Intrusion Prevention - SSH

Brute Force Detection (BFD) – log-based security tool

Brute Force Detection (BFD) is a log-based security tool that detects authentication failures and automatically bans hostile IP addresses on Linux servers.

Rather than using simple fixed failure counts, BFD uses exponential-decay pressure scoring. This helps distinguish occasional human password mistakes from sustained brute-force attacks.

This is free and open source software.

Key Features

  • Log-based brute force detection for Linux servers
  • Automatic IP banning
  • Exponential-decay pressure scoring
  • 57 service rules covering SSH, mail, FTP, web, databases, control panels, DNS, VPN, VoIP, proxies, and more
  • 8 firewall backends including APF, CSF, firewalld, UFW, nftables, iptables, route, and custom commands
  • IPv4 and IPv6 support
  • GeoIP enrichment and optional country-based pressure weighting
  • CDN and trusted proxy handling
  • Repeat offender escalation
  • Watch mode for low-latency detection
  • Dry-run and health-check modes
  • Email, Slack, Telegram, and Discord alerts
  • Manual ban, unban, and active-ban listing

Website: github.com/rfxn/brute-force-detection
Support:
Developer: R-fx Networks
License: GNU General Public License v2.0


Related Software

Intrusion Prevention for SSH
Fail2BanIntrusion prevention software framework written in Python
CrowdSecModern and collaborative behavior detection engine
SSHGuardProtects hosts from brute-force attacks against SSH and other services
denyhostsHelps thwart SSH server attacks
IPBanDetects repeated failed logins
CSFConfigServer Security & Firewall
reactionDaemon that scans program outputs for repeated patterns, and takes action
BFDLog-based security tool that detects authentication failures

Read our verdict in the software roundup.


Best Free and Open Source Software Explore our carefully curated directory of recommended free and open source software, covering every major software category.

The directory forms part of our extensive collection of articles for Linux enthusiasts. It includes hundreds of detailed reviews, together with free and open source alternatives to proprietary software from companies such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk.

LinuxLinks also covers interesting projects worth exploring, Linux-compatible hardware, free programming books and tutorials, and much more.

Know a useful free and open source Linux application that we haven’t covered? Tell us about it using our submission form.
Subscribe

Please read our Comment Policy before commenting.

Notify of
guest
0 Comments
Oldest
Newest Most Voted