1 Like

Hookem-Banem

Centralised log monitoring which distributes block requests of repeated failure attempts across multiple servers

Free Open Source
Linux
Self-Hosted

Built to react fast in server farms environments (ISPs, HSPs, organisations...) Hookem-Banem is a log monitoring system which monitors logs being sent to a central server (syslog, file...) and on detection of malicious intent (repeated login failures, many failed RCPT commands, bad HTTP requests... any other repeating condition you want to monitor for) it broadcasts a ban command to all servers in the cluster so the clients running on each machine can drop/reject any future connections from the attacker for a limited time (and on continued repeats even longer periods)... More Info »

You can just monitor sshd logs for individual matching lines or using the built in pattern matching (generated line X then generated line Y), Hookem-Banem can be configured to only block specific attack attempts.

Links to official Hookem-Banem sites

Official Website GitHub

Features

Distributed Support for IPv6 Add a feature

Category

Security & Privacy

Tags

centralized-logging cluster firewall log-monitor subnetting

Hookem-Banem was added by nzhook in Jun 2019 and the latest update was made in Jun 2019. The list of alternatives was updated Jun 2019. It's possible to update the information on Hookem-Banem or report it as discontinued, duplicated or spam.

MORE APP INFO Official website

Reviews 0

Alternatives to Hookem-Banem for all platforms with any license

Fail2ban

Fail2ban scans log files (e.g. /var/log/apache/error_log) and bans IPs that show the malicious signs -- too many password failures, seeking for exploits, etc. Generally...

Free Open Source Linux
No features added Add a feature

23 Like
SSHGuard

SSHGuard monitors services through their logging activity. It reacts to messages about dangerous activity by blocking the source address with the local firewall....

Free Open Source Mac Linux
SSH Web log analysis Add a feature

23 Like
Denyhosts

The idea of denying access to SSH servers is nothing new and I was inspired by many other scripts that I discovered. However, none of them did things the way I...

Free Open Source Linux
Web log analysis Add a feature

7 Like
RdpGuard

RdpGuard allows you to protect your Remote Desktop (RDP) from brute-force attacks by blocking attacker's IP address. Fail2Ban for Windows.

Commercial Windows
Remote desktop Add a feature

6 Like
HeatShield

HeatShield is a network firewall management service and SSH brute force blocker for Linux servers.

Freemium Linux Web
Server Management Add a feature

1 Like
e.guardo Smart Defender

e.guardo protects your RDP, MSSQL, FTP, SMTP, EXCHANGE, OWA, LYNC, MICROSOFT DYNAMICS CRM, SHAREPOINT and many more services from Brute Force and Dictionary Attacks

Commercial Windows Web
Heuristic Detection Add a feature

1 Like
Know any more alternatives to Hookem-Banem?
Suggest an application to this list

Hookem-Banem Comments

Echo echo ... Feels empty in here

Maybe you want to be the first to submit a comment about Hookem-Banem? Just click the button up to your right!