Securing a VPS with some Ways

1. Change the Default SSH Port maybe to something like 27765 which is difficult to guess

2. Disable Root Login

3. Using SSH Keys(Public Key) instead of SSH Passwords to prevent sniffing attacks by sniffing network packet sniffing

4. Enable Firewall and Set Incoming Port(80/443/SSH) and Possible in Use Outgoing port traffic only.

5. Use SFTP only

6. Install Antivirus Clam AV and set it to update with cron

7. Install a Malware Scanner to run with cron on daily basis

8. Disable IP V6

9. Disable DNS recursion

10. Enable brute forcing prevention through Fail2ban

11. Some services can also be installed over a Docker Container in case like Database Systems can run on a Container

12. Use rkhunter which is a well known tool for checking vulnerabilities, rootkits, back doors, and possible local exploits on a server

13. If possible use a VPN via Open VPN