I use it mostly because it simply declutters the logfiles, and it's super easy to set up and has practically no maintenance, so why not? EDIT: as others have n

I use it mostly because it simply declutters the logfiles, and it's super easy to set up and has practically no maintenance, so why not? EDIT: as others have noted here, fail2ban can do much more than just ssh. I also use it for Exim to block all these open-relay-scanners which are polluting the logs.