Wow, the system says I've never posted before .. I find that hard to believe! I've been in IT for about 38 years (Yes I'm OLD) and I specialize in Security, lets see, I have 11 computers within 10 feet of me, three dual boot Windows and Fedora, two run CentOS (Firewall and Samba) and the rest boot up either Fedora or Android .. my firewall gets attacked by China and Russia as well as the rest of the world daily, but about 85% China, 5% Russia and 10% the rest of the globe, lots of .br, .jp and .ko which of course doesn't mean that there is not a Chinese keyboard behind those attacks! I also have two virtual hosts on the net with 6 IPv4 addresses my production box has 98% of China firewalled and my backup box is wide open and attacked as well.

Enough for a first post. All questions welcome.

Welcome to LQ!

Have a nice time.

I get 37% of the attacks from USA, 15% from Germany and the rest is very mixed (total of 3700 attempts during the last 6 months - forwarding the logs to Elasticsearch and evaluating with Kibana).
Tried to look for an "intelligent"/AI firewall solution but didn't find anything => any recommendations pls.?

I'm more of a command line type, so I just use IPTables, sorry