Comment on Setting up VPS (finally)
kossa@feddit.org 4 weeks agoI get the same feeling, like, as if three letter agencies from all over the world start targeting your server specifically in 300 ms.
What happens is, yes, your server is immediately bombarded by ScriptKiddies from all over the world, and if you set up root SSH with hunter2 as password, that thing is taken over immediately. But if you only allow keyfile SSH you’re 98% there already ¯\_(ツ)_/¯
Alvaro@lemmy.blahaj.zone 2 weeks ago
It is important to remember that there are scanners running over all IP addresses on the internet and checking for all the new vulnerabilities. So if you are not updating your services and one of your services has a vulnerability that already has an open source module to scan for it, then you are going to get scanned and you are going to get exploited. So it’s not just about having basic protection, it’s also about being really up to date, which not everyone is doing properly.