I found fail2ban is necessary but not sufficient. It requires some initial number of failed attempts before the attacker is blocked. To prevent even those init

I found fail2ban is necessary but not sufficient. It requires some initial number of failed attempts before the attacker is blocked. To prevent even those initial attempts, I use multiple layers of defenses such as country based blocking or blacklist based blocking. If an attacker slips through despite all this, I blacklist them manually in /etc/hosts.deny. If there is any interest, my scripts are in https://github.com/KamarajuKusumanchi/hosts.deny/ https://github.com/KamarajuKusumanchi/hosts.deny/