The maxretry variable sets the number of tries a client has to authenticate within a window of time defined by findtime , before being banned. With the default settings, the fail2ban service will ban a client that unsuccessfully attempts to log in 5 times within a 10 minute window.