intrusion prevention Archives

8 Best Free and Open Source Tools for SSH Intrusion Prevention

This article recommends open source software that employ different techniques to make it harder for a server running SSH to be compromised.

privacyIDEA is an MFA platform that helps secure applications and infrastructure with additional authentication factors.

BFD is a log-based security tool that detects authentication failures and automatically bans hostile IP addresses on Linux servers.

endlessh-go is an SSH tarpit that slowly sends an endless SSH banner to clients, tying up bots and brute-force attackers.

iptables is a user space application program that allows a system administrator to configure the Netfilter tables, chains, and rules.

CrowdSec is a modern and collaborative behavior detection engine, coupled with a global IP reputation network.

SSHGuard is an intrusion prevention system that parses server logs, determines malicious activity, and uses the system firewall.

DenyHosts is a Python script that analyzes the sshd server log messages to determine what hosts are attempting to hack into your system.