https://nuteo.info/en/tags/fail2ban/Recent content in Fail2ban on nuteo.infoHugoen© 2026 NuteoMon, 03 Aug 2026 00:00:00 +0000https://nuteo.info/en/guides/crowdsec-setup/Mon, 03 Aug 2026 00:00:00 +0000https://nuteo.info/en/guides/crowdsec-setup/<h1 id="crowdsec-collaborative-intrusion-prevention">CrowdSec: collaborative intrusion prevention</h1> <p>fail2ban works, but it&rsquo;s solo — every server sees the same SSH brute-force attempts independently. CrowdSec fixes that: when one server bans an IP, <strong>all</strong> CrowdSec users benefit from the shared blocklist.</p> <h2 id="install">Install</h2> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl"><span class="c1"># CrowdSec engine</span> </span></span><span class="line"><span class="cl">curl -s https://packagecloud.io/install/repositories/crowdsec/crowdsec/script.deb.sh <span class="p">|</span> sudo bash </span></span><span class="line"><span class="cl">apt install -y crowdsec </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="c1"># Caddy bouncer (rejects bad IPs at the reverse proxy level)</span> </span></span><span class="line"><span class="cl">apt install -y crowdsec-caddy-bouncer </span></span></code></pre></div><p>CrowdSec auto-detects running services and activates parsers. For a stock setup, it will parse SSH, Caddy, and Nginx logs out of the box.</p>