Fail2ban
jail.local
[sshd]
enabled = true
port = ssh
logpath = %(sshd_log)s
backend = %(sshd_backend)s
maxretry = 10
bantime = -1
action = iptables[name=SSH, port=22, protocol=tcp]
telegram
[apache-overflows]
enabled = true port = http,https filter = apache-overflows logpath = /var/log/apache*/*error.log maxretry = 2
[apache-badbots]
enabled = true port = http,https filter = apache-badbots logpath = /var/log/apache*/*error.log maxretry = 2
[apache-nohome]
enabled = true port = http,https filter = apache-nohome logpath = /var/log/apache*/*error.log maxretry = 2
[php-url-fopen]
enabled = true port = http,https filter = php-url-fopen logpath = /var/log/apache*/*access.log