I finally locked down my router logs for real, here's the before and after
Used to just glance at logs once a month, if that. After finding 2,000+ brute force attempts on port 22 in a single week last March, I turned on fail2ban and locked SSH to key only. Now I check weekly and it's down to maybe 10 attempts a month. The change was instant and massive. Anyone else see this kind of drop after doing the basics?
Seeing that drop after locking things down is honestly the best feeling, it proves the basics actually work. I had the same thing happen with my home server, it went from constant noise to basically silence overnight. Feels like finally shutting a door that was left open for years.