{"id":122,"date":"2010-02-20T16:56:57","date_gmt":"2010-02-20T16:56:57","guid":{"rendered":"http:\/\/www.intovps.com\/blog\/?p=122"},"modified":"2010-05-07T19:12:32","modified_gmt":"2010-05-07T19:12:32","slug":"basic-vps-security-checklist","status":"publish","type":"post","link":"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/","title":{"rendered":"Basic VPS security checklist"},"content":{"rendered":"

Every once in a while we have a customer that has been hacked. So I decided to make a short TO DO list for basic VPS security. Obviously security is a vast subject and you should hire a system administrator to take care of your VPS security if you don’t have the know how.<\/p>\n

Anyways, here’s the basic list:<\/p>\n

    \n
  1. Use strong passwords.<\/strong> Your passwords must have at least 8 characters (preferably more) and include all of the following: small and upper case letters, numbers and a few special signs, like: !@#$%^&*()_+{}|:”?><[]\\’;\/,. Or setup keys for SSH authentication. This applies for the root passwords, Hypanel account password and any user account from your VPS.<\/li>\n
  2. Update your server.<\/strong> First time you login to SSH you should update your system (yum update<\/strong> in CentOS and alike,\u00a0apt-get upgrade<\/strong> in Ubuntu and alike). The OS template that was used when deploying your system may not be up to date. Although we’re trying to keep all OS templates up to date, doing this for 30+ templates and tweaking new releases for OpenVZ is quite some work.<\/li>\n
  3. And keep your server up to date.<\/strong> Make sure you update frequently or set up an update daemon\/cron.<\/li>\n
  4. Disable all daemons\/services that you don\u2019t need.<\/strong> For instance, if you need just VPN, it doesn\u2019t make sense to run a mail server or web server. This will reduce the attack surface on your server and you won’t be affected by some of the software vulnerabilities. And you’ll have more memory available for the system processes that you need ;).<\/li>\n
  5. Don’t give your root password to people you don’t know or don’t trust.<\/strong> We had some incidents with customers that picked up some guy on some forum which “secured” his VPS. Turned out that the “security guy” just wanted a machine for spamming.<\/li>\n
  6. Consider changing the default ports<\/strong>. For instance for SSH configure port 2421 (this is just a random number that cropped up from my keyboard \ud83d\ude09 ), instead of default 22. But don’t rely on this too much, while some of the automatic bots that do brute force will try just on port 22, there’s no excuse for having a weak password.<\/li>\n<\/ol>\n

    Again, this is just a basic list. Talk to a professional system administrator if you don’t have the knowledge or you don’t have the time.<\/p>\n

    What is your \u00a0basic security check list?<\/p>\n","protected":false},"excerpt":{"rendered":"

    Every once in a while we have a customer that has been hacked. So I decided to make a short TO DO list for basic VPS security. Obviously security is a vast subject and you should hire a system administrator to take care of your VPS security if you don’t have the know how. Anyways, […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[29],"tags":[41,10,40],"class_list":["post-122","post","type-post","status-publish","format-standard","hentry","category-vps-administration","tag-administration","tag-europe-vps","tag-secuirty"],"yoast_head":"\nBasic VPS security checklist » IntoVPS Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Basic VPS security checklist » IntoVPS Blog\" \/>\n<meta property=\"og:description\" content=\"Every once in a while we have a customer that has been hacked. So I decided to make a short TO DO list for basic VPS security. Obviously security is a vast subject and you should hire a system administrator to take care of your VPS security if you don’t have the know how. Anyways, […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/\" \/>\n<meta property=\"og:site_name\" content=\"IntoVPS Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/facebook.com\/intovps\" \/>\n<meta property=\"article:published_time\" content=\"2010-02-20T16:56:57+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2010-05-07T19:12:32+00:00\" \/>\n<meta name=\"author\" content=\"Adrian Andreias\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@intovps\" \/>\n<meta name=\"twitter:site\" content=\"@intovps\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Adrian Andreias\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/\"},\"author\":{\"name\":\"Adrian Andreias\",\"@id\":\"https:\/\/intovps.com\/blog\/#\/schema\/person\/d46c8f5d25b5a8b009c50c0c4f887460\"},\"headline\":\"Basic VPS security checklist\",\"datePublished\":\"2010-02-20T16:56:57+00:00\",\"dateModified\":\"2010-05-07T19:12:32+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/\"},\"wordCount\":409,\"commentCount\":6,\"publisher\":{\"@id\":\"https:\/\/intovps.com\/blog\/#organization\"},\"keywords\":[\"administration\",\"europe vps\",\"secuirty\"],\"articleSection\":[\"VPS Administration\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/\",\"url\":\"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/\",\"name\":\"Basic VPS security checklist » IntoVPS Blog\",\"isPartOf\":{\"@id\":\"https:\/\/intovps.com\/blog\/#website\"},\"datePublished\":\"2010-02-20T16:56:57+00:00\",\"dateModified\":\"2010-05-07T19:12:32+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/intovps.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Basic VPS security checklist\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/intovps.com\/blog\/#website\",\"url\":\"https:\/\/intovps.com\/blog\/\",\"name\":\"IntoVPS Blog\",\"description\":\"VPS Hosting\",\"publisher\":{\"@id\":\"https:\/\/intovps.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/intovps.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/intovps.com\/blog\/#organization\",\"name\":\"IntoVPS\",\"url\":\"https:\/\/intovps.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/intovps.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/intovps.com\/blog\/wp-content\/uploads\/2021\/04\/intovps-avatar.png\",\"contentUrl\":\"https:\/\/intovps.com\/blog\/wp-content\/uploads\/2021\/04\/intovps-avatar.png\",\"width\":1563,\"height\":1563,\"caption\":\"IntoVPS\"},\"image\":{\"@id\":\"https:\/\/intovps.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/facebook.com\/intovps\",\"https:\/\/x.com\/intovps\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/intovps.com\/blog\/#\/schema\/person\/d46c8f5d25b5a8b009c50c0c4f887460\",\"name\":\"Adrian Andreias\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/intovps.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/f7a673269de3c425576541624530ca9c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/f7a673269de3c425576541624530ca9c?s=96&d=mm&r=g\",\"caption\":\"Adrian Andreias\"},\"sameAs\":[\"https:\/\/www.intovps.com\"],\"url\":\"https:\/\/intovps.com\/blog\/author\/admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Basic VPS security checklist » IntoVPS Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/","og_locale":"en_US","og_type":"article","og_title":"Basic VPS security checklist » IntoVPS Blog","og_description":"Every once in a while we have a customer that has been hacked. So I decided to make a short TO DO list for basic VPS security. Obviously security is a vast subject and you should hire a system administrator to take care of your VPS security if you don’t have the know how. Anyways, […]","og_url":"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/","og_site_name":"IntoVPS Blog","article_publisher":"https:\/\/facebook.com\/intovps","article_published_time":"2010-02-20T16:56:57+00:00","article_modified_time":"2010-05-07T19:12:32+00:00","author":"Adrian Andreias","twitter_card":"summary_large_image","twitter_creator":"@intovps","twitter_site":"@intovps","twitter_misc":{"Written by":"Adrian Andreias","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/#article","isPartOf":{"@id":"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/"},"author":{"name":"Adrian Andreias","@id":"https:\/\/intovps.com\/blog\/#\/schema\/person\/d46c8f5d25b5a8b009c50c0c4f887460"},"headline":"Basic VPS security checklist","datePublished":"2010-02-20T16:56:57+00:00","dateModified":"2010-05-07T19:12:32+00:00","mainEntityOfPage":{"@id":"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/"},"wordCount":409,"commentCount":6,"publisher":{"@id":"https:\/\/intovps.com\/blog\/#organization"},"keywords":["administration","europe vps","secuirty"],"articleSection":["VPS Administration"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/","url":"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/","name":"Basic VPS security checklist » IntoVPS Blog","isPartOf":{"@id":"https:\/\/intovps.com\/blog\/#website"},"datePublished":"2010-02-20T16:56:57+00:00","dateModified":"2010-05-07T19:12:32+00:00","breadcrumb":{"@id":"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/intovps.com\/blog\/2010\/02\/20\/basic-vps-security-checklist\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/intovps.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Basic VPS security checklist"}]},{"@type":"WebSite","@id":"https:\/\/intovps.com\/blog\/#website","url":"https:\/\/intovps.com\/blog\/","name":"IntoVPS Blog","description":"VPS Hosting","publisher":{"@id":"https:\/\/intovps.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/intovps.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/intovps.com\/blog\/#organization","name":"IntoVPS","url":"https:\/\/intovps.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/intovps.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/intovps.com\/blog\/wp-content\/uploads\/2021\/04\/intovps-avatar.png","contentUrl":"https:\/\/intovps.com\/blog\/wp-content\/uploads\/2021\/04\/intovps-avatar.png","width":1563,"height":1563,"caption":"IntoVPS"},"image":{"@id":"https:\/\/intovps.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/facebook.com\/intovps","https:\/\/x.com\/intovps"]},{"@type":"Person","@id":"https:\/\/intovps.com\/blog\/#\/schema\/person\/d46c8f5d25b5a8b009c50c0c4f887460","name":"Adrian Andreias","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/intovps.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/f7a673269de3c425576541624530ca9c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f7a673269de3c425576541624530ca9c?s=96&d=mm&r=g","caption":"Adrian Andreias"},"sameAs":["https:\/\/www.intovps.com"],"url":"https:\/\/intovps.com\/blog\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/intovps.com\/blog\/wp-json\/wp\/v2\/posts\/122","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/intovps.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/intovps.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/intovps.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/intovps.com\/blog\/wp-json\/wp\/v2\/comments?post=122"}],"version-history":[{"count":12,"href":"https:\/\/intovps.com\/blog\/wp-json\/wp\/v2\/posts\/122\/revisions"}],"predecessor-version":[{"id":133,"href":"https:\/\/intovps.com\/blog\/wp-json\/wp\/v2\/posts\/122\/revisions\/133"}],"wp:attachment":[{"href":"https:\/\/intovps.com\/blog\/wp-json\/wp\/v2\/media?parent=122"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/intovps.com\/blog\/wp-json\/wp\/v2\/categories?post=122"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/intovps.com\/blog\/wp-json\/wp\/v2\/tags?post=122"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}