holy shit CrowdSec has the greatest documentation for anything I’ve ever seen ever. it’s also like a million times better than fail2ban in every way. I don’t know if y’all have ever tried to edit the configs for fail2ban but it is basically an impossible task. imagine 12 massive regexes split across 30 INI files
anyway fail2ban wasn’t blocking the vulnerability scanners because its config was using a bunch of brittle regexes that weren’t working and I wasn’t able to fix that but now I’m using CrowdSec and I’m so glad I am omg