Securing Your Production Servers in Practice Assessing Your Current Setup Last month I walked into a client environment running on DigitalOcean droplets where SSH allowed root login with password auth. That single misstep had already drawn repeated brute force attempts logged in auth.log. The fix started with a full inventory of open ports and running services before touching anything else. I...