Currently, all auth attempts are shown from localhost which fail2ban ignores, and hence we can't ban those IPs