there is fail2zig seems to be exactly what you looking for
Ask HN: Alternatives to Fail2ban?
11–13 of 13 posts
Re: Ask HN: Alternatives to Fail2ban?
#12Do you really need SSH exposed?
If not, use something like WireGuard (or Tailscale) and bind only to that interface.
You can also change the default port, your logs will quiet down dramatically.
Lastly, if you have a long enough passphrase with enough entropy/randomness, password authentication being enabled is probably fine, you can also set only a specific user allowed to SSH for additional hardening.
Re: Ask HN: Alternatives to Fail2ban?
#13there is fail2zig seems to be exactly what you looking for https://fail2zig.com
> https://fail2zig.com
Thanks. I've had a quick look, and it looks like it's a drop-in replacement for fail2ban (it claims to parse fail2ban's configuration files unchanged), except that it doesn't require a Python runtime.
I haven't tried it, since I'm currently happy with sshguard. I'm keeping the link handy in case I find I need more features than what sshguard provides.