> sshguard is exactly this

Thanks. I've replaced fail2ban with sshguard on one machine, we'll see how it goes.