@q409640976 客气了。

贴个之前的 fail2ban 配置
[mssqld]
ignoreip = 127.0.0.1/8
enabled = true
filter = mssqld
maxfailures = 3
findtime = 600
bantime = 86400
port = 1433
action = %(action_)s
logpath = /var/log/errorlog


mssqld.conf
# Fail2Ban filter for unsuccesfull MSSQL authentication attempts
[INCLUDES]
# Read common prefixes. If any customizations available -- read them from
# common.local
before = common.conf
[Definition]
_daemon = mssqld
#failregex = ^%(__prefix_line)s.*Login failed for user '[A-Za-z ]*'. Reason: Password did not match that for the login provided. \[CLIENT: <HOST>

早起群不都是这样的吗？