diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3a5fea2d..12c19b85 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,7 @@ The **patch** part changes incrementally at each release.
 ### Added
 
 ### Changed
+* evolinux-base: fail2ban is not enabled by default
 * mysql-oracle: copy evolinux config files in mysql.cond.d
 
 ### Fixed
diff --git a/evolinux-base/defaults/main.yml b/evolinux-base/defaults/main.yml
index 6f462f15..bb9725b2 100644
--- a/evolinux-base/defaults/main.yml
+++ b/evolinux-base/defaults/main.yml
@@ -192,7 +192,7 @@ evolinux_nagios_nrpe_include: True
 
 # fail2ban
 
-evolinux_fail2ban_include: True
+evolinux_fail2ban_include: False
 
 # Listupgrade