Contabo VPS Default SSH Password Authentication Creates Security Vulnerabilities
By
ddxv
8mo ago· 2 min readenInsight
65/100
Toasty
Bagelometer↗
Reliable enough to start your morning with. Toast it again tomorrow.
Score65TypeanalysisSentimentnegative
Summary
The article criticizes Contabo VPS for default security practices that enable password-based SSH logins instead of public key authentication. The author shares their experience with a new server receiving 350 failed password login attempts per hour, demonstrating how this default configuration makes servers vulnerable to brute force attacks. The article highlights that while Contabo offers the option to use SSH keys, it's not the default setting, putting less technical users at risk.
Key quotes
· 3 pulledContabo's default VPS creation seems to be root user and password?
Our new server, that barely any bot knows exists, already gets 350 failed password login attempts an hour.
Worse, these bots can see that password login is enabled on our server, meaning they know they should keep trying.
I recently started helping a less technical friend and had my first chance to see/use Contabo VPS. I’ve been really surprised at their default security practices so far.
