Comment

Comment on Do bots/scrapers check uncommon ports?

A_norny_mousse@feddit.org ⁨7⁩ ⁨hours⁩ ago

SSH keys are absolutely essential, but those are actual security as opposed to what I wrote above. I should’ve made that clearer.

My SSHD is setup to only accept keys with no passwords and no keyboard input.

I don’t see how that improves security. Surely an SSH key with an additional passphrase is more secure than one without.

source

Sort:hotnew top

confusedpuppy@lemmy.dbzer0.com ⁨7⁩ ⁨hours⁩ ago
I agree with the last point, I only mentioned that because I don’t really know what other setting in my SSHD config is hiding my SSH port from nmap scans. That just happened to be the last change I remember doing before running an nmap scan again and finding my SSH port no longer showed up.

Accessing SSH still works as expected with my keys and for my use case, I don’t believe I need an additional passphrase. Self hosting is just a hobby for me and I am very intentional with what I place on my web facing server.

I want to be secure enough but I’m also very willing to unplug and walk away if I happen to catch unwanted attention.

source
- A_norny_mousse@feddit.org ⁨7⁩ ⁨hours⁩ ago
  Sounds like a healthy attitude towards online security.
  
  I’m doing my first ever nmap scan right now, thanks for the inspiration. It’s taking a long time - either my ISP does not like what I’m doing there or I’m being too thorough - but it looks like it does not see my SSH port either.
  
  source
  - confusedpuppy@lemmy.dbzer0.com ⁨6⁩ ⁨hours⁩ ago
    I started with a local scan first, something like nmap 192 168.40.xxx for a specific device or nmap 192.168.40.0/24 for everything in your current network.
    
    Nmap is quite complex with lots of options but there’s a lot of guides online to help out with the basics. You can press enter in your terminal while the scan is running and it should give a progress report.
    
    source