BDB filtering is done by a user space netfilter daemon that issues verdicts after looking up the IP address in a Berkeley DB. The fuzzy blocking model, freely inspired by STOCKADE, is designed to block non-distributed dictionary attacks and mitigate spam.

    Cost / License

    • Free
    • Open Source

    Application type

    Platforms

    • Linux
     
    |
    2
  10. SpyLog icon
     1 like

    Monitor logs from several sources and execute actions based on some rules. Can be used to protect against brute-force attacks.

    18 SpyLog alternatives

    Cost / License

    • Free
    • Open Source (MIT)

    Platforms

    • Windows
     
12 of 14 Fail2ban alternatives