parses /var/log/auth.log and bans failed attempts with 3 or more tries