info: CrowdSec is an open source replacement for fail2ban.

[rjc3rd]

Of course you should be running UFW on your server, but I also added this.

https://github.com/crowdsecurity/crowdsec

TLDR
CrowdSec is a free, modern & collaborative behavior detection engine, coupled with a global IP reputation network. It stacks on fail2ban's philosophy but is IPV6 compatible and 60x faster (Go vs Python), it uses Grok patterns to parse logs and YAML scenarios to identify behaviors. CrowdSec is engineered for modern Cloud / Containers / VM-based infrastructures (by decoupling detection and remediation). Once detected you can remedy threats with various bouncers (firewall block, nginx http 403, Captchas, etc.) while the aggressive IP can be sent to CrowdSec for curation before being shared among all users to further improve everyone's security.

[rjc3rd]

It's super easy to install.
The installation runs a simple script that enables it to run automatically.

[Ahwxorg]

Thank you, might be useful for someone!