Linux Server Hardening
Exit

Lesson 11 of 13 · Control and detection

fail2ban — automatically ban attackers

45 min Debian 12 Versions Debian 12, Ubuntu 24.04, Rocky 9

Objective

Turn logs into an active defense: when an IP address piles up failures (SSH, a website's login page), fail2ban blocks it at the firewall for a given time.

This lesson is part of the full course

Unlock Linux Server Hardening to read every lesson, do the exercises, access the simulations and earn your certificate.

Already enrolled? Log in.