ip-blocking

📖《这本书能让你连接互联网》 详细阐述代理、隧道、VPN运作过程，并对GFW策略如：地址端口封锁、服务器缓存投毒、数字验证攻击、SSL连接阻断做相关的原理说明

A lightweight, real time log monitoring tool designed to detect and block IP addresses exhibiting abusive behavior such as brute force attacks, excessive requests, or suspicious patterns. Automatically integrates with your server’s firewall (iptables or ufw) to block offenders and protect web services without relying on external services.

CrowdSec is an open-source cyber security tool. This plugin blocks detected attackers or display them a captcha.

The official PHP bouncers library for the CrowdSec LAPI

Threat-feed IP block automation for Linux and macOS firewalls (iptables, nftables, pf) with cron-ready updates, dry-run previews, and package releases.

Lockdown is a set of scripts, lists and configuration files used to quickly implement granular intelligent automated firewall security at the host level using iptables, ipset and fail2ban.

PHP script with control panel to block IP web access from certain countries of your choosing.

Automatic proxy rotation for anonymous web requests.

Skynet Lite - IP Blocking For ASUS Routers Using IPSet.

Minimal-footprint security event pipeline — pluggable sources, detectors, and sinks. Detect threats in any log, route to Fail2Ban, Cloudflare, or custom outputs. ~12 MB RAM.

Lightweight alternative to fail2ban using nftables (banning IPs with failed login attempts)

A set of Bash shell scripts to monitor and handle IP traffic on your webserver

📖 Detailed Explanation of Network Proxies and VPN Applications provides an in-depth analysis of the operations of proxies, tunnels, and VPNs, and explains the principles behind common large-scale filtering and censorship strategies such as address and port blocking, server cache poisoning, digital verification attacks, and SSL connection breaks.

Security middleware for Laravel in one line: blocks attack probes, scanners and failed-login brute force, auto-blocks repeat offenders, monitor mode to try it safely, alerts by mail, Slack or webhook. Runs on your own server.

A Cybersecurity tool to detect and block IPs conducting port scans on a host machine.

Lightweight Linux firewall and automatic IP-ban engine — a modern Fail2Ban/CSF alternative with nftables and iptables support.

KPots is a simple honeypots system to capture and log traffic to specified ports. Requires Netcat for monitoring and IPTables for banning. Requires dig for filtering out your own ip address. (Note: I will be adding alternatives in a later realease, but for now, just install dig.)

Block IPs with Vercel's Edge Middleware and Edge Config

One TUI + CLI to view, search, and manage IP bans, domain sinkholes, and null-routes across 19 Linux firewall, IDS, proxy, and WAF backends — fail2ban, CrowdSec, CSF, UFW, firewalld, nftables, and more.

IP list of port scanners