VPS security

In this article you'll find an overview of all security related articles for VPSs in our knowledge base. This includes information about what you can do to secure your VPS, but also what we do (e.g. DDoS protection).

One of the most important tips we can give you for securing your server (and what you host on it), is to keep it up-to-date. Frequently check for and install updates for your OS, software, hosted CMS-systems and its themes / plugins if applicable (e.g. WordPress).

Vulnerabilities monitored by TransIP

We automatically scan all VPSs hosted with TransIP for the vulnerabilities listed below.If we discover that any of these services is vulnerable on a VPS, we'll send you an e-mail with a link to the article explaining how to secure the service. If the service is not secured after an indicated period of time, the port will be blocked for the specific VPS in our firewall.

• Securing your NTP server
• Securing your SNMP server
• Securing the RPC portmapper service
• Securing the LDAP service in Windows Server
• Securing OpenDNS resolvers
• Securing the Memcache service
• Securing the NetBIOS service
• Securing the SSDP port

Bruteforce / SSH

• Changing the SSH port
• Using SSH keys
• Disabling root SSH access
• Fail2Ban bruteforce security

You can also restrict SSH access to your own IP addresses using IP whitelisting. For this, see our Firewall documentation below. 

DDoS

• Does my VPS have DDoS protection?
• Limiting the impact of a (D)DoS attack

SSL

• SSL in DirectAdmin
• SSL in Plesk
• SSL in cPanel
• SSL in Windows IIS
• SSL in Apache
• SSL in HA-IP / HA-IP Pro

Anti-Virus

• ClamAV AlmaLinux 8
• ClamAV CentOS 7
• ClamAV Debian 9
• ClamAV Ubuntu 16 & 18

Firewall

• The VPS-Firewall in the TransIP control panel
• Firewalld CentOS 7, 8 & AlmaLinux 8
• Uncomplicated Firewall (UFW) Debian 9
• Uncomplicated Firewall (UFW) Ubuntu 16
• Uncomplicated Firewall (UFW) Ubuntu 18

Updating a VPS

For updating a VPS with a control panel, see the specific DirectAdmin, Plesk and cPanel sections of this article.

• Updating CentOS 7
• Updating Debian 9
• Updating Ubuntu 16
• Updating Ubuntu 18

DirectAdmin

• Securing a DirectAdmin VPS
• SSL in DirectAdmin
• Updating DirectAdmin

Plesk

• Securing a Plesk VPS
• SSL in Plesk
• Updating Plesk

cPanel

• Securing a cPanel VPS
• SSL in cPanel
• Updating cPanel

Windows

• Installing an SSL certificate in IIS

Abuse reports / Infected VPSs

• Your VPS is infected / sends spam
• What to do when you're receiving abuse reports

General

• TransIP ISO certificates
• External audits / security scans on your VPS

As we add new articles to our Knowledge Base, security related subjects will be added to this article. Is there a specific subject you'd like us to write about? Please let us know by leaving a message under 'Comments'.

Should you have any questions left regarding this article, do not hesitate to contact our support department. You can reach us via the ‘Contact Us’ button at the bottom of this page.