cryptax6d ago

It's always educative to have a look at one's #fail2ban logs.
All of these are attacker IP addresses (or hosts infected with malware such as #Mirai or #gafgyt etc) trying to get into the #SSH of my poor #RPi;

2026-06-24 12:18:17,936 fail2ban.actions [625]: NOTICE [sshd] Ban 91.92.40.6
2026-06-24 12:34:04,463 fail2ban.actions [625]: NOTICE [sshd] Ban 91.92.40.6
2026-06-24 12:41:09,604 fail2ban.actions [625]: NOTICE [sshd] Ban 185.10.63.235
2026-06-24 12:49:24,462

Show thread13reak 

@cryptax

I had the same issue. Changing the ssh port worked for me. The attacks stopped immediately.

(Yes, I know, security by obscurity but it does work)

Jun 24 at 2:00pmWeb
Show threadcryptax6d ago
@13reak actually, it's a good idea, because port 22 is hard coded in most malware instances, not other ports, so I'm pretty sure you're solution is actually a good one.