help! How to secure my site from attacks

[ariel1238a]

my site host in a VPS .. Some time ago hackes or someone tried to bring down my site and unfortunately succeeded,
because I had not use security against attacks like this.
I'm looking for a service or a way to secure my site very well at an affordable price ..
I will be happy to know this topic further, I'd love to hear some recommendations
And how to prevent future attacks attempt to down my site
*Thread may be opened in the wrong place

 

[Dsteam]

What CMS you use? re-name admin folder like "ad312min32232"
try update all scripts, change root/users passwords on VPS (ssh, ftp, mysql etc.)
If they ddos your VPS - so use cloudflare or incapsula they have cheap anti-ddos.

 

[virtualbyron]

Change you database prefix and the CHMOD of some file/repertory, and other few things (you can find easy tutorials for all that tips you need)
Then you will need a powerful firewall, here you go https://sucuri.net

 

[ariel1238a]

What CMS you use? re-name admin folder like "ad312min32232"
try update all scripts, change root/users passwords on VPS (ssh, ftp, mysql etc.)
If they ddos your VPS - so use cloudflare or incapsula they have cheap anti-ddos.

Change you database prefix and the CHMOD of some file/repertory, and other few things (you can find easy tutorials for all that tips you need)
Then you will need a powerful firewall, here you go https://sucuri.net

So you both recommend to use an external service?
And why it is necessary to replace passwords, etc.
Thanks

 

[blackbrooke]

Secure your server by enabling firewall, install fail2ban many more. If you using WordPress, install security plugins I recommend plugins by ithemes

 

[iphoneino]

Sorry, but you are supposed to do some research before launching your site.Search in many ways, if we are newbie to some fields so we need to investigate to be more informed.goodluck

 

[collegeguys4]

I have been running my vps machines without getting hacked for many years now. here is what I recommend.

use iptables to lock down the ports. if your on debian or ubuntu, there is another package you can install so it remebers the rules you set on a restart.

do not use the firewall ufw, I had a problem once where an upgrade disabled it and my vps was sitting out there bare.

as another poster mentioned, fail2ban is a good program to use. it will create iptable rules for a limited time against an attackers ip address if they try to do certain types of actions.

make sure to setup ssh on your box with keys.

do not try to create iptable rules for entire country ip ranges, it slows down the kernel too much and your vps will be sluggish.

 

[lestadt]

Hi, if you use wordpress install the plugin Wordfence. I use the free version and he has delivered me from big headaches.

 

[bjadams]

what tech are you using to build your site?