[sneak]

You don't need fail2ban if you've disabled password authentication. fail2ban exists to prevent password bruteforcing attempts.

[lqet]

True, but I still prefer to completely block IPs who tried to log in via SSH and failed multiple times.

[TheAdamAndChe]

Sure, but enforcing best practices at all times can be tedious and unnecessary sometimes.