Fail2ban просто запустить
HQ-SRV
apt-get install fail2ban iptables
apt-get install rsyslog
nano /etc/rsyslog.conf
module(load="imuxsock")
authpriv.* /var/log/auth.log
/etc/opensshd/sshd_config
SyslogFacility AUTHPRIV
LogLevel INFO
nano /etcc/fail2ban/jail.conf
[sshd]
enabled = yes
port =2026
logpath = /var/log/auth.log
backend = %(sshd_backend)s
maxretry = 3
bantime = 1m
systemctl enable --now fail2ban
fail2ban-client status sshd