When I ran Crowdsec, I thought it was a great piece of software, and a very decent free tier. I didn't have any real complaints other that there was not a way, at the time that I knew of, to have the UI selfhosted. I think now someone has created a selfhostable user front end to it, but I haven't dabbled in that.
Here we go: https://corelab.tech/crowdsec-web-ui-setup-guide/
I think this gent posted this a week or so ago.
i run it on opnsense. When my services were on individual subdomains each with their own certificate, they got hit a lot and crowdsec blocked lots of bots and scripts
I ultimately moved all my services to a wildcard sub-subdomain, and poof all the bots went away and now crowdsec doesn't do much other than block port scanners which the firewall does anyway.
it's not worth the hassle to uninstall though.
It's great! I use it on both my home server and my Hetzner server. It blocks connections based on behaviors defined by scenarios. I configured it to block any connections it decides to block via the firewall.
So far, so good. I don't even know it's running. It just does its job of blocking bots.
I had it running in front of my Matrix server. With the default configuration it gave a lot of false positives, leaving friends out of the server. Also, most of my users use VPNs regularly, so geo-blocking was a hassle too. I tuned it a bit, but kept giving me headaches, so I ended up disabling it. I’ll spend more time tuning it someday.
I'm using it. It's good. Even without the cloud services the bouncer and scenarios are more powerful than fail2ban.
Shame about no self hosted web ui but someone posted here a project I'm ought to look up oncw I arrive home.
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:
| Fewer Letters | More Letters |
|---|---|
| DNS | Domain Name Service/System |
| ISP | Internet Service Provider |
| SSH | Secure Shell for remote terminal access |
| TLS | Transport Layer Security, supersedes SSL |
| VPN | Virtual Private Network |
[Thread #55 for this comm, first seen 15th Jul 2026, 22:40] [FAQ] [Full list] [Contact] [Source code]
I believe it is a good start with crowdsec but feels like it gives false protection. The blocking only happens after they have done a couple of attempts and not before.
all 24 comments