I'm running Cygwin with an SSH deamon on a Windows Server 2008 machine. I was looking at the Event Viewer and noticed as much as 5 to 6 failed login attempts per second (brute force) for the last week or so, from different IPs.
How can I autoblock these IPs rather than blocking them one by one manually?
Thanks, Ahmad