Dropped SSH log noise from 40k lines/day to 12
Just did this across 8 budget boxes. Auth logs were drowning in bot login attempts, made real incidents invisible.
Moved SSH off 22 and added one allowlist rule:
— Port 2202 in sshd_config
— UFW: ufw allow from MY_OFFICE_IP to any port 2202
— key-only, PasswordAuthentication no
Bot traffic on 22 hits a closed firewall now, never reaches sshd. auth.log dropped from ~40k failed lines/day to ~12 (all me). fail2ban load went to near zero too.
Try it tonight.
Root Access Daily
@RootAccessDaily
Dropped SSH log noise from 40k lines/day to 12
Этот пост опубликован в Telegram-канале Root Access Daily. Подписаться можно по ссылке: @RootAccessDaily.