Detect the security of Linux VPS website files in 3 minutes

Snail personally believes that from the first day we started using VPS hosts, we have changed from using virtual hosts to becoming rich and handsome. No matter what VPS hosting product we use, we should treat the VPS host as an administrator. Especially when we use Linux VPS, although the product and server are still a little different, the operational flexibility is almost the same. Any programs we need to install, the environment is controlled by ourselves. Moreover, the security of our site and the security of our machines are also related to us.

If there is a security issue with one of our websites or VPS, it is likely that all the websites in our machine will be hacked, and our website will also suffer. This is why when many friends use machines to create website groups, all websites are deleted or have Trojans attached to them. So how do we carry out safety monitoring? We can only do this ourselves, and the merchants will not solve it for us.

The first point is to check user behavior records.

more /var/log/securewho /var/log/wtmp

Using the above two commands, you can check whether the VPS has records of users logging in. The second command is the IP record of logging in to the VPS. If there is an IP that is not your own login, it means there is a security issue with our VPS and we need to check the files.

Second point, check whether the web page file has been modified.

find /home/wwwroot/ -name \\”*.php\\” -mtime -5

The above means to check whether any files with PHP file suffix in the wwwroot directory have been modified within 5 days. If so, a list will be displayed. These two methods should be able to detect security issues with our Linux VPS. For Windows VPS we can view it through the logs.

Recommended site searches: IP query network, mainland China proxy server IP, foreign free all-purpose space, registration-free virtual host, Korean independent server, 6 yuan a year cloud server, foreign server rental price, Hong Kong host reverse check IP, Registration-free virtual host,