fail2ban Regex Tester
Test a fail2ban failregex or filter on log lines in your browser, like fail2ban-regex: every one of fail2ban 1.1.1's 96 filters in every mode, or your own.
https://logtriage.app/tools/fail2ban-regex-tester/
#infosec #blueteam
Test a fail2ban failregex or filter on log lines in your browser, like fail2ban-regex: every one of fail2ban 1.1.1's 96 filters in every mode, or your own.
https://logtriage.app/tools/fail2ban-regex-tester/
#infosec #blueteam
fail2ban Regex Tester Online: Test failregex and Filters on Your Log Lines
Test a fail2ban failregex or filter on log lines in your browser, like fail2ban-regex: every one of fail2ban 1.1.1's 96 filters in every mode, or your own. See which lines match, which are missed and which addresses would be banned.
logtriage.app
November 9, 2026 at 7:45 AM
fail2ban Regex Tester
Test a fail2ban failregex or filter on log lines in your browser, like fail2ban-regex: every one of fail2ban 1.1.1's 96 filters in every mode, or your own.
https://logtriage.app/tools/fail2ban-regex-tester/
#infosec #blueteam
Test a fail2ban failregex or filter on log lines in your browser, like fail2ban-regex: every one of fail2ban 1.1.1's 96 filters in every mode, or your own.
https://logtriage.app/tools/fail2ban-regex-tester/
#infosec #blueteam
Beizzítottam egy új fail2ban szabályt, ami 99.7%-át kibassza az abúzereknek, most tűkön ülve várom, hogy a botok rápróbáljanak :D
November 5, 2026 at 11:29 PM
Beizzítottam egy új fail2ban szabályt, ami 99.7%-át kibassza az abúzereknek, most tűkön ülve várom, hogy a botok rápróbáljanak :D
Also fail2ban is nice, if only to keep the traffic down
November 5, 2026 at 7:58 PM
Also fail2ban is nice, if only to keep the traffic down
¿Tailscale o similares? Fail2ban no era muy complicado de configurar… lo puede hacer hasta un product manager (yo soy el product manager)
November 8, 2026 at 4:41 PM
¿Tailscale o similares? Fail2ban no era muy complicado de configurar… lo puede hacer hasta un product manager (yo soy el product manager)
Fail2ban and RSS Feeds: Stop False Bans of Auto-Posters
#PostRSS #Blogging #DigitalMarketing #SaaS
https://postrss.com/fail2ban-rss-feed-false-bans/
#PostRSS #Blogging #DigitalMarketing #SaaS
https://postrss.com/fail2ban-rss-feed-false-bans/
Fail2ban and RSS Feeds: Stop False Bans of Auto-Posters
#PostRSS #Blogging #DigitalMarketing #SaaS
postrss.com
November 8, 2026 at 11:25 AM
Fail2ban and RSS Feeds: Stop False Bans of Auto-Posters
#PostRSS #Blogging #DigitalMarketing #SaaS
https://postrss.com/fail2ban-rss-feed-false-bans/
#PostRSS #Blogging #DigitalMarketing #SaaS
https://postrss.com/fail2ban-rss-feed-false-bans/
📚 Deploy #Koha on #Debian #VPS for Self-Hosted Library Management System This article provides a guide to deploy Koha on Debian VPS to ...
Continued 👉 #integratedlibrarysystem #mysql #opensource #selfhosted #ufw #letsencrypt #selfhosting #mariadb #zebraserver #fail2ban #librarymanagementsoftware
Continued 👉 #integratedlibrarysystem #mysql #opensource #selfhosted #ufw #letsencrypt #selfhosting #mariadb #zebraserver #fail2ban #librarymanagementsoftware
📚 Deploy Koha on Debian VPS for Self-Hosted Library Management System
blog.radwebhosting.com
November 8, 2026 at 9:30 AM
📚 Deploy #Koha on #Debian #VPS for Self-Hosted Library Management System This article provides a guide to deploy Koha on Debian VPS to ...
Continued 👉 #integratedlibrarysystem #mysql #opensource #selfhosted #ufw #letsencrypt #selfhosting #mariadb #zebraserver #fail2ban #librarymanagementsoftware
Continued 👉 #integratedlibrarysystem #mysql #opensource #selfhosted #ufw #letsencrypt #selfhosting #mariadb #zebraserver #fail2ban #librarymanagementsoftware
Symptom: `sshd.log` shows repeated "Failed password". Fix: Install fail2ban. Create `/etc/fail2ban/jail.local`, set `enabled = true` for `[sshd]` with `banaction = iptables-multiport`. Restart service. Secure your VPS with InterServer: https://www.interserver.net/r/1196747?id=blueskysocia_1108 (#ad)
November 8, 2026 at 2:25 AM
Symptom: `sshd.log` shows repeated "Failed password". Fix: Install fail2ban. Create `/etc/fail2ban/jail.local`, set `enabled = true` for `[sshd]` with `banaction = iptables-multiport`. Restart service. Secure your VPS with InterServer: https://www.interserver.net/r/1196747?id=blueskysocia_1108 (#ad)
Stop brute force: `fail2ban-client status sshd`. If missing, install fail2ban, configure `sshd` in jail.local with `bantime=3600`, `maxretry=3`. Restart service. Validate with `iptables -L`. Host on GreenGeeks: https://www.greengeeks.com/track/affiliatechproject/cp-ffltc/lp-1?subid=blueskysocia_1108
November 8, 2026 at 12:58 PM
Stop brute force: `fail2ban-client status sshd`. If missing, install fail2ban, configure `sshd` in jail.local with `bantime=3600`, `maxretry=3`. Restart service. Validate with `iptables -L`. Host on GreenGeeks: https://www.greengeeks.com/track/affiliatechproject/cp-ffltc/lp-1?subid=blueskysocia_1108
Finally installed fail2ban on a server I manage and gd watching the bots get jailed attempting to ssh in
November 9, 2026 at 3:46 AM
Finally installed fail2ban on a server I manage and gd watching the bots get jailed attempting to ssh in
Gente que haga self-hosting expuesto a internet
¿Usáis fail2ban/crowdsec?
Me da pereza configurarlo y de todos modos mi setup no es vulnerable a ataques de fuerza bruta (el Jellyfin se pueden configurar los intentos manualmente y el SSH lo tengo por clave asimétrica)
¿Usáis fail2ban/crowdsec?
Me da pereza configurarlo y de todos modos mi setup no es vulnerable a ataques de fuerza bruta (el Jellyfin se pueden configurar los intentos manualmente y el SSH lo tengo por clave asimétrica)
November 8, 2026 at 10:19 AM
Gente que haga self-hosting expuesto a internet
¿Usáis fail2ban/crowdsec?
Me da pereza configurarlo y de todos modos mi setup no es vulnerable a ataques de fuerza bruta (el Jellyfin se pueden configurar los intentos manualmente y el SSH lo tengo por clave asimétrica)
¿Usáis fail2ban/crowdsec?
Me da pereza configurarlo y de todos modos mi setup no es vulnerable a ataques de fuerza bruta (el Jellyfin se pueden configurar los intentos manualmente y el SSH lo tengo por clave asimétrica)
Diagnose floods via `fail2ban-client status sshd` or `iptables -L`. Implement fail2ban to auto-drop IPs, then harden with `iptables -A INPUT -p tcp --dport 22 -m conntrack --ctstate NEW -m recent --set --rcheck --seconds 60 --hitcount 5 -j DROP`. Deploy on Hosting.com https://hosting.com/?utm_source
November 8, 2026 at 6:10 AM
Diagnose floods via `fail2ban-client status sshd` or `iptables -L`. Implement fail2ban to auto-drop IPs, then harden with `iptables -A INPUT -p tcp --dport 22 -m conntrack --ctstate NEW -m recent --set --rcheck --seconds 60 --hitcount 5 -j DROP`. Deploy on Hosting.com https://hosting.com/?utm_source
DevOps [cc118be4] ssh brute force automated fail2ban iptables r: Port hopping, Ed25519 key authentication only, and custom fail2ban jail wit. Verified Solution: https://www.greengeeks.com/track/affiliatechproject/cp-ffltc/lp-1?subid=blueskysocia_1106 #ad #devops
---
**Further Technical Reading:**
-
---
**Further Technical Reading:**
-
November 6, 2026 at 11:41 AM
DevOps [cc118be4] ssh brute force automated fail2ban iptables r: Port hopping, Ed25519 key authentication only, and custom fail2ban jail wit. Verified Solution: https://www.greengeeks.com/track/affiliatechproject/cp-ffltc/lp-1?subid=blueskysocia_1106 #ad #devops
---
**Further Technical Reading:**
-
---
**Further Technical Reading:**
-
Check `fail2ban-client status sshd` & `iptables -L -n`. If bans fail, verify `action = iptables-multiport` in `/etc/fail2ban/jail.local`. Ensure `filter = sshd` and `banaction = iptables-multiport`. Deploy on InterServer: https://www.interserver.net/r/1196747?id=blueskysocia_1106 (#ad)
---
**Furthe
---
**Furthe
November 6, 2026 at 12:26 PM
Check `fail2ban-client status sshd` & `iptables -L -n`. If bans fail, verify `action = iptables-multiport` in `/etc/fail2ban/jail.local`. Ensure `filter = sshd` and `banaction = iptables-multiport`. Deploy on InterServer: https://www.interserver.net/r/1196747?id=blueskysocia_1106 (#ad)
---
**Furthe
---
**Furthe
embedded/local devices aside anything using password auth in 2026 deserves what happens to it fail2ban or not
November 7, 2026 at 12:58 AM
embedded/local devices aside anything using password auth in 2026 deserves what happens to it fail2ban or not
DevOps [de7cb6df] ssh brute force automated fail2ban iptables r: Port hopping, Ed25519 key authentication only, and custom fail2ban jail wit. Verified Solution: https://www.interserver.net/r/1196747?id=blueskysocia_1106 #ad #devops
---
**Further Technical Reading:**
- [Review the related architectu
---
**Further Technical Reading:**
- [Review the related architectu
November 6, 2026 at 3:09 AM
DevOps [de7cb6df] ssh brute force automated fail2ban iptables r: Port hopping, Ed25519 key authentication only, and custom fail2ban jail wit. Verified Solution: https://www.interserver.net/r/1196747?id=blueskysocia_1106 #ad #devops
---
**Further Technical Reading:**
- [Review the related architectu
---
**Further Technical Reading:**
- [Review the related architectu
Glad you found it helpful! 🚀 For an extra layer, consider adding Fail2Ban to catch the persistent bots. Every bit of hardening counts toward a more secure server. Stay safe! 🛡️💻
November 8, 2026 at 4:44 PM
Glad you found it helpful! 🚀 For an extra layer, consider adding Fail2Ban to catch the persistent bots. Every bit of hardening counts toward a more secure server. Stay safe! 🛡️💻
So absolutely use keygen with fail2ban on any server before you begin production or opening it up to the web
November 5, 2026 at 11:09 PM
So absolutely use keygen with fail2ban on any server before you begin production or opening it up to the web
Free to browse, no signup: 300,000+ malicious IPs from 23+ public feeds, each with threat type, confidence, ASN, and enrichment. Started as a personal fail2ban list. https://www.valtersit.com/threat-ip/
November 6, 2026 at 1:20 PM
Free to browse, no signup: 300,000+ malicious IPs from 23+ public feeds, each with threat type, confidence, ASN, and enrichment. Started as a personal fail2ban list. https://www.valtersit.com/threat-ip/
Check logs: `grep "Invalid user" /var/log/auth.log`. Deploy fail2ban + iptables rate limits immediately to block brute-force SSH attacks. For market risk context, use TradingView Direct: https://www.tradingview.com/?aff_id=1172685&subid=blueskysocia_1107 (#ad)
---
**Further Technical Reading:**
- [
---
**Further Technical Reading:**
- [
November 7, 2026 at 11:34 PM
Check logs: `grep "Invalid user" /var/log/auth.log`. Deploy fail2ban + iptables rate limits immediately to block brute-force SSH attacks. For market risk context, use TradingView Direct: https://www.tradingview.com/?aff_id=1172685&subid=blueskysocia_1107 (#ad)
---
**Further Technical Reading:**
- [
---
**Further Technical Reading:**
- [
This started as my own fail2ban blocklist. Instead of keeping it private I made it public: 300,000+ malicious IPs from 23+ feeds, free, no signup. Each one has a page with threat type, confidence and feeds. https://www.valtersit.com/threat-ip/
November 4, 2026 at 9:20 PM
This started as my own fail2ban blocklist. Instead of keeping it private I made it public: 300,000+ malicious IPs from 23+ feeds, free, no signup. Each one has a page with threat type, confidence and feeds. https://www.valtersit.com/threat-ip/
A log store with a search box is a library without a catalogue. So Graylog got one.
First catch: fail2ban saw every attack and banned nobody.
#Graylog #Homelab
www.behindtheconsole.com/2026/11/05/a...
First catch: fail2ban saw every attack and banned nobody.
#Graylog #Homelab
www.behindtheconsole.com/2026/11/05/a...
A Catalogue for the Library: Graylog Dashboards on the Proxmox Cluster – Behind The Console
www.behindtheconsole.com
November 5, 2026 at 10:15 AM
A log store with a search box is a library without a catalogue. So Graylog got one.
First catch: fail2ban saw every attack and banned nobody.
#Graylog #Homelab
www.behindtheconsole.com/2026/11/05/a...
First catch: fail2ban saw every attack and banned nobody.
#Graylog #Homelab
www.behindtheconsole.com/2026/11/05/a...
Für's erste habe ich mal eine einfache fail2ban Regel erstellt die entsprechende Anfragen matched. Der Bezug liegt hauptsächlich auf der http/1.1 Anfrage und dem User Agent der bisher in 2 Varianten aufgetaucht ist.
[Definition]
failregex =
^<HOST> .*"GET /\ […]
[Definition]
failregex =
^<HOST> .*"GET /\ […]
Original post on social.row-social.de
social.row-social.de
November 9, 2026 at 3:13 PM
Für's erste habe ich mal eine einfache fail2ban Regel erstellt die entsprechende Anfragen matched. Der Bezug liegt hauptsächlich auf der http/1.1 Anfrage und dem User Agent der bisher in 2 Varianten aufgetaucht ist.
[Definition]
failregex =
^<HOST> .*"GET /\ […]
[Definition]
failregex =
^<HOST> .*"GET /\ […]
Free open-source threat-IP blocklist, rendered straight into nftables, ipset, fail2ban, pfSense or MikroTik. It only pulls data down, sends nothing about your system. Needs API Standard (EUR 19/mo, locked for life if started before 1 Jan 2027). https://www.valtersit.com/scan/
November 7, 2026 at 10:20 AM
Free open-source threat-IP blocklist, rendered straight into nftables, ipset, fail2ban, pfSense or MikroTik. It only pulls data down, sends nothing about your system. Needs API Standard (EUR 19/mo, locked for life if started before 1 Jan 2027). https://www.valtersit.com/scan/
fail2ban seeing every attack and banning nobody is the most honest monitoring story I've read this week. Mine bans the wrong thing once a month and then acts genuinely surprised. Catalogue first, ban second, apparently.
November 6, 2026 at 1:02 AM
fail2ban seeing every attack and banning nobody is the most honest monitoring story I've read this week. Mine bans the wrong thing once a month and then acts genuinely surprised. Catalogue first, ban second, apparently.