diff --git a/security/sshguard/Makefile b/security/sshguard/Makefile
index b514eb48943e..824a3d205d1f 100644
--- a/security/sshguard/Makefile
+++ b/security/sshguard/Makefile
@@ -1,31 +1,31 @@
 PORTNAME=	sshguard
 PORTVERSION=	2.5.1
-PORTREVISION=	1
+PORTREVISION=	2
 PORTEPOCH=	1
 CATEGORIES=	security
 MASTER_SITES=	SF/sshguard/sshguard/${PORTVERSION}
 
 MAINTAINER=	kevinz5000@gmail.com
 COMMENT=	Protect hosts from brute-force attacks against SSH and other services
 WWW=		https://www.sshguard.net/
 
 LICENSE=	BSD2CLAUSE
 
 USE_RC_SUBR=	sshguard
 
 GNU_CONFIGURE=	yes
 
 SUB_FILES=	pkg-message
 
 post-patch:
 	@${REINPLACE_CMD} -e 's|%PREFIX%|${PREFIX}|' \
 		${WRKSRC}/doc/sshguard.8.rst
 	@${REINPLACE_CMD} -e 's|/usr/local|${PREFIX}|' \
 		${WRKSRC}/examples/sshguard.conf.sample
 
 post-install:
 	${MKDIR} ${STAGEDIR}${PREFIX}/etc
 	${INSTALL_DATA} ${WRKSRC}/examples/sshguard.conf.sample \
 		${STAGEDIR}${PREFIX}/etc
 
 .include <bsd.port.mk>
diff --git a/security/sshguard/files/patch-src_parser_attack__scanner.l b/security/sshguard/files/patch-src_parser_attack__scanner.l
new file mode 100644
index 000000000000..a5043735bfc5
--- /dev/null
+++ b/security/sshguard/files/patch-src_parser_attack__scanner.l
@@ -0,0 +1,17 @@
+https://github.com/SSHGuard/sshguard/commit/06caf25a6abccdbba51e67ac99d83df9d412dc3f
+https://github.com/SSHGuard/sshguard/commit/f180843f6da34f9ca7a2557fa1b51ca85c561634
+
+--- src/parser/attack_scanner.l.orig	2025-04-28 18:20:39 UTC
++++ src/parser/attack_scanner.l
+@@ -95,8 +95,9 @@ HTTP_VERSION    HTTP"/"[0-9]("."[0-9])?
+ HTTP_REQUEST    (GET|HEAD|PUT|POST|DELETE)
+ HTTP_VERSION    HTTP"/"[0-9]("."[0-9])?
+ 
+- // host part of a hostname (without any domain parts)
+-SYSLOG_HOSTNAME   {WORD}
++ // RFC 5424 says HOSTNAME header field SHOULD contain the FQDN.
++ // IP addresss and hostname may also be present in HOSTNAME.
++SYSLOG_HOSTNAME   {WORD}|{HOSTADDR}
+ 
+  // timestamp (optional PRI) hostname
+ SYSLOG_HEADER     ({TIMESTAMP_SYSLOG}|{TIMESTAMP_ISO8601})[ ]+{FACLEVEL}?[ ]*{SYSLOG_HOSTNAME}[ ]+