What kind of changes? Package installation, removal and configuration? Use apt-mark showmanual
to save list of manually installed packages, dpkg --get-selections | grep 'deinstall$'
to save list of removed packages, debconf --get-selections
to save debconf package settings, backup files that you edited in /etc
. This should be enough for restoration, wouldn’t take a long time for backup and avoid risk of filesystem inconsistency.
With fail2ban single bot behind a NAT can make the site unaccessible for all users behind that NAT.