This may interest some:
https://github.com/crowdsecurity/crowdsec
It's a modern behavior detection (aka fail2ban alt) that is pluggable. For a board one could probably just use the launch script "bouncer".
--
NuSkooler
Xibalba BBS @ xibalba.l33t.codes / 44510(telnet) 44511(ssh)
ENiGMA 1/2 BBS WHQ | Phenom | 67 | iMPURE | ACiDic
--- ENiGMA 1/2 v0.0.12-beta (linux; x64; 12.13.1)
* Origin: Xibalba -+- xibalba.l33t.codes:44510 (21:1/121)