Confirming I have this problem too. My /etc/sshguard/sshguard.conf has LOGREADER="LANG=C /bin/journalctl -afb -p info -n1 -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10"
The example provided by upstream has LOGREADER="LANG=C journalctl -afb -p info -n1 -t sshd -t sendmail -o cat" Changing it to this makes the problem go away. (Since I use postfix, I used "-t postfix/smtpd" instead of sendmail.) GI -- My wife told me I had to stop acting like a flamingo. So I had to put my foot down.