Articles

VPS security checklist after deployment

Quick answer: Right after your Cloud2Y VPS is deployed: update all packages, create a sudo user,...
How to secure SSH access

Quick answer: Secure SSH by switching to key-based authentication, disabling password logins and...
How to disable root SSH login

Quick answer: Create a regular user with sudo rights, install your SSH key for that user, then...
How to change the SSH port

Quick answer: Set a new Port value in /etc/ssh/sshd_config, allow that port in your firewall...
How to configure a firewall

Quick answer: Use the firewall native to your distro: ufw on Ubuntu/Debian, firewalld on...
How to install Fail2ban

Quick answer: Install the package (apt install fail2ban or dnf install fail2ban with EPEL),...
How to protect against brute-force attacks

Quick answer: Remove the passwords bots guess: use SSH keys and disable password logins, add...
How to scan a server for malware

Quick answer: Use ClamAV for general file scanning, rkhunter/chkrootkit for rootkit signs, and...
How to keep Linux packages updated

Quick answer: Update manually with apt update && apt upgrade (Ubuntu/Debian) or dnf...
How to configure SSL certificates

Quick answer: Install certbot and request a free Let's Encrypt certificate: certbot --nginx or...
How to secure WordPress on a VPS

Quick answer: Keep core, themes and plugins updated; use strong unique passwords + 2FA; set...
What is a DDoS attack?

Quick answer: A DDoS (Distributed Denial of Service) attack floods a server or its network link...
Cloud2Y DDoS protection overview

Quick answer: Cloud2Y offers DDoS protection as a configurable option when ordering VPS, VDS or...
How to report a DDoS attack

Quick answer: Open a support ticket (or email [email protected]) with: the target IP and service,...
How to identify suspicious traffic

Quick answer: Start with ss -s for the connection summary, list top source IPs with ss -tn, watch...
How to read auth logs

Quick answer: Authentication events live in /var/log/auth.log (Ubuntu/Debian) or /var/log/secure...
How to protect an API or web app

Quick answer: Serve everything over HTTPS, authenticate with short-lived tokens or keys,...
Security responsibilities: Cloud2Y vs customer

Quick answer: Cloud2Y secures everything up to your server's network port: physical data centers,...
What to do if your server is hacked

Quick answer: Isolate the server (firewall block or power it off from the Client Area), assess...
Abuse policy and prohibited activities

Quick answer: Cloud2Y prohibits using services for spam, network scanning, DDoS participation,...