Our great sponsors
-
crowdsec
CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.
-
iptables-nftables-multiroute-firewall
A collection of nftables, multi routing scripts, port knocked, and iptables files. To get inspiration to make your own firewalls.
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
I'll suggest CrowdSec instead. It's free, open source and crowdsourced threat intelligence based IPS and IDS (and much more). Basically one of the ideas behind it was to create a modern version of fail2ban in that it's based on crowdsourced threat intelligence and capable of taking much more advanced decisions. The crowdsourced part means that it - like f2b parses logfiles and detects attacks. Then it sends anonymized, basic intelligence about those attacks to the rest of the ecosystem and downloads relevant blocklists so that bad guys are blocked before they get the chance to attack. On top of that it can detect portscannings and all sorts of ressource abuse like botscraping, creditcard stuffing, data exfiltration, and various web-attacks and block those attacks either on L3 or L7 using host firewalls or blocking directly in applications like wordpress, php web apps in general, nginx, Cloudflare or others. The sky is literally the limit here.