Hawk IDS/IPS is a lightweight log analyzer which was designed to be fast and efficient.
It scans log files on the fly and bans IPs which make too many password failures.
It adds iptables rules to reject the IP addresses.
You can define the logfiles.
Hawk provides a unique Web interface and flexibility, and supports sshd, dovecot, courier, pure-ftpd, proftpd, cPanel, and DirectAdmin.
