{"id":131115,"date":"2026-10-22T12:14:46","date_gmt":"2026-10-22T05:14:46","guid":{"rendered":"https:\/\/tino.vn\/blog\/?p=131115"},"modified":"2026-10-22T12:14:46","modified_gmt":"2026-10-22T05:14:46","slug":"bao-mat-vps","status":"publish","type":"post","link":"https:\/\/tino.vn\/blog\/bao-mat-vps\/","title":{"rendered":"B\u1ea3o m\u1eadt VPS: checklist cho VPS Linux v\u00e0 Windows"},"content":{"rendered":"\n<p class=\"tino-byline wp-block-paragraph\"><em>T\u00e1c gi\u1ea3: <a href=\"https:\/\/tino.vn\/blog\/author\/dong-tung\/\">\u0110\u00f4ng T\u00f9ng<\/a> \u00b7 Duy\u1ec7t k\u1ef9 thu\u1eadt: <a href=\"https:\/\/tino.vn\/blog\/author\/vanphong\/\">Nguy\u1ec5n V\u0103n Phong<\/a> \u00b7 C\u1eadp nh\u1eadt: 20\/10\/2026<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B\u1ea3o m\u1eadt VPS l\u00e0 gi\u1ea3m t\u1ed1i \u0111a \u0111\u01b0\u1eddng v\u00e0o m\u00e1y ch\u1ee7 v\u00e0 ph\u00e1t hi\u1ec7n s\u1edbm khi c\u00f3 b\u1ea5t th\u01b0\u1eddng.<\/strong> V\u1edbi ph\u1ea7n l\u1edbn VPS, vi\u1ec7c c\u1ea7n l\u00e0m g\u1ed3m: c\u1eadp nh\u1eadt h\u1ec7 \u0111i\u1ec1u h\u00e0nh, \u0111\u0103ng nh\u1eadp b\u1eb1ng SSH key thay cho m\u1eadt kh\u1ea9u, kh\u00f4ng \u0111\u0103ng nh\u1eadp tr\u1ef1c ti\u1ebfp b\u1eb1ng root. Ti\u1ebfp theo l\u00e0 b\u1eadt t\u01b0\u1eddng l\u1eeda ch\u1ec9 m\u1edf c\u1ed5ng th\u1eadt s\u1ef1 d\u00f9ng, ch\u1eb7n d\u00f2 m\u1eadt kh\u1ea9u b\u1eb1ng Fail2ban, kh\u00f4ng m\u1edf database ra Internet, sao l\u01b0u ra ngo\u00e0i VPS v\u00e0 theo d\u00f5i log.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Ai ch\u1ecbu tr\u00e1ch nhi\u1ec7m:<\/strong> v\u1edbi VPS kh\u00f4ng qu\u1ea3n l\u00fd (unmanaged), nh\u00e0 cung c\u1ea5p lo ph\u1ea7n c\u1ee9ng v\u00e0 m\u1ea1ng; h\u1ec7 \u0111i\u1ec1u h\u00e0nh, ph\u1ea7n m\u1ec1m v\u00e0 d\u1eef li\u1ec7u l\u00e0 vi\u1ec7c c\u1ee7a b\u1ea1n.<\/li>\n\n\n<li><strong>L\u00e0m ngay t\u1eeb ng\u00e0y \u0111\u1ea7u:<\/strong> VPS c\u00f3 IP c\u00f4ng khai s\u1ebd b\u1ecb qu\u00e9t c\u1ed5ng v\u00e0 d\u00f2 m\u1eadt kh\u1ea9u ngay khi l\u00ean m\u1ea1ng, kh\u00f4ng c\u1ea7n ai &#8220;nh\u1eafm&#8221; t\u1edbi b\u1ea1n.<\/li>\n\n\n<li><strong>VPS Windows:<\/strong> ph\u1ea7n l\u1edbn nguy\u00ean t\u1eafc gi\u1ed1ng Linux, thay SSH b\u1eb1ng Remote Desktop (RDP); xem ph\u1ea7n ri\u00eang b\u00ean d\u01b0\u1edbi.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">B\u00e0i n\u00e0y thu\u1ed9c l\u1ed9 tr\u00ecnh <a href=\"https:\/\/tino.vn\/blog\/cach-su-dung-vps\/\">c\u00e1ch s\u1eed d\u1ee5ng VPS<\/a>; l\u1ec7nh m\u1eabu d\u00f9ng Ubuntu 24.04 LTS. B\u00e0i n\u00e0y l\u00e0 checklist chung cho c\u1ea3 VPS Linux v\u00e0 Windows. T\u1eebng l\u1ec7nh chi ti\u1ebft h\u01a1n cho Ubuntu c\u00f3 \u1edf b\u00e0i <a href=\"https:\/\/tino.vn\/blog\/bao-mat-vps-ubuntu\/\">b\u1ea3o m\u1eadt VPS Ubuntu<\/a>.<\/p>\n\n\n\n<h2 id=\"Checklist_b\u1ea3o_m\u1eadt_VPS_cho_Linux_v\u00e0_Windows\">Checklist b\u1ea3o m\u1eadt VPS cho Linux v\u00e0 Windows<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1c b\u1ed9 h\u01b0\u1edbng d\u1eabn b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 nh\u01b0 NIST SP 800-123 v\u00e0 CIS Controls c\u00f3 chung v\u00e0i nguy\u00ean t\u1eafc. \u0110\u00f3 l\u00e0 ch\u1ec9 ch\u1ea1y d\u1ecbch v\u1ee5 c\u1ea7n thi\u1ebft, c\u1ea5p quy\u1ec1n t\u1ed1i thi\u1ec3u, v\u00e1 l\u1ed7i th\u01b0\u1eddng xuy\u00ean v\u00e0 ghi log \u0111\u1ec3 ph\u00e1t hi\u1ec7n s\u1ef1 c\u1ed1. B\u1ea3ng d\u01b0\u1edbi \u0111\u00e2y chuy\u1ec3n c\u00e1c nguy\u00ean t\u1eafc \u0111\u00f3 th\u00e0nh vi\u1ec7c c\u1ee5 th\u1ec3 tr\u00ean VPS Linux v\u00e0 Windows.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1400\" height=\"750\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/bao-mat-vps-checklist.webp\" alt=\"Checklist b\u1ea3o m\u1eadt VPS: c\u1eadp nh\u1eadt h\u1ec7 th\u1ed1ng, \u0111\u0103ng nh\u1eadp b\u1eb1ng SSH key, kh\u00f4ng d\u00f9ng root, b\u1eadt t\u01b0\u1eddng l\u1eeda, Fail2ban, sao l\u01b0u ra ngo\u00e0i VPS, kh\u00f4ng m\u1edf d\u1ecbch v\u1ee5 n\u1ed9i b\u1ed9, theo d\u00f5i log\" class=\"wp-image-131041\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/bao-mat-vps-checklist.webp 1400w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/bao-mat-vps-checklist-300x161.webp 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/bao-mat-vps-checklist-1024x549.webp 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/bao-mat-vps-checklist-768x411.webp 768w\" sizes=\"(max-width: 1400px) 100vw, 1400px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Vi\u1ec7c c\u1ea7n l\u00e0m<\/th><th>VPS Linux<\/th><th>VPS Windows<\/th><th>\u01afu ti\u00ean<\/th><\/tr><\/thead><tbody><tr><td>C\u1eadp nh\u1eadt h\u1ec7 \u0111i\u1ec1u h\u00e0nh<\/td><td><code>apt upgrade<\/code>, b\u1eadt unattended-upgrades<\/td><td>Windows Update<\/td><td>Ng\u00e0y \u0111\u1ea7u<\/td><\/tr><tr><td>\u0110\u0103ng nh\u1eadp an to\u00e0n<\/td><td>SSH key <code>ed25519<\/code>, t\u1eaft m\u1eadt kh\u1ea9u v\u00e0 root<\/td><td>M\u1eadt kh\u1ea9u m\u1ea1nh, b\u1eadt NLA cho RDP, kh\u00f3a t\u00e0i kho\u1ea3n khi nh\u1eadp sai nhi\u1ec1u l\u1ea7n<\/td><td>Ng\u00e0y \u0111\u1ea7u<\/td><\/tr><tr><td>T\u01b0\u1eddng l\u1eeda<\/td><td>UFW: m\u1edf SSH tr\u01b0\u1edbc, r\u1ed3i 80\/443<\/td><td>Windows Defender Firewall, gi\u1edbi h\u1ea1n IP \u0111\u01b0\u1ee3c v\u00e0o RDP<\/td><td>Ng\u00e0y \u0111\u1ea7u<\/td><\/tr><tr><td>Ch\u1eb7n d\u00f2 m\u1eadt kh\u1ea9u<\/td><td>Fail2ban<\/td><td>Ch\u00ednh s\u00e1ch kh\u00f3a t\u00e0i kho\u1ea3n, gi\u1edbi h\u1ea1n IP<\/td><td>Ng\u00e0y \u0111\u1ea7u<\/td><\/tr><tr><td>\u0110\u00f3ng d\u1ecbch v\u1ee5 th\u1eeba<\/td><td>Ki\u1ec3m tra <code>ss -tulpn<\/code>; database ch\u1ec9 nghe localhost<\/td><td>G\u1ee1 role\/feature kh\u00f4ng d\u00f9ng<\/td><td>Tu\u1ea7n \u0111\u1ea7u<\/td><\/tr><tr><td>Sao l\u01b0u<\/td><td>B\u1ea3n sao ra ngo\u00e0i VPS, th\u1eed kh\u00f4i ph\u1ee5c<\/td><td>B\u1ea3n sao ra ngo\u00e0i VPS, th\u1eed kh\u00f4i ph\u1ee5c<\/td><td>Tu\u1ea7n \u0111\u1ea7u<\/td><\/tr><tr><td>Gi\u00e1m s\u00e1t<\/td><td><code>journalctl<\/code>, <code>last<\/code>, c\u1ea3nh b\u00e1o t\u00e0i nguy\u00ean<\/td><td>Event Viewer (s\u1ef1 ki\u1ec7n 4625)<\/td><td>\u0110\u1ecbnh k\u1ef3<\/td><\/tr><\/tbody><\/table><figcaption class=\"wp-element-caption\">M\u1ee9c \u01b0u ti\u00ean l\u00e0 \u0111\u1ec1 xu\u1ea5t c\u1ee7a Blog Tino \u0111\u1ec3 s\u1eafp th\u1ee9 t\u1ef1 c\u00f4ng vi\u1ec7c, kh\u00f4ng ph\u1ea3i y\u00eau c\u1ea7u c\u1ee7a ti\u00eau chu\u1ea9n n\u00e0o.<\/figcaption><\/figure>\n\n\n\n<h2 id=\"C\u00e1ch_b\u1ea3o_m\u1eadt_VPS_Linux_(Ubuntu_24.04)_t\u1eebng_b\u01b0\u1edbc\">C\u00e1ch b\u1ea3o m\u1eadt VPS Linux (Ubuntu 24.04) t\u1eebng b\u01b0\u1edbc<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Tr\u00ean VPS Ubuntu, th\u1ee9 t\u1ef1 an to\u00e0n l\u00e0: c\u1eadp nh\u1eadt h\u1ec7 th\u1ed1ng, t\u1ea1o user sudo v\u00e0 c\u00e0i SSH key, ki\u1ec3m tra \u0111\u0103ng nh\u1eadp b\u1eb1ng key th\u00e0nh c\u00f4ng. Sau \u0111\u00f3 m\u1edbi t\u1eaft m\u1eadt kh\u1ea9u, b\u1eadt t\u01b0\u1eddng l\u1eeda v\u00e0 c\u00e0i Fail2ban. L\u00e0m ng\u01b0\u1ee3c th\u1ee9 t\u1ef1 l\u00e0 nguy\u00ean nh\u00e2n th\u01b0\u1eddng g\u1eb7p khi\u1ebfn ng\u01b0\u1eddi d\u00f9ng t\u1ef1 kh\u00f3a m\u00ecnh kh\u1ecfi VPS.<\/p>\n\n\n\n<h3 id=\"1._C\u1eadp_nh\u1eadt_h\u1ec7_th\u1ed1ng_v\u00e0_b\u1eadt_c\u1eadp_nh\u1eadt_b\u1ea3o_m\u1eadt_t\u1ef1_\u0111\u1ed9ng\">1. C\u1eadp nh\u1eadt h\u1ec7 th\u1ed1ng v\u00e0 b\u1eadt c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt t\u1ef1 \u0111\u1ed9ng<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">D\u00f9ng b\u1ea3n Ubuntu LTS c\u00f2n \u0111\u01b0\u1ee3c h\u1ed7 tr\u1ee3 (24.04 t\u1ea1i th\u1eddi \u0111i\u1ec3m vi\u1ebft, xem <a href=\"https:\/\/ubuntu.com\/about\/release-cycle\" rel=\"nofollow noopener\" target=\"_blank\">chu k\u1ef3 ph\u00e1t h\u00e0nh Ubuntu<\/a>). G\u00f3i <code>unattended-upgrades<\/code> \u0111\u01b0\u1ee3c c\u00e0i s\u1eb5n tr\u00ean Ubuntu Server v\u00e0 m\u1eb7c \u0111\u1ecbnh t\u1ef1 c\u00e0i b\u1ea3n v\u00e1 b\u1ea3o m\u1eadt, nh\u01b0ng kh\u00f4ng t\u1ef1 kh\u1edfi \u0111\u1ed9ng l\u1ea1i m\u00e1y (<a href=\"https:\/\/ubuntu.com\/server\/docs\/how-to\/software\/automatic-updates\/\" rel=\"nofollow noopener\" target=\"_blank\">Ubuntu Server docs<\/a>). Ki\u1ec3m tra \u0111\u1ecbnh k\u1ef3 xem VPS c\u00f3 c\u1ea7n kh\u1edfi \u0111\u1ed9ng l\u1ea1i \u0111\u1ec3 n\u1ea1p kernel m\u1edbi kh\u00f4ng.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt update &amp;&amp; sudo apt upgrade -y\n\n# Ch\u1ea1y th\u1eed c\u1eadp nh\u1eadt t\u1ef1 \u0111\u1ed9ng, xem log t\u1ea1i \/var\/log\/unattended-upgrades\/\nsudo unattended-upgrade -v --dry-run\n\n# File n\u00e0y t\u1ed3n t\u1ea1i ngh\u0129a l\u00e0 c\u1ea7n kh\u1edfi \u0111\u1ed9ng l\u1ea1i\nls \/var\/run\/reboot-required<\/code><\/pre>\n\n\n\n<h3 id=\"2._T\u1ea1o_user_sudo_v\u00e0_\u0111\u0103ng_nh\u1eadp_b\u1eb1ng_SSH_key\">2. T\u1ea1o user sudo v\u00e0 \u0111\u0103ng nh\u1eadp b\u1eb1ng SSH key<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">T\u00e0i li\u1ec7u Ubuntu khuy\u1ebfn ngh\u1ecb kh\u00f3a thu\u1eadt to\u00e1n ed25519 (<a href=\"https:\/\/ubuntu.com\/server\/docs\/how-to\/security\/openssh-server\/\" rel=\"nofollow noopener\" target=\"_blank\">OpenSSH server<\/a>). T\u1ea1o key tr\u00ean m\u00e1y t\u00ednh c\u1ee7a b\u1ea1n, kh\u00f4ng t\u1ea1o tr\u00ean VPS. Xem th\u00eam <a href=\"https:\/\/tino.vn\/blog\/ssh-key-la-gi\/\">SSH key l\u00e0 g\u00ec<\/a>.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># Tr\u00ean VPS (\u0111ang \u0111\u0103ng nh\u1eadp root): t\u1ea1o user v\u00e0 c\u1ea5p quy\u1ec1n sudo\nadduser tenban\nusermod -aG sudo tenban\n\n# Tr\u00ean m\u00e1y t\u00ednh c\u1ee7a b\u1ea1n: t\u1ea1o key v\u00e0 ch\u00e9p l\u00ean VPS\nssh-keygen -t ed25519\nssh-copy-id tenban@IP_VPS          # macOS, Linux\n# Windows PowerShell kh\u00f4ng c\u00f3 ssh-copy-id, d\u00f9ng l\u1ec7nh sau thay th\u1ebf:\ntype $env:USERPROFILE\\.ssh\\id_ed25519.pub | ssh tenban@IP_VPS \"mkdir -p ~\/.ssh &amp;&amp; chmod 700 ~\/.ssh &amp;&amp; cat &gt;&gt; ~\/.ssh\/authorized_keys &amp;&amp; chmod 600 ~\/.ssh\/authorized_keys\"\n\n# M\u1edf c\u1eeda s\u1ed5 m\u1edbi, th\u1eed \u0111\u0103ng nh\u1eadp b\u1eb1ng key\nssh tenban@IP_VPS<\/code><\/pre>\n\n\n\n<h3 id=\"3._T\u1eaft_\u0111\u0103ng_nh\u1eadp_b\u1eb1ng_m\u1eadt_kh\u1ea9u_v\u00e0_\u0111\u0103ng_nh\u1eadp_root_qua_SSH\">3. T\u1eaft \u0111\u0103ng nh\u1eadp b\u1eb1ng m\u1eadt kh\u1ea9u v\u00e0 \u0111\u0103ng nh\u1eadp root qua SSH<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ec9 l\u00e0m b\u01b0\u1edbc n\u00e0y khi \u0111\u00e3 \u0111\u0103ng nh\u1eadp \u0111\u01b0\u1ee3c b\u1eb1ng key \u1edf c\u1eeda s\u1ed5 kh\u00e1c. Tr\u00ean Ubuntu, n\u00ean ghi c\u1ea5u h\u00ecnh v\u00e0o th\u01b0 m\u1ee5c <code>\/etc\/ssh\/sshd_config.d\/<\/code>. L\u01b0u \u00fd: v\u1edbi m\u1ed7i t\u00f9y ch\u1ecdn, OpenSSH d\u00f9ng gi\u00e1 tr\u1ecb \u0111\u01b0\u1ee3c \u0111\u1ecdc \u0111\u1ea7u ti\u00ean (<a href=\"https:\/\/man.openbsd.org\/sshd_config\" rel=\"nofollow noopener\" target=\"_blank\">sshd_config<\/a>), v\u00e0 m\u1ed9t s\u1ed1 b\u1ea3n c\u00e0i s\u1eb5n c\u00f3 th\u1ec3 c\u00f3 file nh\u01b0 <code>50-cloud-init.conf<\/code> b\u1eadt l\u1ea1i \u0111\u0103ng nh\u1eadp b\u1eb1ng m\u1eadt kh\u1ea9u. \u0110\u1eb7t t\u00ean file b\u1eaft \u0111\u1ea7u b\u1eb1ng s\u1ed1 nh\u1ecf \u0111\u1ec3 \u0111\u01b0\u1ee3c \u0111\u1ecdc tr\u01b0\u1edbc, r\u1ed3i ki\u1ec3m tra c\u1ea5u h\u00ecnh th\u1ef1c t\u1ebf b\u1eb1ng <code>sshd -T<\/code>.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo tee \/etc\/ssh\/sshd_config.d\/01-bao-mat.conf &gt; \/dev\/null &lt;&lt;'EOF'\nPasswordAuthentication no\nKbdInteractiveAuthentication no\nPermitRootLogin no\nEOF\n\n# Ki\u1ec3m tra c\u00fa ph\u00e1p v\u00e0 gi\u00e1 tr\u1ecb \u0111ang c\u00f3 hi\u1ec7u l\u1ef1c\nsudo sshd -t\nsudo sshd -T | grep -Ei 'passwordauthentication|permitrootlogin'\n\nsudo systemctl restart ssh<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Gi\u1eef nguy\u00ean phi\u00ean SSH \u0111ang m\u1edf, m\u1edf th\u00eam m\u1ed9t phi\u00ean m\u1edbi \u0111\u1ec3 ch\u1eafc ch\u1eafn v\u1eabn \u0111\u0103ng nh\u1eadp \u0111\u01b0\u1ee3c r\u1ed3i m\u1edbi tho\u00e1t.<\/p>\n\n\n\n<h3 id=\"4._B\u1eadt_t\u01b0\u1eddng_l\u1eeda_UFW_\u0111\u00fang_th\u1ee9_t\u1ef1\">4. B\u1eadt t\u01b0\u1eddng l\u1eeda UFW \u0111\u00fang th\u1ee9 t\u1ef1<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1eb7t m\u1eb7c \u0111\u1ecbnh ch\u1eb7n m\u1ecdi k\u1ebft n\u1ed1i v\u00e0o, m\u1edf c\u1ed5ng SSH, r\u1ed3i m\u1edbi b\u1eadt t\u01b0\u1eddng l\u1eeda (<a href=\"https:\/\/ubuntu.com\/server\/docs\/how-to\/security\/firewalls\/\" rel=\"nofollow noopener\" target=\"_blank\">Ubuntu Server docs<\/a>). Ch\u1ec9 m\u1edf th\u00eam c\u1ed5ng d\u1ecbch v\u1ee5 th\u1eadt s\u1ef1 ph\u1ee5c v\u1ee5 ng\u01b0\u1eddi d\u00f9ng, th\u01b0\u1eddng l\u00e0 80 v\u00e0 443 cho website. Sau \u0111\u00f3 <a href=\"https:\/\/tino.vn\/blog\/cai-ssl-tren-vps\/\">c\u00e0i SSL tr\u00ean VPS<\/a> \u0111\u1ec3 d\u00f9ng HTTPS. \u0110\u1ecdc th\u00eam <a href=\"https:\/\/tino.vn\/blog\/firewall-tuong-lua-la-gi\/\">t\u01b0\u1eddng l\u1eeda l\u00e0 g\u00ec<\/a>.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw default deny incoming\nsudo ufw default allow outgoing\nsudo ufw allow OpenSSH        # m\u1edf SSH (c\u1ed5ng 22) tr\u01b0\u1edbc\nsudo ufw allow 80\/tcp\nsudo ufw allow 443\/tcp\nsudo ufw enable\nsudo ufw status verbose<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu IP nh\u00e0 b\u1ea1n c\u1ed1 \u0111\u1ecbnh, thay v\u00ec m\u1edf c\u1ed5ng SSH cho m\u1ecdi n\u01a1i, d\u00f9ng <code>sudo ufw allow from IP_CUA_BAN to any port 22 proto tcp<\/code>. Th\u00eam quy t\u1eafc m\u1edbi v\u00e0 th\u1eed \u0111\u0103ng nh\u1eadp \u0111\u01b0\u1ee3c r\u1ed3i m\u1edbi xo\u00e1 quy t\u1eafc <code>OpenSSH<\/code>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu \u1ee9ng d\u1ee5ng ch\u1ea1y b\u1eb1ng Docker: c\u1ed5ng do Docker publish \u0111i qua quy t\u1eafc ri\u00eang v\u00e0 kh\u00f4ng ch\u1ecbu s\u1ef1 ki\u1ec3m so\u00e1t c\u1ee7a UFW (<a href=\"https:\/\/docs.docker.com\/engine\/network\/packet-filtering-firewalls\/\" rel=\"nofollow noopener\" target=\"_blank\">t\u00e0i li\u1ec7u Docker<\/a>). H\u00e3y publish c\u1ed5ng n\u1ed9i b\u1ed9 v\u00e0o <code>127.0.0.1<\/code>, v\u00ed d\u1ee5 <code>-p 127.0.0.1:5678:5678<\/code>, r\u1ed3i \u0111\u01b0a ra ngo\u00e0i qua reverse proxy c\u00f3 HTTPS.<\/p>\n\n\n\n<h3 id=\"5._C\u00f3_n\u00ean_\u0111\u1ed5i_c\u1ed5ng_SSH_kh\u00f4ng?\">5. C\u00f3 n\u00ean \u0111\u1ed5i c\u1ed5ng SSH kh\u00f4ng?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">B\u01b0\u1edbc n\u00e0y gi\u1ea3 \u0111\u1ecbnh UFW \u0111\u00e3 b\u1eadt nh\u01b0 \u1edf b\u01b0\u1edbc 4; n\u1ebfu b\u1ea1n kh\u00f4ng \u0111\u1ed5i c\u1ed5ng, b\u1ecf qua b\u01b0\u1edbc n\u00e0y. \u0110\u1ed5i c\u1ed5ng 22 sang c\u1ed5ng kh\u00e1c gi\u1ea3m l\u01b0\u1ee3ng d\u00f2 m\u1eadt kh\u1ea9u t\u1ef1 \u0111\u1ed9ng v\u00e0 l\u00e0m log g\u1ecdn h\u01a1n, nh\u01b0ng kh\u00f4ng thay \u0111\u01b0\u1ee3c SSH key v\u00e0 t\u01b0\u1eddng l\u1eeda. Hi\u1ec7u qu\u1ea3 h\u01a1n l\u00e0 ch\u1ec9 cho ph\u00e9p IP c\u1ee7a b\u1ea1n v\u00e0o c\u1ed5ng SSH.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu v\u1eabn \u0111\u1ed5i c\u1ed5ng tr\u00ean Ubuntu 24.04, c\u1ea7n l\u01b0u \u00fd SSH ch\u1ea1y qua <code>ssh.socket<\/code>, n\u00ean ph\u1ea3i n\u1ea1p l\u1ea1i systemd sau khi s\u1eeda (<a href=\"https:\/\/bugs.launchpad.net\/ubuntu\/+source\/openssh\/+bug\/2069041\" rel=\"nofollow noopener\" target=\"_blank\">Ubuntu bug #2069041<\/a>).<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># M\u1edf c\u1ed5ng m\u1edbi tr\u00ean t\u01b0\u1eddng l\u1eeda TR\u01af\u1edaC\nsudo ufw allow 2222\/tcp\n\n# Khai b\u00e1o c\u1ed5ng m\u1edbi\necho 'Port 2222' | sudo tee \/etc\/ssh\/sshd_config.d\/02-port.conf\nsudo sshd -t\nsudo systemctl daemon-reload\nsudo systemctl restart ssh.socket\n\n# Th\u1eed \u0111\u0103ng nh\u1eadp \u1edf c\u1eeda s\u1ed5 m\u1edbi: ssh -p 2222 tenban@IP_VPS\n# Th\u00e0nh c\u00f4ng r\u1ed3i m\u1edbi \u0111\u00f3ng c\u1ed5ng c\u0169 (quy t\u1eafc OpenSSH t\u1ea1o \u1edf b\u01b0\u1edbc 4)\nsudo ufw delete allow OpenSSH<\/code><\/pre>\n\n\n\n<h3 id=\"6._Ch\u1eb7n_d\u00f2_m\u1eadt_kh\u1ea9u_b\u1eb1ng_Fail2ban\">6. Ch\u1eb7n d\u00f2 m\u1eadt kh\u1ea9u b\u1eb1ng Fail2ban<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/github.com\/fail2ban\/fail2ban\" rel=\"nofollow noopener\" target=\"_blank\">Fail2ban<\/a> \u0111\u1ecdc log \u0111\u0103ng nh\u1eadp v\u00e0 t\u1ea1m kh\u00f3a IP nh\u1eadp sai nhi\u1ec1u l\u1ea7n. Khi \u0111\u00e3 t\u1eaft \u0111\u0103ng nh\u1eadp b\u1eb1ng m\u1eadt kh\u1ea9u, Fail2ban ch\u1ee7 y\u1ebfu gi\u1ea3m t\u1ea3i v\u00e0 gi\u1ea3m log r\u00e1c. D\u00f9 v\u1eady, n\u00f3 v\u1eabn \u0111\u00e1ng c\u00e0i cho SSH v\u00e0 c\u00e1c d\u1ecbch v\u1ee5 c\u00f3 trang \u0111\u0103ng nh\u1eadp. C\u00e1ch xem v\u00e0 b\u1ecf ch\u1eb7n m\u1ed9t IP b\u1ecb kh\u00f3a nh\u1ea7m c\u00f3 trong b\u00e0i b\u1ea3o m\u1eadt VPS Ubuntu n\u00eau \u1edf \u0111\u1ea7u b\u00e0i.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install fail2ban -y\n\nsudo tee \/etc\/fail2ban\/jail.d\/sshd.local &gt; \/dev\/null &lt;&lt;'EOF'\n[sshd]\nenabled = true\n# port = 2222   (b\u1ecf d\u1ea5u # n\u1ebfu \u0111\u00e3 \u0111\u1ed5i c\u1ed5ng SSH)\nEOF\n\nsudo systemctl restart fail2ban\nsudo fail2ban-client status sshd<\/code><\/pre>\n\n\n\n<h3 id=\"7._Ch\u1ec9_m\u1edf_d\u1ecbch_v\u1ee5_c\u1ea7n_thi\u1ebft,_kh\u00f4ng_m\u1edf_database_ra_Internet\">7. Ch\u1ec9 m\u1edf d\u1ecbch v\u1ee5 c\u1ea7n thi\u1ebft, kh\u00f4ng m\u1edf database ra Internet<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">M\u1ed7i c\u1ed5ng \u0111ang m\u1edf l\u00e0 m\u1ed9t \u0111\u01b0\u1eddng v\u00e0o. Li\u1ec7t k\u00ea d\u1ecbch v\u1ee5 \u0111ang l\u1eafng nghe v\u00e0 t\u1eaft nh\u1eefng g\u00ec kh\u00f4ng d\u00f9ng. Database (MySQL, PostgreSQL, Redis) v\u00e0 b\u1ea3ng qu\u1ea3n tr\u1ecb ch\u1ec9 n\u00ean nghe tr\u00ean <code>127.0.0.1<\/code> ho\u1eb7c qua VPN; c\u1ea7n qu\u1ea3n tr\u1ecb t\u1eeb xa th\u00ec d\u00f9ng \u0111\u01b0\u1eddng h\u1ea7m SSH thay v\u00ec m\u1edf c\u1ed5ng.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># D\u1ecbch v\u1ee5 \u0111ang l\u1eafng nghe: c\u1ed9t Local Address l\u00e0 0.0.0.0 ho\u1eb7c [::] ngh\u0129a l\u00e0 m\u1edf ra m\u1ecdi m\u1ea1ng\nsudo ss -tulpn\n\n# Truy c\u1eadp MySQL tr\u00ean VPS t\u1eeb m\u00e1y c\u1ee7a b\u1ea1n qua \u0111\u01b0\u1eddng h\u1ea7m SSH, kh\u00f4ng c\u1ea7n m\u1edf c\u1ed5ng 3306.\n# D\u00f9ng c\u1ed5ng 3307 \u1edf m\u00e1y b\u1ea1n \u0111\u1ec3 kh\u00f4ng \u0111\u1ee5ng MySQL c\u00e0i s\u1eb5n tr\u00ean m\u00e1y, r\u1ed3i k\u1ebft n\u1ed1i t\u1edbi 127.0.0.1:3307\nssh -L 3307:127.0.0.1:3306 tenban@IP_VPS<\/code><\/pre>\n\n\n\n<h3 id=\"8._Sao_l\u01b0u_ra_ngo\u00e0i_VPS\">8. Sao l\u01b0u ra ngo\u00e0i VPS<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Sao l\u01b0u kh\u00f4ng ng\u0103n b\u1ecb t\u1ea5n c\u00f4ng, nh\u01b0ng quy\u1ebft \u0111\u1ecbnh b\u1ea1n m\u1ea5t bao nhi\u00eau d\u1eef li\u1ec7u sau s\u1ef1 c\u1ed1. B\u1ea3n sao l\u01b0u ph\u1ea3i n\u1eb1m ngo\u00e0i VPS (m\u00e3 \u0111\u1ed9c t\u1ed1ng ti\u1ec1n th\u01b0\u1eddng m\u00e3 ho\u00e1 c\u1ea3 b\u1ea3n sao l\u01b0u n\u1eb1m c\u00f9ng m\u00e1y) v\u00e0 c\u1ea7n \u0111\u01b0\u1ee3c th\u1eed kh\u00f4i ph\u1ee5c. C\u00e1c b\u01b0\u1edbc chi ti\u1ebft \u1edf b\u00e0i <a href=\"https:\/\/tino.vn\/blog\/backup-vps\/\">backup VPS<\/a>.<\/p>\n\n\n\n<h3 id=\"9._Theo_d\u00f5i_log_v\u00e0_t\u00e0i_nguy\u00ean\">9. Theo d\u00f5i log v\u00e0 t\u00e0i nguy\u00ean<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code># \u0110\u0103ng nh\u1eadp g\u1ea7n \u0111\u00e2y v\u00e0 \u0111\u0103ng nh\u1eadp th\u1ea5t b\u1ea1i\nlast -a | head\nsudo lastb | head\n\n# Log SSH trong 24 gi\u1edd qua\nsudo journalctl -u ssh --since \"24 hours ago\"\n\n# Dung l\u01b0\u1ee3ng \u1ed5 \u0111\u0129a v\u00e0 ti\u1ebfn tr\u00ecnh t\u1ed1n CPU\ndf -h\nps aux --sort=-%cpu | head<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Ngo\u00e0i ki\u1ec3m tra b\u1eb1ng tay, n\u00ean \u0111\u1eb7t c\u1ea3nh b\u00e1o khi CPU, RAM, \u1ed5 \u0111\u0129a t\u0103ng b\u1ea5t th\u01b0\u1eddng; m\u1ed9t VPS b\u1ecb chi\u1ebfm quy\u1ec1n th\u01b0\u1eddng l\u1ed9 ra qua t\u00e0i nguy\u00ean tr\u01b0\u1edbc khi b\u1ea1n th\u1ea5y d\u1ea5u hi\u1ec7u kh\u00e1c.<\/p>\n\n\n\n<h2 id=\"C\u00e1ch_b\u1ea3o_m\u1eadt_VPS_Windows_Server\">C\u00e1ch b\u1ea3o m\u1eadt VPS Windows Server<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">V\u1edbi VPS Windows, c\u1eeda v\u00e0o th\u01b0\u1eddng b\u1ecb nh\u1eafm t\u1edbi l\u00e0 Remote Desktop (RDP, c\u1ed5ng 3389) khi m\u1edf cho m\u1ecdi IP v\u00e0 d\u00f9ng m\u1eadt kh\u1ea9u y\u1ebfu. C\u00e1c vi\u1ec7c c\u01a1 b\u1ea3n: b\u1eadt Network Level Authentication, gi\u1edbi h\u1ea1n IP \u0111\u01b0\u1ee3c v\u00e0o RDP, b\u1eadt kh\u00f3a t\u00e0i kho\u1ea3n khi nh\u1eadp sai nhi\u1ec1u l\u1ea7n, d\u00f9ng m\u1eadt kh\u1ea9u m\u1ea1nh v\u00e0 c\u00e0i Windows Update \u0111\u1ec1u \u0111\u1eb7n.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>B\u1eadt NLA cho RDP:<\/strong> Microsoft khuy\u1ebfn ngh\u1ecb b\u1eadt Network Level Authentication \u0111\u1ec3 ng\u01b0\u1eddi d\u00f9ng ph\u1ea3i x\u00e1c th\u1ef1c tr\u01b0\u1edbc khi phi\u00ean Remote Desktop \u0111\u01b0\u1ee3c t\u1ea1o (<a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/remote\/remote-desktop-services\/remotepc\/remote-desktop-allow-access\" rel=\"nofollow noopener\" target=\"_blank\">Microsoft Learn<\/a>). C\u00e1ch m\u1edf RDP: <a href=\"https:\/\/tino.vn\/blog\/mo-remote-desktop-tren-windows-server\/\">m\u1edf Remote Desktop tr\u00ean Windows Server<\/a>.<\/li>\n\n\n<li><strong>Gi\u1edbi h\u1ea1n IP v\u00e0o RDP:<\/strong> trong Windows Defender Firewall, m\u1edf quy t\u1eafc Remote Desktop, tab Scope, ch\u1ec9 cho ph\u00e9p IP c\u1ee7a b\u1ea1n ho\u1eb7c c\u1ee7a VPN c\u00f4ng ty. \u0110\u1ed5i c\u1ed5ng 3389 ch\u1ec9 gi\u1ea3m qu\u00e9t t\u1ef1 \u0111\u1ed9ng, kh\u00f4ng thay \u0111\u01b0\u1ee3c b\u01b0\u1edbc n\u00e0y.<\/li>\n\n\n<li><strong>Kh\u00f3a t\u00e0i kho\u1ea3n khi nh\u1eadp sai:<\/strong> \u0111\u1eb7t Account lockout threshold trong Local Security Policy \u0111\u1ec3 ch\u1eb7n d\u00f2 m\u1eadt kh\u1ea9u (<a href=\"https:\/\/learn.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-10\/security\/threat-protection\/security-policy-settings\/account-lockout-threshold\" rel=\"nofollow noopener\" target=\"_blank\">Microsoft Learn<\/a>).<\/li>\n\n\n<li><strong>T\u00e0i kho\u1ea3n:<\/strong> m\u1eadt kh\u1ea9u d\u00e0i, kh\u00f4ng d\u00f9ng l\u1ea1i \u1edf n\u01a1i kh\u00e1c; t\u1ea1o t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb ri\u00eang cho t\u1eebng ng\u01b0\u1eddi thay v\u00ec d\u00f9ng chung Administrator; xo\u00e1 t\u00e0i kho\u1ea3n kh\u00f4ng c\u00f2n d\u00f9ng.<\/li>\n\n\n<li><strong>Windows Update:<\/strong> b\u1eadt c\u1eadp nh\u1eadt t\u1ef1 \u0111\u1ed9ng ho\u1eb7c \u0111\u1eb7t l\u1ecbch c\u1eadp nh\u1eadt h\u1eb1ng th\u00e1ng, kh\u1edfi \u0111\u1ed9ng l\u1ea1i v\u00e0o gi\u1edd \u00edt truy c\u1eadp.<\/li>\n\n\n<li><strong>\u0110\u00f3ng d\u1ecbch v\u1ee5 th\u1eeba:<\/strong> g\u1ee1 role v\u00e0 feature kh\u00f4ng d\u00f9ng (FTP, IIS, SMB m\u1edf ra Internet\u2026).<\/li>\n<\/ul>\n\n\n\n<h2 id=\"VPS_ch\u1ea1y_n8n,_OpenClaw,_Hermes_Agent_c\u1ea7n_b\u1ea3o_m\u1eadt_th\u00eam_g\u00ec?\">VPS ch\u1ea1y n8n, OpenClaw, Hermes Agent c\u1ea7n b\u1ea3o m\u1eadt th\u00eam g\u00ec?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">VPS ch\u1ea1y AI Agent ho\u1eb7c c\u00f4ng c\u1ee5 t\u1ef1 \u0111\u1ed9ng h\u00f3a gi\u1eef nhi\u1ec1u kho\u00e1 API v\u00e0 th\u00f4ng tin \u0111\u0103ng nh\u1eadp d\u1ecbch v\u1ee5 kh\u00e1c, n\u00ean b\u1ecb chi\u1ebfm quy\u1ec1n th\u00ec thi\u1ec7t h\u1ea1i lan ra ngo\u00e0i VPS. Ngo\u00e0i checklist \u1edf tr\u00ean, h\u00e3y \u0111\u1eb7t giao di\u1ec7n qu\u1ea3n tr\u1ecb sau m\u1ea1ng ri\u00eang, c\u00f4 l\u1eadp agent v\u00e0 ch\u1ec9 c\u1ea5p quy\u1ec1n t\u1ed1i thi\u1ec3u cho t\u1eebng kho\u00e1 API.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Kh\u00f4ng m\u1edf giao di\u1ec7n qu\u1ea3n tr\u1ecb ra Internet; truy c\u1eadp qua m\u1ea1ng ri\u00eang nh\u01b0 h\u01b0\u1edbng d\u1eabn <a href=\"https:\/\/tino.vn\/blog\/bao-mat-vps-chay-ai-agent-bang-tailscale\/\">b\u1ea3o m\u1eadt VPS ch\u1ea1y AI Agent b\u1eb1ng Tailscale<\/a>.<\/li>\n\n\n<li>Ch\u1ea1y agent trong m\u00f4i tr\u01b0\u1eddng c\u00f4 l\u1eadp: xem <a href=\"https:\/\/tino.vn\/blog\/cach-ly-sandbox-cho-ai-agent-tren-vps\/\">c\u00e1ch ly sandbox cho AI Agent tr\u00ean VPS<\/a>.<\/li>\n\n\n<li>V\u1edbi n8n: \u0111\u1ecdc <a href=\"https:\/\/tino.vn\/blog\/bao-mat-trong-n8n\/\">b\u1ea3o m\u1eadt trong n8n<\/a>; nh\u1edb l\u01b0u \u00fd Docker kh\u00f4ng \u0111i qua UFW \u1edf ph\u1ea7n t\u01b0\u1eddng l\u1eeda.<\/li>\n<\/ul>\n\n\n\n<h2 id=\"D\u1ea5u_hi\u1ec7u_VPS_b\u1ecb_x\u00e2m_nh\u1eadp_v\u00e0_vi\u1ec7c_c\u1ea7n_l\u00e0m\">D\u1ea5u hi\u1ec7u VPS b\u1ecb x\u00e2m nh\u1eadp v\u00e0 vi\u1ec7c c\u1ea7n l\u00e0m<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">D\u1ea5u hi\u1ec7u th\u01b0\u1eddng g\u1eb7p l\u00e0 CPU t\u0103ng cao do ti\u1ebfn tr\u00ecnh l\u1ea1 (th\u01b0\u1eddng l\u00e0 \u0111\u00e0o ti\u1ec1n \u1ea3o) v\u00e0 \u0111\u0103ng nh\u1eadp th\u00e0nh c\u00f4ng t\u1eeb IP kh\u00f4ng quen. Ngo\u00e0i ra c\u00f2n c\u00f3 c\u1ed5ng ho\u1eb7c d\u1ecbch v\u1ee5 l\u1ea1 \u0111ang m\u1edf, cron, systemd timer ho\u1eb7c SSH key m\u1edbi kh\u00f4ng r\u00f5 ngu\u1ed3n g\u1ed1c, v\u00e0 l\u01b0u l\u01b0\u1ee3ng g\u1eedi ra t\u0103ng v\u1ecdt. M\u1ed9t d\u1ea5u hi\u1ec7u ri\u00eang l\u1ebb ch\u01b0a ch\u1eafc l\u00e0 b\u1ecb t\u1ea5n c\u00f4ng, nh\u01b0ng nhi\u1ec1u d\u1ea5u hi\u1ec7u c\u00f9ng l\u00fac th\u00ec c\u1ea7n x\u1eed l\u00fd ngay.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1400\" height=\"750\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/bao-mat-vps-dau-hieu-bi-xam-nhap-v2.webp\" alt=\"D\u1ea5u hi\u1ec7u VPS b\u1ecb x\u00e2m nh\u1eadp k\u00e8m l\u1ec7nh ki\u1ec3m tra: CPU cao b\u1ea5t th\u01b0\u1eddng, \u0111\u0103ng nh\u1eadp l\u1ea1, c\u1ed5ng l\u1ea1, cron, systemd timer v\u00e0 SSH key l\u1ea1 trong authorized_keys c\u1ee7a root v\u00e0 m\u1ecdi user, l\u01b0u l\u01b0\u1ee3ng ra t\u0103ng v\u1ecdt, l\u1ed7i \u0111\u0103ng nh\u1eadp Windows 4625; 5 vi\u1ec7c c\u1ea7n l\u00e0m: c\u00f4 l\u1eadp, l\u01b0u b\u1eb1ng ch\u1ee9ng, \u0111\u1ed5i th\u00f4ng tin x\u00e1c th\u1ef1c, c\u00e0i l\u1ea1i t\u1eeb b\u1ea3n s\u1ea1ch, v\u00e1 l\u1ed7 h\u1ed5ng\" class=\"wp-image-131135\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/bao-mat-vps-dau-hieu-bi-xam-nhap-v2.webp 1400w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/bao-mat-vps-dau-hieu-bi-xam-nhap-v2-300x161.webp 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/bao-mat-vps-dau-hieu-bi-xam-nhap-v2-1024x549.webp 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/bao-mat-vps-dau-hieu-bi-xam-nhap-v2-768x411.webp 768w\" sizes=\"(max-width: 1400px) 100vw, 1400px\" \/><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code># Linux: ki\u1ec3m tra nhanh\nps aux --sort=-%cpu | head          # ti\u1ebfn tr\u00ecnh t\u1ed1n CPU\nlast -a | head                      # \u0111\u0103ng nh\u1eadp g\u1ea7n \u0111\u00e2y\nsudo ss -tulpn                      # c\u1ed5ng \u0111ang m\u1edf\nsudo crontab -l; crontab -l         # l\u1ecbch ch\u1ea1y c\u1ee7a root v\u00e0 user\nls -la \/etc\/cron.*\nsudo sh -c 'cat \/root\/.ssh\/authorized_keys \/home\/*\/.ssh\/authorized_keys'   # key c\u1ee7a root v\u00e0 m\u1ecdi user\nsystemctl list-timers --all; ls -la \/etc\/systemd\/system\/          # timer, service l\u1ea1<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Tr\u00ean Windows, m\u1edf Event Viewer, m\u1ee5c Windows Logs \u203a Security v\u00e0 l\u1ecdc s\u1ef1 ki\u1ec7n 4625 (\u0111\u0103ng nh\u1eadp th\u1ea5t b\u1ea1i, <a href=\"https:\/\/learn.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-10\/security\/threat-protection\/auditing\/event-4625\" rel=\"nofollow noopener\" target=\"_blank\">Microsoft Learn<\/a>). H\u00e0ng lo\u1ea1t s\u1ef1 ki\u1ec7n t\u1eeb nhi\u1ec1u IP l\u1ea1 l\u00e0 d\u1ea5u hi\u1ec7u b\u1ecb d\u00f2 m\u1eadt kh\u1ea9u qua RDP.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Khi nghi b\u1ecb x\u00e2m nh\u1eadp,<\/strong> l\u00e0m theo th\u1ee9 t\u1ef1 sau. C\u00f4 l\u1eadp VPS (ch\u1eb7n truy c\u1eadp c\u00f4ng khai, d\u00f9ng console c\u1ee7a nh\u00e0 cung c\u1ea5p) v\u00e0 l\u01b0u b\u1eb1ng ch\u1ee9ng (snapshot, log). \u0110\u1ed5i to\u00e0n b\u1ed9 m\u1eadt kh\u1ea9u v\u00e0 kho\u00e1 API. C\u00e0i l\u1ea1i h\u1ec7 \u0111i\u1ec1u h\u00e0nh t\u1eeb b\u1ea3n s\u1ea1ch, kh\u00f4i ph\u1ee5c d\u1eef li\u1ec7u t\u1eeb b\u1ea3n sao l\u01b0u tr\u01b0\u1edbc th\u1eddi \u0111i\u1ec3m b\u1ecb x\u00e2m nh\u1eadp, v\u00e1 l\u1ed7 h\u1ed5ng r\u1ed3i m\u1edbi m\u1edf l\u1ea1i. Doanh nghi\u1ec7p c\u1ea7n quy tr\u00ecnh \u0111\u1ea7y \u0111\u1ee7 h\u01a1n c\u00f3 th\u1ec3 tham kh\u1ea3o khuy\u1ebfn ngh\u1ecb \u1ee9ng ph\u00f3 s\u1ef1 c\u1ed1 <a href=\"https:\/\/csrc.nist.gov\/pubs\/sp\/800\/61\/r3\/final\" rel=\"nofollow noopener\" target=\"_blank\">NIST SP 800-61r3<\/a>. Ch\u1ec9 xo\u00e1 file l\u1ea1 r\u1ed3i d\u00f9ng ti\u1ebfp th\u01b0\u1eddng kh\u00f4ng \u0111\u1ee7, v\u00ec k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 \u0111\u00e3 \u0111\u1ec3 l\u1ea1i \u0111\u01b0\u1eddng v\u00e0o kh\u00e1c.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu VPS b\u1ecb t\u1ea5n c\u00f4ng t\u1eeb ch\u1ed1i d\u1ecbch v\u1ee5 thay v\u00ec b\u1ecb chi\u1ebfm quy\u1ec1n, xem <a href=\"https:\/\/tino.vn\/blog\/cach-chong-ddos-cho-vps\/\">c\u00e1ch ch\u1ed1ng DDoS cho VPS<\/a>.<\/p>\n\n\n\n<h2 id=\"Khi_n\u00e0o_kh\u00f4ng_n\u00ean_t\u1ef1_qu\u1ea3n_tr\u1ecb_b\u1ea3o_m\u1eadt_VPS?\">Khi n\u00e0o kh\u00f4ng n\u00ean t\u1ef1 qu\u1ea3n tr\u1ecb b\u1ea3o m\u1eadt VPS?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">T\u1ef1 b\u1ea3o m\u1eadt VPS ch\u1ec9 hi\u1ec7u qu\u1ea3 khi c\u00f3 ng\u01b0\u1eddi l\u00e0m \u0111\u1ec1u \u0111\u1eb7n: c\u1eadp nh\u1eadt, \u0111\u1ecdc log, ki\u1ec3m tra sao l\u01b0u. N\u1ebfu kh\u00f4ng ai trong nh\u00f3m l\u00e0m \u0111\u01b0\u1ee3c vi\u1ec7c \u0111\u00f3, m\u1ed9t VPS t\u1ef1 qu\u1ea3n tr\u1ecb d\u1ec5 th\u00e0nh m\u00e1y ch\u1ee7 b\u1ecb b\u1ecf qu\u00ean v\u1edbi ph\u1ea7n m\u1ec1m c\u0169.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Website nh\u1ecf, kh\u00f4ng c\u1ea7n ph\u1ea7n m\u1ec1m ri\u00eang:<\/strong> shared hosting giao ph\u1ea7n b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 cho nh\u00e0 cung c\u1ea5p.<\/li>\n\n\n<li><strong>Ch\u1ec9 c\u1ea7n ch\u1ea1y m\u1ed9t \u1ee9ng d\u1ee5ng nh\u01b0 n8n:<\/strong> c\u00e2n nh\u1eafc VPS c\u00e0i s\u1eb5n \u1ee9ng d\u1ee5ng \u0111\u1ec3 gi\u1ea3m ph\u1ea7n c\u00e0i \u0111\u1eb7t. Ph\u1ea7n c\u1eadp nh\u1eadt v\u00e0 b\u1ea3o m\u1eadt c\u00f2n l\u1ea1i v\u1eabn c\u1ea7n xem r\u00f5 trong m\u00f4 t\u1ea3 g\u00f3i.<\/li>\n\n\n<li><strong>Ch\u01b0a quen d\u00f2ng l\u1ec7nh:<\/strong> \u0111\u1eebng \u0111\u1ed5i c\u1ed5ng SSH hay b\u1eadt t\u01b0\u1eddng l\u1eeda khi ch\u01b0a bi\u1ebft c\u00e1ch v\u00e0o l\u1ea1i VPS qua console c\u1ee7a nh\u00e0 cung c\u1ea5p.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1c g\u00f3i <a href=\"https:\/\/tino.vn\/vps-gia-re\">VPS NVMe t\u1ea1i Tino<\/a> c\u00f3 Web Console (noVNC) \u0111\u1ec3 v\u00e0o VPS qua tr\u00ecnh duy\u1ec7t khi b\u1ecb ch\u1eb7n SSH. G\u00f3i c\u0169ng c\u00f3 sao l\u01b0u t\u1ef1 \u0111\u1ed9ng; t\u1ea7n su\u1ea5t v\u00e0 s\u1ed1 b\u1ea3n gi\u1eef l\u1ea1i xem trong m\u00f4 t\u1ea3 g\u00f3i ho\u1eb7c h\u1ecfi b\u1ed9 ph\u1eadn h\u1ed7 tr\u1ee3. Tino h\u1ed7 tr\u1ee3 k\u1ef9 thu\u1eadt 24\/7 (theo trang s\u1ea3n ph\u1ea9m ng\u00e0y 19\/10\/2026). N\u1ebfu ch\u01b0a r\u00f5 VPS c\u00f3 ph\u00f9 h\u1ee3p v\u1edbi b\u1ea1n kh\u00f4ng, xem <a href=\"https:\/\/tino.vn\/blog\/vps-la-gi\/\">VPS l\u00e0 g\u00ec v\u00e0 khi n\u00e0o n\u00ean d\u00f9ng<\/a>.<\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/tino.vn\/vps-gia-re\">Xem c\u00e1c g\u00f3i VPS t\u1ea1i Tino<\/a><\/div>\n<\/div>\n\n\n\n<h2 id=\"C\u00e2u_h\u1ecfi_th\u01b0\u1eddng_g\u1eb7p_v\u1ec1_b\u1ea3o_m\u1eadt_VPS\">C\u00e2u h\u1ecfi th\u01b0\u1eddng g\u1eb7p v\u1ec1 b\u1ea3o m\u1eadt VPS<\/h2>\n\n\n\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"B\u1eadt_t\u01b0\u1eddng_l\u1eeda_xong_b\u1ecb_m\u1ea5t_k\u1ebft_n\u1ed1i_SSH_th\u00ec_l\u00e0m_sao?\">B\u1eadt t\u01b0\u1eddng l\u1eeda xong b\u1ecb m\u1ea5t k\u1ebft n\u1ed1i SSH th\u00ec l\u00e0m sao?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">V\u00e0o VPS qua console tr\u00ean trang qu\u1ea3n tr\u1ecb c\u1ee7a nh\u00e0 cung c\u1ea5p (kh\u00f4ng \u0111i qua SSH). Ch\u1ea1y <code>sudo ufw allow OpenSSH<\/code> ho\u1eb7c m\u1edf \u0111\u00fang c\u1ed5ng SSH b\u1ea1n \u0111ang d\u00f9ng, r\u1ed3i ki\u1ec3m tra l\u1ea1i b\u1eb1ng <code>sudo ufw status<\/code>. N\u1ebfu kh\u00f4ng c\u00f3 console, li\u00ean h\u1ec7 b\u1ed9 ph\u1eadn h\u1ed7 tr\u1ee3 c\u1ee7a nh\u00e0 cung c\u1ea5p.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"VPS_Linux_c\u00f3_c\u1ea7n_c\u00e0i_ph\u1ea7n_m\u1ec1m_di\u1ec7t_virus_kh\u00f4ng?\">VPS Linux c\u00f3 c\u1ea7n c\u00e0i ph\u1ea7n m\u1ec1m di\u1ec7t virus kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">Kh\u00f4ng b\u1eaft bu\u1ed9c v\u1edbi VPS ch\u1ec9 ch\u1ea1y website, nh\u01b0ng n\u00ean c\u00f3 khi VPS nh\u1eadn file t\u1ea3i l\u00ean t\u1eeb ng\u01b0\u1eddi d\u00f9ng ho\u1eb7c chia s\u1ebb file cho m\u00e1y Windows. C\u00e1c l\u1edbp quan tr\u1ecdng h\u01a1n v\u1eabn l\u00e0 c\u1eadp nh\u1eadt, t\u1eaft \u0111\u0103ng nh\u1eadp m\u1eadt kh\u1ea9u, \u0111\u00f3ng c\u1ed5ng th\u1eeba v\u00e0 sao l\u01b0u.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"C\u00f3_n\u00ean_ch\u1eb7n_ping_(ICMP)_\u0111\u1ec3_b\u1ea3o_m\u1eadt_VPS_kh\u00f4ng?\">C\u00f3 n\u00ean ch\u1eb7n ping (ICMP) \u0111\u1ec3 b\u1ea3o m\u1eadt VPS kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">L\u1ee3i \u00edch nh\u1ecf: ch\u1eb7n ping kh\u00f4ng ng\u0103n \u0111\u01b0\u1ee3c qu\u00e9t c\u1ed5ng hay d\u00f2 m\u1eadt kh\u1ea9u, trong khi l\u1ea1i l\u00e0m kh\u00f3 vi\u1ec7c ki\u1ec3m tra k\u1ebft n\u1ed1i. \u01afu ti\u00ean \u0111\u00f3ng c\u1ed5ng th\u1eeba v\u00e0 gi\u1edbi h\u1ea1n IP v\u00e0o SSH\/RDP tr\u01b0\u1edbc.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"Nh\u00e0_cung_c\u1ea5p_VPS_c\u00f3_ch\u1ecbu_tr\u00e1ch_nhi\u1ec7m_b\u1ea3o_m\u1eadt_cho_t\u00f4i_kh\u00f4ng?\">Nh\u00e0 cung c\u1ea5p VPS c\u00f3 ch\u1ecbu tr\u00e1ch nhi\u1ec7m b\u1ea3o m\u1eadt cho t\u00f4i kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">Th\u01b0\u1eddng ch\u1ec9 ph\u1ea7n h\u1ea1 t\u1ea7ng: ph\u1ea7n c\u1ee9ng, m\u1ea1ng, n\u1ec1n t\u1ea3ng \u1ea3o ho\u00e1 v\u00e0 c\u00e1c bi\u1ec7n ph\u00e1p ch\u1ed1ng t\u1ea5n c\u00f4ng \u1edf t\u1ea7ng m\u1ea1ng (n\u1ebfu c\u00f3 trong g\u00f3i). H\u1ec7 \u0111i\u1ec1u h\u00e0nh, m\u1eadt kh\u1ea9u, ph\u1ea7n m\u1ec1m v\u00e0 d\u1eef li\u1ec7u tr\u00ean VPS kh\u00f4ng qu\u1ea3n l\u00fd l\u00e0 tr\u00e1ch nhi\u1ec7m c\u1ee7a b\u1ea1n. H\u00e3y \u0111\u1ecdc m\u00f4 t\u1ea3 g\u00f3i v\u00e0 \u0111i\u1ec1u kho\u1ea3n d\u1ecbch v\u1ee5 \u0111\u1ec3 bi\u1ebft ch\u00ednh x\u00e1c ph\u1ea1m vi.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"B\u1ea3o_m\u1eadt_VPS_m\u1ea5t_bao_l\u00e2u?\">B\u1ea3o m\u1eadt VPS m\u1ea5t bao l\u00e2u?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">C\u00e1c vi\u1ec7c ng\u00e0y \u0111\u1ea7u (c\u1eadp nh\u1eadt, SSH key, t\u1eaft m\u1eadt kh\u1ea9u, t\u01b0\u1eddng l\u1eeda, Fail2ban) th\u01b0\u1eddng l\u00e0m xong trong m\u1ed9t bu\u1ed5i n\u1ebfu \u0111\u00e3 quen d\u00f2ng l\u1ec7nh. Ph\u1ea7n t\u1ed1n th\u1eddi gian h\u01a1n l\u00e0 duy tr\u00ec: c\u1eadp nh\u1eadt \u0111\u1ecbnh k\u1ef3, \u0111\u1ecdc log, ki\u1ec3m tra b\u1ea3n sao l\u01b0u.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\n<script type=\"application\/ld+json\">\n\t{\n\t\t\"@context\": \"https:\/\/schema.org\",\n\t\t\"@type\": \"FAQPage\",\n\t\t\"mainEntity\": [\n\t\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"B\u1eadt t\u01b0\u1eddng l\u1eeda xong b\u1ecb m\u1ea5t k\u1ebft n\u1ed1i SSH th\u00ec l\u00e0m sao?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>V\u00e0o VPS qua console tr\u00ean trang qu\u1ea3n tr\u1ecb c\u1ee7a nh\u00e0 cung c\u1ea5p (kh\u00f4ng \u0111i qua SSH). Ch\u1ea1y sudo ufw allow OpenSSH ho\u1eb7c m\u1edf \u0111\u00fang c\u1ed5ng SSH b\u1ea1n \u0111ang d\u00f9ng, r\u1ed3i ki\u1ec3m tra l\u1ea1i b\u1eb1ng sudo ufw status. N\u1ebfu kh\u00f4ng c\u00f3 console, li\u00ean h\u1ec7 b\u1ed9 ph\u1eadn h\u1ed7 tr\u1ee3 c\u1ee7a nh\u00e0 cung c\u1ea5p.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"VPS Linux c\u00f3 c\u1ea7n c\u00e0i ph\u1ea7n m\u1ec1m di\u1ec7t virus kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>Kh\u00f4ng b\u1eaft bu\u1ed9c v\u1edbi VPS ch\u1ec9 ch\u1ea1y website, nh\u01b0ng n\u00ean c\u00f3 khi VPS nh\u1eadn file t\u1ea3i l\u00ean t\u1eeb ng\u01b0\u1eddi d\u00f9ng ho\u1eb7c chia s\u1ebb file cho m\u00e1y Windows. C\u00e1c l\u1edbp quan tr\u1ecdng h\u01a1n v\u1eabn l\u00e0 c\u1eadp nh\u1eadt, t\u1eaft \u0111\u0103ng nh\u1eadp m\u1eadt kh\u1ea9u, \u0111\u00f3ng c\u1ed5ng th\u1eeba v\u00e0 sao l\u01b0u.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"C\u00f3 n\u00ean ch\u1eb7n ping (ICMP) \u0111\u1ec3 b\u1ea3o m\u1eadt VPS kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>L\u1ee3i \u00edch nh\u1ecf: ch\u1eb7n ping kh\u00f4ng ng\u0103n \u0111\u01b0\u1ee3c qu\u00e9t c\u1ed5ng hay d\u00f2 m\u1eadt kh\u1ea9u, trong khi l\u1ea1i l\u00e0m kh\u00f3 vi\u1ec7c ki\u1ec3m tra k\u1ebft n\u1ed1i. \u01afu ti\u00ean \u0111\u00f3ng c\u1ed5ng th\u1eeba v\u00e0 gi\u1edbi h\u1ea1n IP v\u00e0o SSH\/RDP tr\u01b0\u1edbc.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"Nh\u00e0 cung c\u1ea5p VPS c\u00f3 ch\u1ecbu tr\u00e1ch nhi\u1ec7m b\u1ea3o m\u1eadt cho t\u00f4i kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>Th\u01b0\u1eddng ch\u1ec9 ph\u1ea7n h\u1ea1 t\u1ea7ng: ph\u1ea7n c\u1ee9ng, m\u1ea1ng, n\u1ec1n t\u1ea3ng \u1ea3o ho\u00e1 v\u00e0 c\u00e1c bi\u1ec7n ph\u00e1p ch\u1ed1ng t\u1ea5n c\u00f4ng \u1edf t\u1ea7ng m\u1ea1ng (n\u1ebfu c\u00f3 trong g\u00f3i). H\u1ec7 \u0111i\u1ec1u h\u00e0nh, m\u1eadt kh\u1ea9u, ph\u1ea7n m\u1ec1m v\u00e0 d\u1eef li\u1ec7u tr\u00ean VPS kh\u00f4ng qu\u1ea3n l\u00fd l\u00e0 tr\u00e1ch nhi\u1ec7m c\u1ee7a b\u1ea1n. H\u00e3y \u0111\u1ecdc m\u00f4 t\u1ea3 g\u00f3i v\u00e0 \u0111i\u1ec1u kho\u1ea3n d\u1ecbch v\u1ee5 \u0111\u1ec3 bi\u1ebft ch\u00ednh x\u00e1c ph\u1ea1m vi.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"B\u1ea3o m\u1eadt VPS m\u1ea5t bao l\u00e2u?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>C\u00e1c vi\u1ec7c ng\u00e0y \u0111\u1ea7u (c\u1eadp nh\u1eadt, SSH key, t\u1eaft m\u1eadt kh\u1ea9u, t\u01b0\u1eddng l\u1eeda, Fail2ban) th\u01b0\u1eddng l\u00e0m xong trong m\u1ed9t bu\u1ed5i n\u1ebfu \u0111\u00e3 quen d\u00f2ng l\u1ec7nh. Ph\u1ea7n t\u1ed1n th\u1eddi gian h\u01a1n l\u00e0 duy tr\u00ec: c\u1eadp nh\u1eadt \u0111\u1ecbnh k\u1ef3, \u0111\u1ecdc log, ki\u1ec3m tra b\u1ea3n sao l\u01b0u.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t\t\t\t]\n\t}\n<\/script>\n\n\n\n<h2 id=\"Ngu\u1ed3n_tham_kh\u1ea3o\">Ngu\u1ed3n tham kh\u1ea3o<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/ubuntu.com\/server\/docs\/how-to\/security\/openssh-server\/\" rel=\"nofollow noopener\" target=\"_blank\">Ubuntu Server: OpenSSH server<\/a> (truy c\u1eadp 19\/10\/2026)<\/li>\n\n\n<li><a href=\"https:\/\/ubuntu.com\/server\/docs\/how-to\/software\/automatic-updates\/\" rel=\"nofollow noopener\" target=\"_blank\">Ubuntu Server: Automatic updates<\/a> (truy c\u1eadp 19\/10\/2026)<\/li>\n\n\n<li><a href=\"https:\/\/ubuntu.com\/server\/docs\/how-to\/security\/firewalls\/\" rel=\"nofollow noopener\" target=\"_blank\">Ubuntu Server: Firewalls (ufw)<\/a> (truy c\u1eadp 19\/10\/2026)<\/li>\n\n\n<li><a href=\"https:\/\/man.openbsd.org\/sshd_config\" rel=\"nofollow noopener\" target=\"_blank\">OpenBSD manual: sshd_config(5)<\/a> (truy c\u1eadp 19\/10\/2026)<\/li>\n\n\n<li><a href=\"https:\/\/bugs.launchpad.net\/ubuntu\/+source\/openssh\/+bug\/2069041\" rel=\"nofollow noopener\" target=\"_blank\">Launchpad: Ubuntu bug #2069041 (\u0111\u1ed5i c\u1ed5ng SSH v\u1edbi ssh.socket)<\/a> (truy c\u1eadp 19\/10\/2026)<\/li>\n\n\n<li><a href=\"https:\/\/docs.docker.com\/engine\/network\/packet-filtering-firewalls\/\" rel=\"nofollow noopener\" target=\"_blank\">Docker Docs: Packet filtering and firewalls<\/a> (truy c\u1eadp 19\/10\/2026)<\/li>\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/remote\/remote-desktop-services\/remotepc\/remote-desktop-allow-access\" rel=\"nofollow noopener\" target=\"_blank\">Microsoft Learn: Enable Remote Desktop on your PC<\/a> (truy c\u1eadp 19\/10\/2026)<\/li>\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-10\/security\/threat-protection\/security-policy-settings\/account-lockout-threshold\" rel=\"nofollow noopener\" target=\"_blank\">Microsoft Learn: Account lockout threshold<\/a> (truy c\u1eadp 19\/10\/2026)<\/li>\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-10\/security\/threat-protection\/auditing\/event-4625\" rel=\"nofollow noopener\" target=\"_blank\">Microsoft Learn: Event 4625<\/a> (truy c\u1eadp 19\/10\/2026)<\/li>\n\n\n<li><a href=\"https:\/\/csrc.nist.gov\/pubs\/sp\/800\/123\/final\" rel=\"nofollow noopener\" target=\"_blank\">NIST SP 800-123: Guide to General Server Security<\/a> (truy c\u1eadp 19\/10\/2026)<\/li>\n\n\n<li><a href=\"https:\/\/csrc.nist.gov\/pubs\/sp\/800\/61\/r3\/final\" rel=\"nofollow noopener\" target=\"_blank\">NIST SP 800-61r3: Incident Response Recommendations<\/a> (truy c\u1eadp 19\/10\/2026)<\/li>\n\n\n<li><a href=\"https:\/\/www.cisecurity.org\/controls\" rel=\"nofollow noopener\" target=\"_blank\">CIS Critical Security Controls<\/a> (truy c\u1eadp 19\/10\/2026)<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>T\u00e1c gi\u1ea3: \u0110\u00f4ng T\u00f9ng \u00b7 Duy\u1ec7t k\u1ef9 thu\u1eadt: Nguy\u1ec5n V\u0103n Phong \u00b7 C\u1eadp nh\u1eadt: 20\/10\/2026 B\u1ea3o m\u1eadt VPS l\u00e0 gi\u1ea3m t\u1ed1i \u0111a \u0111\u01b0\u1eddng v\u00e0o m\u00e1y ch\u1ee7 v\u00e0 ph\u00e1t hi\u1ec7n s\u1edbm khi c\u00f3 b\u1ea5t th\u01b0\u1eddng. V\u1edbi ph\u1ea7n l\u1edbn VPS, vi\u1ec7c c\u1ea7n l\u00e0m g\u1ed3m: c\u1eadp nh\u1eadt h\u1ec7 \u0111i\u1ec1u h\u00e0nh, \u0111\u0103ng nh\u1eadp b\u1eb1ng SSH key thay cho m\u1eadt [&hellip;]<\/p>\n","protected":false},"author":23,"featured_media":131135,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7727],"tags":[],"class_list":["post-131115","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-vps"],"_links":{"self":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/131115","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/comments?post=131115"}],"version-history":[{"count":2,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/131115\/revisions"}],"predecessor-version":[{"id":131161,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/131115\/revisions\/131161"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/media\/131135"}],"wp:attachment":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/media?parent=131115"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/categories?post=131115"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/tags?post=131115"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}