Greetings,
How to block IP with authentication failure to Samba service just like or similar to SSH service.
Thanks,
How to Block authentication fail for Samaba
Re: How to Block authentication fail for Samaba
You can create your own regex rule and add it to /usr/local/csf/bin/regex.custom.pm in the readme.txt you can find more info.