fwknop port-knocking for SSH: making port 22 invisible from the internet without locking yourself out
The default state of 22/tcp on a public IP is “constantly probed by every botnet on the planet.” Even with key-only auth and fail2ban, the noise floor of failed SSH attempts is real — my auth.log picks up 3,000–5,000 hostile …
