coldframe
A decoy refrigeration controller that records who comes knocking and why
Emerged finds new products worth a look, daily — what’s new today
You keep fail2ban's log-to-ban model but run it as one static binary whose parsers cannot be pushed into unbounded work by the attackers writing to your logs.
fail2zig reads your logs, spots repeated authentication failures and bans the offending IPs, the same model as fail2ban without the Python runtime. It ships as one static binary per architecture, from x86_64 and ARM64 to MIPS. In place of regex it uses memory-bounded parsers, with 15 built-in filters for SSH, nginx, Apache and mail servers. Bans persist in SQLite across restarts and are enforced through nftables over netlink, or iptables and ipset. It can inspect and migrate an existing fail2ban configuration and exports Prometheus metrics. AGPL-3.0, at v0.4, with no speed claims.
More like this
Aartool
Linux hardening ranked by which attack paths each fix breaks, then verified
ESP-Watchtower
Turns a spare ESP8266 into a network watchdog with three decoys
Bouncer
A local gate on where your agent is allowed to send things
logcrux
Point it at a log file and get the incident, with line numbers, offline
CTRLRun
An open-source safety layer that checks every AI agent action before it runs