By JustaNobody
When i looked into the auth.log file, i could see that somebody hacked into my server and was trying to access various ports of different ips. I tried to disable the root login and password logins. However even with the private key that i have now it does not work.
login as: root
Authenticating with public key "rsa-key-20190413"
Passphrase for key "rsa-key-20190413":
Server refused public-key signature despite accepting key!
This is what it says. Do i have to delete my droplet now and create a new one where i don’t keep the passphrase for the ssh key or is there a way to get in.
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Hello,
Generally speaking if someone was able to get root access to your server, it is better to just spinup a new one and re deploy your applications there as you would never know what malicious files and backdoors have been added.
If you still need access to the old server you can follow the steps here on how to recover your access to your droplet:
https://www.digitalocean.com/docs/droplets/resources/lost-ssh-key/
Hope that this helps! Regards, Bobby
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and SMBs
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.