# Install sshguard Protect from brute force attacks against SSH. Version 2.5.1 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:sshguard ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install sshguard ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install sshguard ``` Evidence: MacPorts ports tree: net/sshguard/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add sshguard ``` Evidence: Alpine Linux edge package indexes: sshguard from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install sshguard ``` Evidence: Debian stable package indexes: sshguard from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install sshguard ``` Evidence: Fedora Rawhide package metadata: sshguard from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#sshguard ``` Evidence: nixpkgs package indexes: pkgs/by-name/ss/sshguard/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S sshguard ``` Evidence: Arch Linux sync databases: sshguard from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install sshguard ``` Evidence: openSUSE Tumbleweed package metadata: sshguard from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst ## Package Facts - **Package key:** brew:sshguard - **Package manager:** Homebrew - **Package manager URL:** - **Version:** 2.5.1 - **Source summary:** Protect from brute force attacks against SSH - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** ISC - **Source archive:** - **Generated:** 2026-06-10T07:18:26+00:00 ## Executables - sshguard (cli) - sshguard (alias) ## Install Behavior - Post-install hook: not defined - Service: declared - Caveats: Add the following lines to /etc/pf.conf to block entries in the sshguard table (replace $ext_if with your WAN interface): table persist block in quick on $ext_if proto tcp from to any port 22 label "ssh bruteforce" Then run sudo pfctl -f /etc/pf.conf to reload the rules. - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux ## Freshness - Page generated: 2026-06-10 - Package-manager version: 2.5.1 - Local data status: ok - Upstream repository: https://www.sshguard.net/ - info: No package-manager update timestamp was available. - info: Release/tag comparison is only available for GitHub repositories. ## Notes de sécurité broad file, network, media, or database tool signal. formula declares a Homebrew service. - **Geiger risk:** orange / medium - broad file, network, media, or database tool signal - formula declares a Homebrew service ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** sshguard - **Version Scheme:** 1 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - sshguard - 2.4.3-1: normalized package name match | Debian stable package indexes: sshguard from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Protects from brute force attacks against ssh | https://sshguard.sourceforge.net - Nix - sshguard: normalized package name match | nixpkgs package indexes: pkgs/by-name/ss/sshguard/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - sshguard - 2.4.2-1: normalized package name match | Ubuntu 24.04 LTS package indexes: sshguard from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Protects from brute force attacks against ssh | http://sshguard.sourceforge.net - apk - sshguard - 2.5.1-r0: normalized package name match | Alpine Linux edge package indexes: sshguard from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Protects hosts from brute-force attacks against SSH and other services | https://www.sshguard.net/ - apk - sshguard-doc - 2.5.1-r0: normalized package name match | Alpine Linux edge package indexes: sshguard-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Protects hosts from brute-force attacks against SSH and other services (documentation) | https://www.sshguard.net/ - apk - sshguard-openrc - 2.5.1-r0: normalized package name match | Alpine Linux edge package indexes: sshguard-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Protects hosts from brute-force attacks against SSH and other services (OpenRC init scripts) | https://www.sshguard.net/ - dnf - sshguard - 2.5.1-3.fc44: normalized package name match | Fedora Rawhide package metadata: sshguard from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Protects hosts from brute-force attacks against SSH and other services | http://www.sshguard.net - dnf - sshguard-firewalld - 2.5.1-3.fc44: normalized package name match | Fedora Rawhide package metadata: sshguard-firewalld from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Configuration for firewalld backend of SSHGuard | http://www.sshguard.net - dnf - sshguard-iptables - 2.5.1-3.fc44: normalized package name match | Fedora Rawhide package metadata: sshguard-iptables from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Configuration for iptables backend of SSHGuard | http://www.sshguard.net - dnf - sshguard-nftables - 2.5.1-3.fc44: normalized package name match | Fedora Rawhide package metadata: sshguard-nftables from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Configuration for nftables backend of SSHGuard | http://www.sshguard.net - pacman - sshguard - 2.5.1-1: normalized package name match | Arch Linux sync databases: sshguard from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Brute force detector for SSH, Exim, VSFTPD and more. Blocks by ip with iptables | https://www.sshguard.net/ - zypper - sshguard - 2.4.3-2.3: normalized package name match | openSUSE Tumbleweed package metadata: sshguard from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | SSH brute force attack protector | https://www.sshguard.net/ - MacPorts - sshguard: normalized package name match | MacPorts ports tree: net/sshguard/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## Related Links - [Secret-risk packages](https://www.automicvault.com/fr/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/fr/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/fr/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/fr/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [fail2ban](https://www.automicvault.com/fr/pkg/brew/fail2ban/) - Shares av.db curated category or tags: cli, firewall, intrusion-prevention, security. - [skm](https://www.automicvault.com/fr/pkg/brew/skm/) - Shares av.db curated category or tags: cli, security, ssh. - [tkey-ssh-agent](https://www.automicvault.com/fr/pkg/brew/tkey-ssh-agent/) - Shares av.db curated category or tags: cli, security, ssh. - [openssh](https://www.automicvault.com/fr/pkg/brew/openssh/) - Shares av.db curated category or tags: cli, security, ssh. - [ssh-copy-id](https://www.automicvault.com/fr/pkg/brew/ssh-copy-id/) - Shares av.db curated category or tags: cli, security, ssh. - [ssh-vault](https://www.automicvault.com/fr/pkg/brew/ssh-vault/) - Shares av.db curated category or tags: cli, security, ssh. - [ssh-audit](https://www.automicvault.com/fr/pkg/brew/ssh-audit/) - Shares av.db curated category or tags: cli, security, ssh. - [yubikey-agent](https://www.automicvault.com/fr/pkg/brew/yubikey-agent/) - Shares av.db curated category or tags: cli, security, ssh. ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph