Instructions for checking VPS safety


Recently, a lot of specialized software has appeared to scan the user and password of VPS for unauthorized access. The way the software works is as follows:

Using Remote desktop service's default port detector is port 3389.
After listing the IPs that use this default gateway, they perform brute force with a series of pre-built users and passwords.
After the brute force is successful, they will proceed to access the VPS and make a series of changes: access the main account to appropriate money (Paypal, ETH, BTC ...), install cryptocurrency mining software , install password scanning software to create a dangerous scanning network….

In addition, it is more dangerous when an attacker creates a user account with full administrative rights running in parallel with the main customer account without anyone knowing.

For those reasons, Windows VPS Service recommends that customers perform some checks on their VPS when they encounter one of the following symptoms:

When you are using but disconnected with a notification that other users have access to it, immediately suspect that your VPS has been hacked.
VPS lags abnormally for unknown reasons, CPU increases...
VPS suddenly changed password making you inaccessible.
You then perform the test by following these steps:

 On the VPS, right-click  Start,  select  Computer Management, and  find  Local User and Groups. If on  Local User and Groups,  only the  Administrator account is displayed (or there is an additional Guest account but it is disabled),  then you move to step 2. (Note in this step, if you cannot access Local User and Groups,  or if you find out that there are more strange users, your VPS may have been hacked, now you need to quickly notify the service provider for handling. )
 Turn on  Task Manager,  check if there is strange software running that consumes a lot of CPU/RAM/Network resources.
After checking, you discover or suspect that your VPS has been hacked, please immediately notify our party to take steps to handle. For the sake of security, raise your vigilance and follow one of the ways to increase the security of your VPS .

Thank you for your support and trust in using our services.

Address: 107 Dong Nai - Vietnam. - Email: services@cmt8.net - Phone: 18001119
Copyright © 2012 - BlogMe. All rights reserved