Pyruse is described as 'Light-weight and extra-configurable peruser of systemd journal logs: ban IP, send immediate email, daily report… all based on a single JSON configuration file' and is an app. There are six alternatives to Pyruse for Linux, Self-Hosted, Mac and Windows. The best Pyruse alternative is Fail2ban, which is both free and Open Source. Other great apps like Pyruse are SSHGuard, reaction, Denyhosts and tallow.
Fail2ban scans log files (e.g. /var/log/apache/error_log) and bans IPs that show the malicious signs -- too many password failures, seeking for exploits, etc. Generally Fail2Ban is then used to update firewall rules to reject the IP addresses for a specified amount of time...
Fail2ban is the most popular Linux alternative to Pyruse.
Fail2ban is the most popular Open Source & free alternative to Pyruse.
SSHGuard monitors services through their logging activity. It reacts to messages about dangerous activity by blocking the source address with the local firewall. SSHGuard employs a clever parser that can transparently recognize several logging formats at once (syslog, syslog-ng...
SSHGuard is the most popular Mac alternative to Pyruse.
reaction is the most popular Self-Hosted alternative to Pyruse.
The idea of denying access to SSH servers is nothing new and I was inspired by many other scripts that I discovered. However, none of them did things the way I envisioned them to. Also, they were all shell scripts which do not offer the elegance of Python.
Tallow is a fail2ban/lard replacement that uses systemd's native journal API to scan for attempted ssh logins, and issues temporary IP bans for clients that violate certain login patterns.
win2ban is a Fail2ban implementation for Windows systems. It is a packaging of Fail2ban, Python, Cygwin, Winlogbeat and many other related tools to make it a complete and ready-to-use solution for brute-force attack protection.
win2ban is the most popular Windows alternative to Pyruse.
Norway