Fail2ban
Intrusion-prevention daemon that bans abusive IPs.
Fail2ban scans log files for failed authentication patterns and updates iptables, nftables, or firewalld rules to block offending IPs. It is the standard tool on Linux servers for slowing brute-force attempts.
Install
Debian/Ubuntu: sudo apt install fail2ban Fedora: sudo dnf install fail2ban Arch: sudo pacman -S fail2ban
