T
6

Hit 500 failed login attempts on my server in one day, that number scared me straight

I run a small home server for my personal stuff, nothing fancy. Checked the logs last Tuesday and saw 512 failed SSH attempts in just 24 hours. I knew bots were out there but that number made me realize how dumb I was running default settings. Immediately changed the port, set up fail2ban, and switched to key-only login. Anyone else get a wakeup call from a specific number like that?
2 comments

Log in to join the discussion

Log In
2 Comments
evannelson
evannelson1mo ago
Simple fail2ban config and a nonstandard port cut mine down by 95%.
8
spencer199
spencer1991mo ago
Honestly, did you have to sit and watch the fail2ban logs ping for a while after you set it up? I kinda love staring at those numbers, it makes me feel like a warden or something. Ngl, when I first locked down my SSH, I spent a whole evening refreshing the ban list and feeling way too proud of myself. My roommate thought I was watching sports highlights but it was just a bunch of blocked IPs from China. Kinda scary how many people out there are just trying doors all day.
6