Hey there,

Fail2Ban is an additional software that acts as a dynamic firewall. It’ll block IP addresses that have failed log in attempts. It can also send out emails in regards to these attempts.

I’d recommend changing the port that SSH lives on simple to keep your system and mail logs cleaner and easier to read.

You’d want to change the Port line in /etc/ssh/sshd_config. I’d recommend leaving your current SSH session open after restarting sshd service sshd restart and making sure the new port is opened on the firewall. As long as you can connect on the new port you’re good to go. Otherwise there may be a chance you could block yourself and need to regain access using the web console.

Thank you and please let us know if there is anything else we can do for you.

Happy coding,

Jon Schwenn
Platform Support Specialist
DigitalOcean