Re:Ask HN: How do you continuously monitor web logs for hack...
by danieltillett on Wednesday May 09, 2018 @05:01AM
(#17028375)
I am not worried about people getting in via ssh, I am worried about some zero-day on some other service.
You don't really need fail2ban at all. Just don't log failed password attempts. Key access only, no one is going to get in.