On my OpenWRT Router, I followed these Luci based instructions to successfully create a Wireguard Server. This is great, however, I want to prevent unauthrorized login attempts from bots and hackers. Is there a way to configure my WireGuard server to ban an IP or block a User from accessing the Wireguard server if they have too many failed login attempts? Could I use some sort of IP tables rules, or possibly fail2ban itself to make this happen? Please explain!
Did you give them your WG keys ?
Might be relevant, no guarantee it works on Openwrt https://github.com/adrianmihalko/raspberrypiwireguard/issues/36#issuecomment-1382027473.
There is really no need or practical advantage to adding fail2ban over WireGuard.
Specifically, WireGuard is not 'chatty' -- it does not respond to port probes or connection attempts unless the cryptographic key exchange is valid. That is to say that even if someone tries to connect on the correct port, if they have invalid keys, they will get no response. It will appear as if nothing is listening.