netstat reads and parses /proc/net/* as text. On a box with thousands of connections that is slow enough to notice, and the tool has been deprecated in favour…
A week-old server already sees thousands of login attempts a day. Key-only SSH, a firewall, fail2ban and monit — and the recovery plan for locking yourself out.