CrowdSec is an open-source IDS/IPS and WAF that analyzes logs and HTTP requests on one machine while blocking threats at your firewall, reverse proxy, or CDN. It uses a community blocklist to proactively filter malicious IPs before they reach your infrastructure and supports OWASP Core Rule Sets via its Coraza-based WAF component.
It is useful if you need to centralize log analysis while keeping enforcement close to the edge, replacing fail2ban with a more flexible architecture. The main catch is that the full remediation and visualization features rely on their hosted Console, which limits pure self-hosted independence.
more: https://github.com/crowdsecurity/crowdsec
my other side: ivo.blogspot.com
Leave a Reply