fail2ban
« Back to VersTracker
Description:
Scan log files and ban IPs showing malicious signs
Type: Formula  |  Latest Version: 1.1.0@2  |  Tracked Since: Dec 17, 2025
Links: Homepage  |  formulae.brew.sh
Category: Security
Tags: security firewall intrusion-prevention brute-force ip-blocking
Install: brew install fail2ban
About:
Fail2ban is an intrusion prevention framework that monitors log files for malicious activity like repeated failed login attempts. It automatically updates firewall rules to block offending IP addresses, effectively hardening server security against brute-force attacks. The tool is highly configurable and supports a wide range of services and actions.
Key Features:
  • Scans log files for patterns indicating malicious behavior
  • Automatically updates firewall rules to ban offending IPs
  • Extensible with a flexible plugin architecture and filters
  • Supports multiple actions including email alerts and routing updates
Use Cases:
  • Protecting SSH access from brute-force dictionary attacks
  • Securing web applications (e.g., WordPress) against credential stuffing
  • Hardening any network service that logs authentication failures
Alternatives:
  • CrowdSec – A modern, collaborative alternative that shares threat intelligence across a community network.
License: GPL-2.0-or-later
Dependencies: python@3.14
Bottles available for: arm64_tahoe, arm64_sequoia, arm64_sonoma, sonoma, arm64_linux, x86_64_linux
Important Notes:
You must enable any jails by editing:
  $HOMEBREW_PREFIX/etc/fail2ban/jail.conf

Other configuration files are in $HOMEBREW_PREFIX/etc/fail2ban. See more instructions at
https://github.com/fail2ban/fail2ban/wiki/Proper-fail2ban-configuration.
Version History
Detected Version Rev Change Commit
Sep 13, 2025 2:34pm 2 VERSION_BUMP 8914ee27
Dec 4, 2024 12:41pm 2 VERSION_BUMP 5e4ed6db
Oct 10, 2024 8:47pm 2 VERSION_BUMP 9fa0a1c0
Sep 13, 2024 4:05am 2 VERSION_BUMP ff46171d