> On 16 Sep 2017, at 20:31, Alan McKinnon <alan.mckin...@gmail.com> wrote: > > As far as I'm aware (and could be wrong), sshguard is mostly just sshd > whereas fail2ban works on anything you can give it consistent logs for.
I thought otherwise, but you appear to be right - SSHGuard appears to have only a handful of "signatures", so it looks like Fail2Ban it is. https://www.sshguard.net/docs/reference/attack-signatures/ Stroller.
