The security of the hosting solution is really important nowadays when lots of hackers try to access sensitive data on a daily basis. Luckily, there are lots of methods that can help users to avoid hacker attacks so here in this article we will discuss some practices to protect VPS and also that may relate to DDoS protected dedicated servers Europe as well. If that topic sounds interesting then let’s dive into it.

Common security weaknesses

Generally, Linux servers are rather secure, however there are no ideal variants. Here we will discuss some of the major weaknesses of this system:

–        Issues with authentication. Such risks may occur due to insecure passwords, poorly protected data, or any other reasons.

–        Cross-site scripting. This can happen when a hacker attacks the site from the client’s position and uses malicious code.

–        Malware. With the help of viruses, spyware, and other intrusive software, hackers can harm the system or even machines.

–        Brute-force. This type of hacker’s attack can be characterized as a method to guess credentials with lots of attempts.

These are only a couple of examples of risks that are connected with hacker attacks on your server. In order to prevent most of them, we will give a couple of practical recommendations, but this is not a one-time issue, the monitoring of the threats should be constant. Only with regular checks and implementations of better mechanisms, it is possible to reach the needed level of security.   

VPS protection against hackers

Select secure hosting solutions

Sure, users should implement additional security measures in order to exclude some threats. However, there are some basic features that should be offered by the web provider. Such features can differ from provider to provider and from plan to plan. Here are a couple of factors that you should pay attention to:

–        Firewall.

–        DDoS protection.

–        SSL or secure sockets layers.

–        Anti-malware mechanisms.

In addition to the already mentioned features, the hosting provider should also guarantee regular backups in case the user needs urgent data restoration.

SSH Ports security

Now, let’s share some steps that every user can implement to get more security and exclude additional risks of hacking attacks.

In order to add an additional layer of protection, you would rather change the default port, and in such a way you can protect your information against automated hacking attacks. To make these changes enter SSH via the terminal, and use the following command:

nano /etc/ssh/sshd_config

Once you open the config file, find the line with Port 22 change it to the new one and delete #. Don’t forget to save the changes.

Usage of SSH keys

To make the process even more secure, you can use SSH keys instead of usual passwords. Such keys are more complex and they are fully computer-generated. There are 2 sets of these keys, public one that is saved on the server, and private which is on your computer. Once a server notices an attempt to enter the system, it generates a public key.

For the generation of the keys, login to SSH via Terminal and enter such command:

ssh-keygen -t rsa

After that press Enter, and fill in passphrase. The keys are successfully saved.

Root Login Threats  

Root access gives lots of options for server modifications so lots of hackers try to get this access for obvious reasons. By deactivating this login, you are greatly improving the security level. We highly recommend creating another user with the same root privileges for the configuration of the server.

To disable this login, enter the SSH account via Terminal and open the config file with the following command:

nano /etc/ssh/sshd_config

In the opened file, find RootLogin parameter and type “no”. Don’t forget to save the changes.

Usage of SFTP  

More often FTP is used, but this protocol has fewer encryption mechanisms than SFTP. Secure file transfer protocol encrypts all information such as transferred data and also credentials. The user is authenticated prior to entering the system and that guarantees even better protection.

To set up this type of connection, use the following command:

sftp user@server_ip

Malware Scanner

The usage of antivirus is highly-important and you should always have it actively scanning the system. However, there should be additional protection against malware. This is not a difficult procedure, just choose those antiviruses that have also a malware scanner. By paying for this additional feature, you can be sure that the system is constantly monitored regarding new threats.

Most Linux scanners should be installed via Terminal. This software is easy and has an intuitive interface so even users without any advanced technical skills can manage such tools.

To avoid most of the hacker attacks, try to monitor the system regularly and use at least a couple of our recommendations such as disabled root login, usage of secure SSH port, or SSH keys.