Questions tagged [vps]
54
questions
1
vote
4
answers
116
views
Is firewall needed when a VPS is used to run a single service?
Consider the following cases.
A vps running a selfhosted service which is listening on port 1234.
Case 1: There is firewall configured that blocks all incoming connections by default. Now port 1234 ...
- 886
0
votes
0
answers
119
views
Fail2ban not resulting in any update of IPTables
I have:
Installed Fail2ban
Created a local jail file.
Changed lines within /etc/fail2ban/jail.local where enabled is mentioned x2 to true.
Added enabled = true to the Asterisk section of the jail....
0
votes
2
answers
203
views
Hosting a Honeypot to collect data [closed]
I want to collect IoT botnets in order to analyze them. Are there any good VPS providers who allow to do that? - I'm a little cautious about this because of possible misconfigurations that could ...
- 103
3
votes
1
answer
431
views
Which of the following Linys auditing suggestions are worthwhile?
I'm currently securing a Linode VPS that will host a WordPress store and two Python web applications. Security-wise, I've run the most "basic" steps, such as hardening SSH access (i.e. ...
- 131
0
votes
0
answers
157
views
ISP-restricted VPN on Android
How to connect to VPN service on Android via its app if it's restricted by state ISPs, but you're able to connect via cloud VPS network outside the state
My idea is about concepts in general:
you ...
- 11
0
votes
1
answer
572
views
Cloudflare not hide VPS IP (ngnix)
I have a problem with hiding the VPS IP using Cloudflare. My IP can be found on search.censys.io. I don't have any DNS leaks. I'm using nginx to reverse proxy a node.js server. Is it possible to hide ...
- 1
0
votes
1
answer
565
views
Securing home hosted servers (opening ports vs tunnelling)
When it comes to securing your home hosted servers, the most common advice appears to be:
1.Have a VPS with a reverse proxy
2.Tunnel to your home network from the VPS using a VPN like Wireguard
...
1
vote
1
answer
156
views
Is handling keys with vps without kms secure?
I am thinking about using a vps on a hosting provider that does not offer cloud services like kms, or vpc on for example AWS for a webapp. The webapp will need to encrypt some sensitive data in the ...
- 141
1
vote
1
answer
479
views
RDP Brute Force Attacks
I've discovered my VPS server with RDP access is getting attacked.
Event log shows a bunch of 4625 events.
Now I know for using RDP, this is just the nature of things.
I have changed the RDP port ...
- 13
3
votes
1
answer
703
views
Can you use VPS for login and bypass VPN detection?
Can I bypass VPN detection with VPS? Instead of using VPN, I use VPS for another IP location and while doing that I can bypass VPN detection, right?
Like, they don't know where I am and they use the ...
1
vote
1
answer
386
views
I am still receiving ssh-bruteforce on my VPS
I have a server in Oracle Cloud Infrastructure Ashburn. I am using Tailscale to SSH my servers and closed Port 22 in public.
I closed Port 22 on the VCN and left Port 22 open on the server. But no one ...
- 47
2
votes
0
answers
1k
views
Best way to avoid DPI/tunnel detection?
guys, I live in Russia and that pretty much says it all.
I was using a standard self-hosted VPN on a DO droplet, but now I'm afraid that since VPN usage in Russia started to spread like a wildfire ...
1
vote
3
answers
291
views
security measures for proprietary code on a VPS
I've got several C++ and Python scripts containing proprietary algorithms, which are latency-sensitive and hence need to be on a system near the data center serving data to them. While a VPS is ...
- 21
1
vote
0
answers
201
views
Decompile a binary virus/worm
We got hacked, someone got access on our VPS machine. There are no ssh logs, there are no auth logs. There is no actual trace of remote access (that I could find and I'm not a security expert but I'm ...
- 111
1
vote
1
answer
221
views
Are CPU side-channel attacks still a concern on VPSs
I've been looking into getting a VPS to run an OpenVPN server on and a few other things. I've been speaking to a hosting company and they have sent me this screenshot to show they are protected ...
- 109
1
vote
1
answer
554
views
Is protecting against Meltdown and Spectre on virtual servers actually possible?
I've been reading into the Meltdown and Spectre bugs recently and the issues they cause for virtualised servers, as memory in one VM can potentially be accessed by another user in a separate VM with ...
- 109
0
votes
2
answers
1k
views
Can you trust a VPS service not to log data?
Like the title says, can you trust a VPS service not to log any data?
Is creating your own email server with a VPS service really a private solution?
- 3
1
vote
0
answers
294
views
Can a running SSH connection to a rootkit infected VPS be used to attack the remote client?
If a VPS running Debian 10 Xfce as a cloud desktop has been rootkit infected and there is an ongoing SSH connection with X2Go from a client to manage this server, is it possible for an attacker on the ...
user264116
0
votes
1
answer
3k
views
Do I need to create SSL for HTTPs over a local network?
I have a server that is accessed only via local network in my VPS, as it is local it does not have a domain, it is accessed only via IP (ex.: http://localhost/routine.php).
This server will only be ...
- 174
2
votes
2
answers
183
views
A customer support of where my company host a VPS on asked me login detail, is this standard procedure?
We host our web application on a VPS, I maintain LAMP environment there to fulfill our client needs (I work on relatively small SaaS service provider), I also set up a script to backup the system ...
- 35
1
vote
1
answer
243
views
Are hosted bare-metal servers more secure than VPS against unauthorized disclosure?
Our small company needs to store sensitive data in the cloud. We are debating VPS's or rented bare-metal servers due to cost. Our threat model includes malicious sysadmins working at the hosting ...
0
votes
0
answers
118
views
Confidentially seperating web content under single IP address
I am interested in exposing web content to strangers on the internet (Reddit, Discord, ..).
This content I wish to reside on the same web server under which personal web content resides.
(None of this ...
- 101
0
votes
1
answer
183
views
VPS host shows plain text "root" account password upon reinstall of unmanaged VM
I recently started using a VPS hosting service, that offers unmanaged VPS. It allows me to reinstall the VM at any point in time, choosing from a number of OS ISO files (doesn't have to be the same OS ...
- 133
4
votes
0
answers
2k
views
Maximum password length for user accounts on Ubuntu
I have a VPS hosted at a remote location. Obviously the host can login directly (without SSH or any keys) on this box and I want to make brute force password guessing as hard as possible for a bad ...
- 165
1
vote
1
answer
393
views
Can a host access a VPS disk's encrypted directory directly while running?
I have an Ubuntu VPS running at a remote host. The disk is not encrypted but I have a specific directory that is encrypted for which I must provide a password via an SSH session (not stored anywhere ...
- 165
1
vote
1
answer
320
views
Could the VPS host have access through WinSCP to the connecting computer's files?
I've been using someone else's VPS and connecting from my computer. I've been connecting via WinSCP and the server is hosted on OVH. Is it possible for the VPS host to have access or view the files on ...
- 43
0
votes
1
answer
169
views
Abuse complaint regarding my server [closed]
I received this email for my hosting:
Please see the forwarded e-mail below for more details. Apparently,
your server is used for hacking which is strictly forbidden by our
ToS.
> 167. - [09/Oct/...
- 3
-2
votes
1
answer
2k
views
Does using a VPS hides the client identity in the web?
I know that a VPS provider can track the client connected to a VPS (This Q/A) using RDP(Remote desktop protocol). But my question is about websites accessed from the VPS using a browser. Can they know ...
- 117
0
votes
1
answer
443
views
How to secure user folders on the server from the scripts running in other user folder on the same server?
I have a VPS. There is a web-application running on this VPS.
A user can log into his account, create a project (the system automatically creates a folder for this project) and then, he can create and ...
- 13
2
votes
3
answers
2k
views
How to detect malicious files or web shell on a vps web server
How is it possible to detect malicious files or web shell on a vps web server?
I used to use a shared hosting, and when I tried to upload any malicious code for testing it got deleted automatically. ...
- 21
0
votes
2
answers
502
views
My VPS was used for DDOS Attacks [duplicate]
I got an email from my hosting provider telling me that my VPS was used to perform DDOS attacks on this website: cpanel4.vhosting-it.com. Unfortunately I haven't read their email sooner, so they ...
- 1
0
votes
2
answers
310
views
Security a Linux VPS: is the "standard advice" enough?
Like so many others, I'm an intermediate web developer who is starting to get into the security side of things and I'm looking to start running a Linux VPS (Debian). For years, I've resisted the move ...
- 151
3
votes
2
answers
325
views
How to prevent VPS owner from accessing my API key
I want to run a program on a vps, which uses my api key for doing financial transactions. I don't want there to be any chance the host owning the vps or any other hacker to ever be able to see my api ...
- 33
1
vote
1
answer
599
views
How to make VPS more secure with UFW?
I have 3 VPS based on Ubuntu 18.04 server OS and would like to open particular ports on each servers.
The ports, that I would like to open are:
Then let's take a look on the environment:
As you ...
- 113
0
votes
1
answer
364
views
Is it safe to whitelist my public ip to a server, even I am behind CGNAT?
I have a few VPS and Databases in GCP, I can access them by whitelisting my IP, but just few months ago my ISP rollout their CGNAT and I was affected. As far as I know CGNAT, allow multiple subscriber ...
- 133
2
votes
1
answer
330
views
Can someone perform DDoS on my VPS even if it is only accessible through SSH?
Can someone perform DDoS on my VPS even if I have not installed any webserver software like apache, nginx, etc.? Since I have not installed any webserver software, it's not really available to the ...
- 21
-1
votes
1
answer
288
views
Can I use a vm to learn hacking instead of vps? [closed]
I just began learning ethica hacking from The Hacker Playbook 3, and the author uses AWS an amazon VPS. Can I use a vm using VirtualBox and follow up with the book without problems? Will I be able to ...
- 121
1
vote
1
answer
217
views
Could it be possible to diminish the damage of having one's VPS inspected by the host?
I'm planning to run/have some quite sensitive data on a VPS, however, knowing well that the host could at any time access the data (rare but as long as it could happen in theory, I would very much ...
- 13
1
vote
1
answer
565
views
Problems accessing websites in Netherlands [closed]
I have problems accessing certain websites in Netherlands, I have tried using several VPN, RDP, SOCK5(Vip72), Epic privacy browser. By the way i am in Asia (Malaysia). I used to be able to access it ...
- 11
-1
votes
2
answers
1k
views
Testing RCE and SSRF using Python SimpleHTTPServer [closed]
Is it possible to test RCE and SSRF vulnerabilities using Python SimpleHTTPServer? Or should I use a VPS server?
3
votes
2
answers
194
views
VPS with shared resources malloc attack
If I understand it correctly then:
C function malloc provides a memory block with indeterminate values (which depend on the previous user of this memory block)
Shared VPS hostings share resources ...
- 522
2
votes
2
answers
14k
views
Connecting to my VPN via IP or domain name?
Background:
So I use a private VPS to host my own VPN, rather than pay/trust another company to host it for me. I am an intermittent traveller so it is cheaper for me to spin up or down my server as ...
- 121
56
votes
8
answers
19k
views
Brutalized VPS recovery data now available. Considerations? [closed]
Backstory
My sites and VPS were stolen from me. The hosting company and I were locked out and unable to access it. They weren't able to create a temp password for access because the attacker blocked ...
- 613
-3
votes
1
answer
581
views
Can a VPS provider see the IP address I use when connecting? [closed]
I recently purchased a VPS. Can the provider see the IP address I use when connecting to my VPS?
1
vote
1
answer
2k
views
what are the disadvantages of running SSH daemon without root?
Is there any risk in running ssh daemon with no root privilege using this method: how-can-i-make-this-daemon-init-run-as-a-non-root-user?
Debian Developer's Best Practices for OS Security says the ...
- 149
2
votes
1
answer
392
views
SSH to IP instead of to fully qualified hostname: does this reduce MITM risk?
I am applying configuration management to a VPS hosted by a VPS hosting company. Changing the hosting company is not an option, unfortunately.
This VPS has the following properties:
when newly-...
- 2,071
1
vote
2
answers
2k
views
Why is spoofing allowed in reputed VPS services?
I just learned about IP spoofing and so I set up VMs and sent spoofed UDP packets (8.8.8.8, Facebook's IP, Twitter's IP) to myself (home PC and mobile) from well-reputed VPS providers like AWS, ...
- 121
1
vote
2
answers
683
views
ownCloud on an encrypted partition on the server
I would like to implement a private cloud-storage on a Linux VPS. For example, I can use ownCloud.
I can do the root login on the VPS by ssh.
My question is if I can securely encrypt the /var/www ...
0
votes
1
answer
250
views
Must one have SSL certificates for each domain, to use HTTPS? [duplicate]
I read in the following passage in this DigitalOcean article, concerning HTTP/2:
Even though HTTP/2 does not require encryption, developers of two most
popular browsers, Google Chrome and Mozilla ...
user123574
0
votes
2
answers
2k
views
What possible attacks might occur on a SQL Server TCP/IP port?
We have a VPS that contains a SQL Server Express instance.
Using SQL Server Configuration we have enabled TCP/IP to listen on a random port, say 5741.
We have disabled sa and created another user with ...
- 145