By default, the CrowdSec engine is able to track login attempts on the Artica Web console. By default, the remote address is blocked after 5 failed attempts over a period of 5 minutes.
Under the status section, click on the Artica Web console service item.
You can define the maximum attempts inside a period that will block the remote address.
The Artica console is dedicated to Web services administration, and should only be used with addresses from trusted networks. If remote addresses unknown from trusted networks enter to the Artica console, the engine will react even before the user tries to post his credentials.
For that, simply enable the “Check trusted networks” feature.