My own server is daily attacked by SSH scanner and bruteforce scripts.
My fail2ban solution
But as I get hammered by China’s ssh I got tired of it and block all China SSH access using iptables.
The concept is simples, it uses 3 main components:
ipset
powerfull iptables
ipdeny.com country ip list
Here is the script: