I have a machine exposed to the net on an "obscure" port, with fail2ban running on it. In ... 5-8 years, I haven't had a single hit other than me mistyping a p

I have a machine exposed to the net on an "obscure" port, with fail2ban running on it. In ... 5-8 years, I haven't had a single hit other than me mistyping a password. I understand the issues around doing this, but I'm actually shocked at how little (zero) incursion attempts it gets. I should also note that since this is a personal machine, I also have entire countries blocked by CIDRs. I also do this for my wife's company's retail presence, and blocking the big 4 (China, Russia, Iran, NK) at a CIDR level stopped something like 98% of the brute force ssh attempts (the vast, vast majority of those from China). I know it's not foolproof, and I may get some false positive blocks, but she doesn't have a business that needs to allow people from those countries.