first

README.md

@@ -0,0 +1,13 @@
+# blockfast
+
+block ssh and http scanners fast
+
+features:
+  - generic SSH log parser
+  - generic Common Log Format parser (apache logs, caddy logs, etc...)
+  - sane defaults
+  - fast ip ban with `ipset`
+  - libmusl static release builds, no libc dependency
+  - lighter alternative to fail2ban
+
+Todo: more granular CLI args to filter HTTP Status codes (e.g. 5 401 leads to a block, but 30 404 before a block) ?