In this post we will discuss how to use efficiently IPSET with CSF (ConfigServer Security & Firewall) Firewall. Unfortunately, I will not discuss what CSF is because it's not within the scope, but you can read about it here. - Source: dev.to / 3 months ago

At the very least, the free ConfigServer CSF is a more robust firewall addon that blocks brute force attempts, mod security failures, and so on. It's relatively easy to install, has a ton of options, and it's easy to whitelist IPs if your users have trouble. The same dev has a virus & malware scanner that's available as a one-time purchase. Source: about 1 year ago

Use CSF (linux only) to cut down some basic attacks https://configserver.com/configserver-security-and-firewall/. Source: over 1 year ago

Seems like a GUI wrapper (other than the graphs) so may not solve the OPs issue of things like Docker complicating the firewall. Source: over 1 year ago

You should not have ANY ports on the home network open to the outside. NONE. If you insist on running a public-facing service at home, use a VPS with an ARGO tunnel. No SQL ports should be open to anywhere, not even on a private net. Use SSH tunnels to access if needed. As long as everything is closed to the outside, a consumer-grade firewall, along with every node on the home network protected by Configserver... Source: over 2 years ago

Another option is limiting login attempts with RDPGuard. Source: about 1 year ago

This sounds like a good use for RDPGuard: https://rdpguard.com/. Source: almost 2 years ago

Using a different approach RDPguard helps a lot. https://rdpguard.com/. Source: about 2 years ago

Oct 4 11:59:49 filter bash: WARN [10-04 11:59:49] - SeverProtection.addCnt, Attacker suspect found by IP count! Domain = rdpguard.com, ip = 66.152.133.228. Source: over 2 years ago