How do you deal with malicious requests to your servers?
How do you deal with malicious requests to your servers?
I put up a vps with nginx and the logs show dodgy requests within minutes, how do you guys deal with these?
Edit: Thanks for the tips everyone!
You're viewing a single thread.
80
comments
- Turn off password login for SSH and only allow SSH keys
- Cloudflare tunnel
- Configure nginx to resolve the real IPs since it will now show a bunch of Cloudflare IPs. See discussion.
- Use Fail2ban or Crowdsec for additional security for anything that gets past Cloudflare and also monitor SSH logs.
- Only incoming port that needs to be open now is SSH. If your provider has a web UI console for your VPS you can also close the SSH port, but that's a bit overkill.
You've viewed 80 comments.