I think ssh on a non-standard port is a no-brainer, have been doing this for years. But at some point I got too many log entries of failed ssh access attempts.

I think ssh on a non-standard port is a no-brainer, have been doing this for years. But at some point I got too many log entries of failed ssh access attempts. So I looked into fail2ban, but found the system too involved, and I don't like python for this kind of thing to start with. Then I started looking for alternatives, because I figured you only need something very simple, that checks certain log files and then instructs the kernel through netfilter to drop traffic from all infracting IPs. I like single-binary applications, especially for things installed outside the normal package manager. Found a skeleton of a golang app that claimed to work (it didn't), but I managed to rework it, and it serves my use cases: https://github.com/pepa65/fail2drop https://github.com/pepa65/fail2drop