Skip to main content

Posts

Showing posts with the label ssh

Git push changes to remote repo issue on different port

 Taking security precaution I have changed the SSH access port on my DO droplet. Recently as i have setup the docker Wordpress stack in the droplet an i wanted to keep track the version changes by pushing to git remote repo.      Unfortunately i encountered error.    xxx@ubuntuxxxx:~/wordpress$ git push origin main -v Pushing to git@github.com:aliaramli/xxx-docker.git ssh: connect to host github.com port 10xx: Connection timed out fatal: Could not read from remote repository. Please make sure you have the correct access rights and the repository exists.   As we can see I'm using verbose flag to troubleshoot the issue, "-v". Error reported that the server unable to connect with github.com server tru port 10xx (i purposely censored the full port number)   to correct the issue i will need to set ssh connection to github server using github supported port which is 22.  eg setup of my ~/.ssh/config file  Host github.com  Port 22 ...

Simple Security Implementations to Control SSH Access in Digital Ocean Droplet/VPS

Image by S. Hermann & F. Richter from Pixabay By default Digital Ocean Droplet will allow root SSH access When we first create a droplet in DO, DO will send us the credential access through our email and we can access the droplet using DO console easily. After that we will change the password to our own password. Then whats next? Are we good to go? Before we go in depth. Let us revisit what is a brute force attack. A brute force attack is an attempt to crack a password or username or find a hidden web page, or find the key used to encrypt a message, using a trial and error approach and hoping, eventually, to guess correctly. - Kapersky In case of droplet users, we need to secure our VPS from being attacked by brute force attack. On SSH brute force attack the mechanism is slightly different. The mechanism is SSH brute-force attack, the mechanism is reversed. Instead of trying thousands of username and password combinations on a single server, the crooks try one username and pas...