JackaL
友一人
- Joined
- Sep 3, 2026
- Messages
- 341
- Reaction score
- 61
[TUTORIAL] Essential Ubuntu Server Hardening Checklist
The moment you deploy a VPS, automated bots begin brute-forcing your SSH port. Apply this basic hardening protocol before migrating any web application.
The moment you deploy a VPS, automated bots begin brute-forcing your SSH port. Apply this basic hardening protocol before migrating any web application.
- Disable Root Login: Create a non-root sudo user and disable direct root access in
/etc/ssh/sshd_config. - Change Default SSH Port: Move away from Port 22. Pick a random port between 1024 and 65535.
- Key-Based Authentication: Disable password authentication completely. Only allow connections via RSA or Ed25519 SSH keys.
- Install Fail2Ban: This service will automatically ban IP addresses that fail to authenticate after 3 attempts.
Bash:
# Quick command to install Fail2Ban on Ubuntu
sudo apt update && sudo apt install fail2ban -y
sudo systemctl enable fail2ban