一键安装脚本
wget https://raw.githubusercontent.com/cnnlei/Fail2ban/master/fail2ban.sh && bash fail2ban.sh 2>&1 | tee fail2ban.log
安装后需要改配置文件,才能正常启动
fail2ban 132行改成Auto改成systemd,随后重启fail2ban
vim /etc/fail2ban/jail.conf
systemctl restart fail2ban
启动/停止/重启服务
sudo systemctl start fail2ban # 启动服务
sudo systemctl stop fail2ban # 停止服务
sudo systemctl restart fail2ban # 重启服务
sudo systemctl enable fail2ban # 设置开机自启
查看服务状态
sudo systemctl status fail2ban
查看被封禁的 IP
sudo fail2ban-client status sshd
解封特定 IP
sudo fail2ban-client set sshd unbanip 192.168.1.100
手动封禁 IP
sudo fail2ban-client set sshd banip 192.168.1.100