My understanding is that, unlike previously with just fail2ban, if wrong credentials are used while registering, but other devices are already registered from that public IP, it will only ban that extension but not the whole public IP address. If however there is nothing yet connected from that...