160 karma · joined June 12, 2025
bingo.
This is the kicker for me personally. I don't know if it's cost of living increases driving people to start using these services for daily essentials, or if it just becomes a habit through putting all spending through services like this. Either way it's scary.
I've walked past homeless people at the train station on hold to Centrelink on their phones. The system is hosed.
- Only keep open ports/forward ports for applications you use, drop/block everything else.
- Use strict host-header checking for web services on port 80/443, drop anything to 403/404 that doesn't have a valid host-header for the website(s) you're hosting.
- Move SSH and other remote admin servers to use a non-standard port. (legit, find a random port number between 9000-65535)
- If it doesn't need to be public, allow-list it with iptables.
Unfortunately DO and other providers will never have 100% legit traffic, it's just the nature of the Internet's noise floor.
Hope this helps you or someone else!