security - My wordpress websites on VPS server is getting hacked regularly -


i have purchased vps server ovh. have installed vestacp, has been more 6 months , i'm still facing issues server security. wordpress websites hacked, server slow or not responding whole day. i'm not able identify issue. please. me.

here basic checklist started:

  1. download , run wpscan against site can obtain here.
  2. change passwords, since it's virtual private server pem file might of been compromised. change password access site.
  3. update plugins, can't stress enough , see businesses time, don't update plugins. make sure updated latest wordpress version well.
  4. if website beyond repair @ time download files , fresh install of wordpress , restore can.
  5. invest in ssl certificate encrypt data, protect , users mitm (man in middle) attacks.
  6. update .htaccess file restrictions try these.
  7. if don't have ids/ips detect sql injection consider installing modsecurity, can download here.
  8. since it's virtual private server if backdoor has been planted might want consider doing full wipe , restore of files know secure.
  9. close ports don't need. if don't use ports time close them.
  10. update webserver applications, apache, mysql, , others. if don't have latest version should able download them manually , if it's linux compile , run latest source.
  11. for countries don't mean business block of them country blocking plugin make sure it's secure, key research.
  12. install wpsecurity , limit amount of failed logins before being locked out or having ip address blocked usernames after many failed attempts.

if it's linux vps try these commands see server to:

#check remote connections netstat -a #allows monitor network usage application nethogs eth0 #allows monitor system log authorizations tail -f /var/log/auth.log #allows monitor firewall log tail -f /var/log/ufw.log #allows monitor packets (look malformed ones) tshark -i eth0 

you should doing incident response @ time more since it's vps server. there great methodologies on this website may well.

hope helps.

--lillypad


Comments

Popular posts from this blog

html - Firefox flex bug applied to buttons? -

html - Missing border-right in select on Firefox -

c# - two queries in same method -