Brute Force Attack - Non stop ssh login attempts

[Guest]

[akehlert]

Brute Force Attack - Non stop ssh login attempts

I am running EFW, lastest up.
I am getting hit by a brute force atatck of constant ssh logins attempts.

How do I automatically block those IP's

[toka]

EFW unfortunately does not have the ability to automatically block by the rules.
And it would be nice for the parameter of the number of connections from one IP in a certain period of time.

[akehlert]

Thank you, is there any way to install maybe something like fail2ban to block the attack?

[justme]

the free version does not support fail2ban, but it could be installed manually and run using /var/efw/inithooks/start.local at startup, then you can use CUSTOMINPUT to block things

[hadexx]

Brute Force Attack - Non stop ssh login attempts

I am running EFW, lastest up.
I am getting hit by a brute force atatck of constant ssh logins attempts.

How do I automatically block those IP's

 if you try to block access only to known IPs or at least only of your country.