authfail is a tool for adding IP addresses to an ACL when entities from those addresses attempt to log into a system, but cause authentication failures in auth.log. It reads data from auth.log in real time and adds the IP into netfilter with a DROP/REJECT policy.
04e48386360e57b79d2b505156aeb0ffde4c2dff3b0ec8ec374a1c797baa5c1c