A service that scans log files to detect possible intrusion/ malicious attempts, and temporarily blacklists the IPs. Useful against brute-force attacks.