Hacker News Reader

The default configuration of fail2ban on Debian considers every offered key as a login attempt, so you can be immediately banned for merely connecting with too many keys in your ~/.ssh.

Never been locked out when I used to use it. But it got replaced with a default firewall rule to only allow SSH from my address in the end. Didn’t need it at all then!

In one of my previous jobs, it blocked me out after 3 attempts indefinitely - that is, until I got a hold of the sysadmin and asked him to unblock me. It was a PITA, as you can imagine. And I don't understand why any sysadmin would want to put themselves in a position to get bothered regularly by people who tend to mistype their passwords like me.