Instructions for checking VPS safety
Recently, a lot of specialized software has appeared to scan the user and password of VPS for unauthorized access. The way the software works is as follows:
Using Remote desktop service's default port detector is port 3389.
After listing the IPs that use this default gateway, they perform brute force with a series of pre-built users and passwords.
After the brute force is successful, they will proceed to access the VPS and make a series of changes: access the main account to appropriate money (Paypal, ETH, BTC ...), install cryptocurrency mining software , install password scanning software to create a dangerous scanning network….
In addition, it is more dangerous when an attacker creates a user account with full administrative rights running in parallel with the main customer account without anyone knowing.
For those reasons, Windows VPS Service recommends that customers perform some checks on their VPS when they encounter one of the following symptoms:
When you are using but disconnected with a notification that other users have access to it, immediately suspect that your VPS has been hacked.
VPS lags abnormally for unknown reasons, CPU increases...
VPS suddenly changed password making you inaccessible.
You then perform the test by following these steps:
On the VPS, right-click Start, select Computer Management, and find Local User and Groups. If on Local User and Groups, only the Administrator account is displayed (or there is an additional Guest account but it is disabled), then you move to step 2. (Note in this step, if you cannot access Local User and Groups, or if you find out that there are more strange users, your VPS may have been hacked, now you need to quickly notify the service provider for handling. )
Turn on Task Manager, check if there is strange software running that consumes a lot of CPU/RAM/Network resources.
After checking, you discover or suspect that your VPS has been hacked, please immediately notify our party to take steps to handle. For the sake of security, raise your vigilance and follow one of the ways to increase the security of your VPS .
Thank you for your support and trust in using our services.
- VPS runs ads Facebook Ads Google Bing Ads Instagram Ads Tiktok ads Twitter…
- Instructions to check the IP address connected to the VPS
- VPS with MMO(Make Money Online)
- Instructions to change the default access port (3389) on VPS
- Instructions to fix the error of not showing preview images on Windows VPS