…yeah, I’ve never had any issues, personally. I run a Gotosocial instance, XMPP and a Synapse fork publicly.
Update, lock your shit down and use a firewall is all I can tell anyone. My SSH isn’t even open to the web, I have to go in via wireguard to access any administration.
kossa@feddit.org 3 days ago
I get the same feeling, like, as if three letter agencies from all over the world start targeting your server specifically in 300 ms.
What happens is, yes, your server is immediately bombarded by ScriptKiddies from all over the world, and if you set up root SSH with hunter2 as password, that thing is taken over immediately. But if you only allow keyfile SSH you’re 98% there already ¯\_(ツ)_/¯