Fail2ban is described as 'Scans log files (e.g. /var/log/apache/error_log) and bans IPs that show the malicious signs -- too many password failures, seeking for exploits, etc. Generally Fail2Ban is then used to update firewall rules to reject the IP addresses for a specified amount of time' and is a Firewall in the security & privacy category. There are more than 10 alternatives to Fail2ban for a variety of platforms, including Linux, Windows, Web-based, Self-Hosted and Mac apps. The best Fail2ban alternative is CrowdSec. It's not free, so if you're looking for a free alternative, you could try CrowdSec or SSHGuard. Other great apps like Fail2ban are ConfigServer Firewall, IPBanPro, AbyssGuard and EvlWatcher.
The idea of denying access to SSH servers is nothing new and I was inspired by many other scripts that I discovered. However, none of them did things the way I envisioned them to. Also, they were all shell scripts which do not offer the elegance of Python.
RdpGuard allows you to protect your Remote Desktop (RDP) from brute-force attacks by blocking attacker's IP address. Fail2Ban for Windows.
United States
Protects DMZ and public systems by analyzing logs to defend against brute force, DDoS, and spoofing on networked services like RDP, IIS, and SMTP using dynamic rules and global blacklists, without replacing your firewall, supporting customization and integration.
Netherlands
EU
mobileFX Spartan RDP Guard is an intrusion detection system (IDS) and host-based intrusion prevention system (HIPS) implemented as a Windows 64-bit or 32-bit Service with location-based attack reporting and instant notifications.
United Kingdom
wail2ban is a windows port of the basic functionality of fail2ban, and combining elements of ts_block.
IPQ BDB filtering is done by a user space netfilter daemon that issues verdicts after looking up the IP address in a Berkeley DB. The fuzzy blocking model, freely inspired by STOCKADE, is designed to block non-distributed dictionary attacks and mitigate spam.
Built to react fast in server farms environments (ISPs, HSPs, organisations...) Hookem-Banem is a log monitoring system which monitors logs being sent to a central server (syslog, file...) and on detection of malicious intent (repeated login failures, many failed RCPT commands...
Defensia is a lightweight security agent for Linux servers that detects and blocks real attacks in real time — without complex configuration.
SpainEU
Blocks RDP brute force attacks by automatically banning malicious IPs via Windows Firewall
HungaryEU
