hello everyone,

receiving this msg in my auth.log over and over:

Received disconnect from (some.ip.add.ress): Bye Bye [preauth]

but fail2ban is not banning the associated ip.  can anyone help me? what do i need to do to get fail2ban to recognize this and ban the ip?  is this even a threat?

thanks

billy