[dizhn]

For most of my VMs there's no ssh running. I use wireguard to connect to a private IP. I haven't done this on the bare metal yet but I might. Though barring exploits like we had recently nobody is getting into a server with either strong passwords or certificates. Fail2ban in my eyes is a log cleaner. It's not useful for much else.

[cranberryturkey]

it bans the bad ips, isn't that worth running?

[thfuran]

But what does that actually accomplish?

[cranberryturkey]

stops the attack from happening from those ips?