# apt-get install -y fail2ban
啟動
#systemctl start fail2ban
開機後自動啟動
#systemctl enable fail2ban
新增設定檔
#vi /etc/fail2ban/jail.local
[sshd]
enabled = true
port = 22
filter = sshd
logpath = /var/log/auth.log
maxretry = 3
存檔後重新啟動
#systemctl restart fail2ban
要解除被BAN掉的指令
fail2ban-client set sshd unbanip IP_ADDRESS