Dim Boy

Поменял в /etc/fail2ban/filter.d/sshd-ddos.conf:

failregex = ^%(__prefix_line)sDid not receive identification string from <HOST>\s*$

на

failregex = ^%(__prefix_line)s(Did not receive identification string|Bad protocol version identification '.*') from <HOST>\s*$

Жду результат в логах.
https://github.com/fail2ban/fail2ban/issues/332

опять...
sshd[14773]: Did not receive identification string from 110.166.179.192

Вот такое в логах:

fail2ban.actions.action: ERROR  ipset --create fail2ban-ssh-iptables-ipset4 iphash
iptables -I INPUT -p tcp -m multiport --dports 23 -m set --match-set fail2ban-ssh-iptables-ipset4 src -j REJECT --reject-with icmp-port-unreachable returned 200