fail2ban

fail2ban with ssh

debian install

apt install fail2ban -y

rocky linux install

dnf install epel-release -y

dnf install fail2ban -y

enable fail2ban with ssh

/etc/fail2ban/jail.local

[DEFAULT]
bantime = 2h
findtime = 3m
[sshd]
enabled = true

systemctl enable fail2ban --now

fail2ban-client

fail2ban-client status sshd