Hit 500 failed login attempts on my server in one day

I was checking my security logs last Tuesday and saw 500 failed SSH login attempts in just 24 hours. That's way more than I expected for a small personal server I run from my apartment in Austin. Turns out bots just scan for any open port and hammer away at it, so I had to set up fail2ban to block the IPs after 3 tries. Has anyone else seen that many hits on a home setup?

2 comments

2 Comments

robert6421d ago

Austin Texas my neighbor's server got 2000 hits in an afternoon. 500 is a slow Tuesday for most bots. They don't stop they just keep hammering away. fail2ban helps but they come back from new IPs every time. Honestly if you can't handle the noise maybe run your server behind a VPN or just a whitelist. Cloudflare free tier blocks most of this trash too before it even hits your box.

tylerlane21d ago

Install fail2ban and stop worrying about it. 500 hits is nothing, mine gets that every hour. Just let the software do its job and check the logs once a week.