Hardening SSH with keys stops password attacks from succeeding, but the attempts keep coming — bots will hammer your server thousands of times a day regardless. Fail2ban turns that noise into action: it watches your log files, spots the pattern of repeated failures from a single IP, and tells the firewall to ban that …