Fail2Ban scans log files like /var/log/pwdfail and bans IP that makes too many password failures. It updates firewall rules to reject the IP address. Theses rules can be defined by the user. Fail2Ban can read multiple log files such as sshd or Apache web server ones.