Fail2ban

Fail2ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It updates firewall rules to reject the IP addresses for a specified amount of time, although any other arbitrary action can be configured.