Skip to content

Set Up Fail2ban – Protect SSH & Game Servers from Brute-Force

Install & configure Fail2ban: SSH jails, ban time, whitelist – brute-force protection on VPS and root servers.

Root & VPS

Quick answer: Install Fail2ban with apt install fail2ban – the SSH jail is usually active immediately on Ubuntu/Debian and bans attackers after 5 failed attempts.

If you landed here: You see thousands of failed login attempts in logs or want additional SSH protection.

Install

apt update && apt install fail2ban -y
systemctl enable --now fail2ban
fail2ban-client status sshd

Basic config

cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local
# bantime = 1h, maxretry = 3 under [DEFAULT]
systemctl restart fail2ban

Related

Products & ordering: Root/VPS server · Manage: NexoraHost · My account · nexorahost.com (Frankfurt · 1 Tbit/s DDoS · 99.9% uptime)

Frequently asked questions (FAQ)

What does Fail2ban do?
Fail2ban monitors log files (e.g. /var/log/auth.log) and automatically bans IPs via firewall after repeated failed attempts.
Is Fail2ban alone enough for SSH security?
No – SSH keys + disabled password login are required. Fail2ban is additional protection.
How long are IPs banned?
Default often 10 minutes (bantime). Adjustable in jail.local – e.g. bantime = 1h, maxretry = 3.
Previous GDPR Hosting Germany – Frankfurt Servers & Data Residency Next UFW Firewall – Open Ports Without Locking SSH (Minecraft, Web, SSH)

Keep reading

Popular and fresh – not just the oldest guides.

Root & VPS AWS vs Self-Hosted – Cost Comparison 2026 (VPS Germany) AWS vs self-hosted: EC2, RDS, S3, traffic – real cost math. When does a VPS/root server in... Root & VPS Caddy Reverse Proxy VPS – Automatic HTTPS in 5 Minutes Caddy as reverse proxy: automatic Lets Encrypt, Caddyfile, Docker, multiple domains – simp... Root & VPS Set Up CrowdSec on VPS – Modern Firewall Against Bots & Brute Force CrowdSec on a VPS: install, firewall bouncer, SSH/HTTP scenarios – community-powered defen... Root & VPS Docker Compose Production – VPS Setup with SSL & Updates Docker Compose in production: .env, volumes, restart policies, Traefik SSL, backups, updat... Root & VPS Redis Caching on VPS – Sessions, Queues & Performance Redis on a VPS: install, persistence, password, Docker, as cache/session store for Next.js... Root & VPS Nginx Reverse Proxy 2026 – Ubuntu, SSL, Docker Apps Nginx as reverse proxy: server blocks, Let’s Encrypt, proxy headers, WebSockets, Docker on...
More

Explore NexoraHost