A few steps stop most automated attacks:
- Strong root password:
passwd(at least 16 characters, mixing letters and numbers). - Your own user with administrator rights:
adduser myuserusermod -aG sudo myuser - Firewall (allow SSH before enabling it, so you do not lock yourself out):
ufw allow OpenSSHufw enable
Open only the ports you use, for exampleufw allow 80andufw allow 443for a website. - Even better, SSH key login instead of a password.
- Keep the system updated:
apt update && apt upgrade -y
If the firewall locks you out, open a ticket with your VPS IP and we will help you regain access.
