{"id":9843,"date":"2025-06-18T13:26:52","date_gmt":"2025-06-18T06:26:52","guid":{"rendered":"https:\/\/www.jetorbit.com\/panduan\/?p=9843"},"modified":"2025-06-18T13:26:54","modified_gmt":"2025-06-18T06:26:54","slug":"cara-scan-dan-mengatasi-vps-yang-terdeteksi-malware","status":"publish","type":"post","link":"https:\/\/www.jetorbit.com\/panduan\/cara-scan-dan-mengatasi-vps-yang-terdeteksi-malware\/","title":{"rendered":"7 Cara Scan dan Mengatasi VPS yang Terdeteksi Malware"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_81 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Daftar Isi Artikel<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.jetorbit.com\/panduan\/cara-scan-dan-mengatasi-vps-yang-terdeteksi-malware\/#1_Gunakan_Antivirus_Server\" >1. Gunakan Antivirus Server<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.jetorbit.com\/panduan\/cara-scan-dan-mengatasi-vps-yang-terdeteksi-malware\/#2_Scan_VPS_dengan_Rkhunter_dan_Chkrootkit\" >2. Scan VPS dengan Rkhunter dan Chkrootkit<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.jetorbit.com\/panduan\/cara-scan-dan-mengatasi-vps-yang-terdeteksi-malware\/#3_Cek_Log_Server_Secara_Berkala\" >3. Cek Log Server Secara Berkala<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.jetorbit.com\/panduan\/cara-scan-dan-mengatasi-vps-yang-terdeteksi-malware\/#4_Hapus_File_Berbahaya\" >4. Hapus File Berbahaya<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.jetorbit.com\/panduan\/cara-scan-dan-mengatasi-vps-yang-terdeteksi-malware\/#5_Perbarui_Sistem_Operasi_dan_Aplikasi\" >5. Perbarui Sistem Operasi dan Aplikasi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.jetorbit.com\/panduan\/cara-scan-dan-mengatasi-vps-yang-terdeteksi-malware\/#6_Periksa_Pengguna_dan_Hak_Akses\" >6. Periksa Pengguna dan Hak Akses<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.jetorbit.com\/panduan\/cara-scan-dan-mengatasi-vps-yang-terdeteksi-malware\/#7_Aktifkan_Firewall_dan_Fail2Ban\" >7. Aktifkan Firewall dan Fail2Ban<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.jetorbit.com\/panduan\/cara-scan-dan-mengatasi-vps-yang-terdeteksi-malware\/#Kesimpulan\" >Kesimpulan<\/a><\/li><\/ul><\/nav><\/div>\n\n<p>Memiliki VPS yang aman dari malware adalah hal penting bagi siapa saja yang mengelola server sendiri. Serangan malware bisa menyebabkan berbagai masalah, mulai dari pencurian data hingga <a href=\"https:\/\/www.jetorbit.com\/panduan\/cara-install-netdata\/\" data-type=\"post\" data-id=\"8931\">performa server <\/a>yang melambat. Jika VPS sudah terinfeksi, tindakan cepat sangat dibutuhkan agar kerusakan tidak semakin parah.<\/p>\n\n\n\n<p>Berikut adalah Panduan 7 Cara Scan dan Mengatasi VPS yang Terdeteksi Malware.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"1_Gunakan_Antivirus_Server\"><\/span>1. Gunakan Antivirus Server<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1000\" height=\"667\" src=\"https:\/\/www.jetorbit.com\/panduan\/wp-content\/uploads\/2025\/03\/7-Cara-Scan-dan-Mengatasi-VPS-yang-Terdeteksi-Malware.jpg\" alt=\"\" class=\"wp-image-9844\" srcset=\"https:\/\/www.jetorbit.com\/panduan\/wp-content\/uploads\/2025\/03\/7-Cara-Scan-dan-Mengatasi-VPS-yang-Terdeteksi-Malware.jpg 1000w, https:\/\/www.jetorbit.com\/panduan\/wp-content\/uploads\/2025\/03\/7-Cara-Scan-dan-Mengatasi-VPS-yang-Terdeteksi-Malware-300x200.jpg 300w, https:\/\/www.jetorbit.com\/panduan\/wp-content\/uploads\/2025\/03\/7-Cara-Scan-dan-Mengatasi-VPS-yang-Terdeteksi-Malware-768x512.jpg 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/figure>\n\n\n\n<p>Salah satu langkah pertama yang bisa dilakukan adalah memasang antivirus di VPS. Beberapa antivirus yang bisa digunakan di server berbasis Linux atau Windows antara lain:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>ClamAV<\/strong> (untuk Linux)<\/li>\n\n\n\n<li><strong>Maldet<\/strong> (Malware Detect, khusus Linux)<\/li>\n\n\n\n<li><strong>Sophos<\/strong> (untuk Windows dan Linux)<\/li>\n\n\n\n<li><strong>Bitdefender GravityZone<\/strong><\/li>\n<\/ul>\n\n\n\n<p>Antivirus ini bisa membantu mendeteksi serta menghapus malware yang mungkin ada di VPS.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"2_Scan_VPS_dengan_Rkhunter_dan_Chkrootkit\"><\/span>2. Scan VPS dengan Rkhunter dan Chkrootkit<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Jika menggunakan sistem operasi Linux, <strong>Rootkit Hunter (rkhunter)<\/strong> dan <strong>Chkrootkit<\/strong> adalah dua tools yang sangat berguna untuk mendeteksi rootkit serta malware lainnya. Cara menggunakannya cukup mudah:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Instal Rkhunter<\/strong> dengan menjalankan perintah:<em> <code>sudo apt install rkhunter -y<\/code><\/em><\/li>\n\n\n\n<li>Lakukan scanning dengan perintah: <code><em>sudo rkhunter --check<\/em><\/code><\/li>\n\n\n\n<li><strong>Instal Chkrootkit<\/strong> dengan menjalankan perintah: <code><em>sudo apt install chkrootkit -y<\/em><\/code><\/li>\n\n\n\n<li>Lakukan scanning: <code><em>sudo chkrootkit<\/em><\/code><\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"3_Cek_Log_Server_Secara_Berkala\"><\/span>3. Cek Log Server Secara Berkala<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Log server sering kali memberikan petunjuk jika ada aktivitas mencurigakan di VPS. Beberapa file log yang bisa diperiksa antara lain:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\/var\/log\/auth.log<\/strong> (untuk melihat upaya login mencurigakan)<\/li>\n\n\n\n<li><strong>\/var\/log\/syslog<\/strong> (untuk melihat aktivitas sistem)<\/li>\n\n\n\n<li><strong>\/var\/log\/httpd\/access.log<\/strong> atau <strong>\/var\/log\/nginx\/access.log<\/strong> (untuk melihat akses mencurigakan ke website yang di-host di VPS)<\/li>\n<\/ul>\n\n\n\n<p>Jika ada aktivitas yang tidak dikenal, segera ambil tindakan dengan memblokir IP mencurigakan atau mengubah kredensial keamanan.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"4_Hapus_File_Berbahaya\"><\/span>4. Hapus File Berbahaya<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Setelah scanning dilakukan, jika ada file mencurigakan yang terdeteksi, segera hapus file tersebut. Pastikan tidak ada file sistem yang ikut terhapus agar VPS tetap berjalan dengan baik. Gunakan perintah berikut untuk menghapus file berbahaya:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"5_Perbarui_Sistem_Operasi_dan_Aplikasi\"><\/span>5. Perbarui Sistem Operasi dan Aplikasi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Salah satu alasan utama VPS terkena malware adalah karena adanya celah keamanan dalam sistem operasi atau aplikasi yang digunakan. Pastikan untuk selalu memperbarui sistem dan software dengan perintah berikut (untuk sistem berbasis Debian\/Ubuntu):<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#1E1E1E\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#D4D4D4;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><textarea class=\"code-block-pro-copy-button-textarea\" aria-hidden=\"true\" readonly>sudo apt update &amp;&amp; sudo apt upgrade -y<\/textarea><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki dark-plus\" style=\"background-color: #1E1E1E\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #9CDCFE\">sudo<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">apt<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">update<\/span><span style=\"color: #D4D4D4\"> &amp;&amp; <\/span><span style=\"color: #9CDCFE\">sudo<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">apt<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">upgrade<\/span><span style=\"color: #D4D4D4\"> -<\/span><span style=\"color: #9CDCFE\">y<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>Jika menggunakan CentOS atau RHEL:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#1E1E1E\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#D4D4D4;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><textarea class=\"code-block-pro-copy-button-textarea\" aria-hidden=\"true\" readonly>sudo yum update -y<\/textarea><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki dark-plus\" style=\"background-color: #1E1E1E\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #9CDCFE\">sudo<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">yum<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">update<\/span><span style=\"color: #D4D4D4\"> -<\/span><span style=\"color: #9CDCFE\">y<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"737\" height=\"263\" src=\"https:\/\/www.jetorbit.com\/panduan\/wp-content\/uploads\/2025\/03\/Mengatasi-VPS-terkena-Malware.png\" alt=\"7 Cara Scan dan Mengatasi VPS yang Terdeteksi Malware\" class=\"wp-image-9846\" srcset=\"https:\/\/www.jetorbit.com\/panduan\/wp-content\/uploads\/2025\/03\/Mengatasi-VPS-terkena-Malware.png 737w, https:\/\/www.jetorbit.com\/panduan\/wp-content\/uploads\/2025\/03\/Mengatasi-VPS-terkena-Malware-300x107.png 300w\" sizes=\"(max-width: 737px) 100vw, 737px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"6_Periksa_Pengguna_dan_Hak_Akses\"><\/span>6. Periksa Pengguna dan Hak Akses<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Kadang-kadang, malware bisa masuk melalui akun pengguna yang tidak sah. Periksa daftar pengguna yang memiliki akses ke VPS dengan perintah:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#1E1E1E\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#D4D4D4;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><textarea class=\"code-block-pro-copy-button-textarea\" aria-hidden=\"true\" readonly>cat \/etc\/passwd<\/textarea><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki dark-plus\" style=\"background-color: #1E1E1E\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #9CDCFE\">cat<\/span><span style=\"color: #D4D4D4\"> \/<\/span><span style=\"color: #9CDCFE\">etc<\/span><span style=\"color: #D4D4D4\">\/<\/span><span style=\"color: #9CDCFE\">passwd<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"918\" height=\"611\" src=\"https:\/\/www.jetorbit.com\/panduan\/wp-content\/uploads\/2025\/03\/Mengatasi-VPS-terkena-Malware-2.png\" alt=\"7 Cara Scan dan Mengatasi VPS yang Terdeteksi Malware\" class=\"wp-image-9847\" srcset=\"https:\/\/www.jetorbit.com\/panduan\/wp-content\/uploads\/2025\/03\/Mengatasi-VPS-terkena-Malware-2.png 918w, https:\/\/www.jetorbit.com\/panduan\/wp-content\/uploads\/2025\/03\/Mengatasi-VPS-terkena-Malware-2-300x200.png 300w, https:\/\/www.jetorbit.com\/panduan\/wp-content\/uploads\/2025\/03\/Mengatasi-VPS-terkena-Malware-2-768x511.png 768w\" sizes=\"(max-width: 918px) 100vw, 918px\" \/><\/figure>\n\n\n\n<p>Pastikan tidak ada akun yang mencurigakan. Jika menemukan akun yang tidak dikenal, segera hapus dengan perintah berikut:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#1E1E1E\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#D4D4D4;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><textarea class=\"code-block-pro-copy-button-textarea\" aria-hidden=\"true\" readonly>sudo userdel -r username<\/textarea><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki dark-plus\" style=\"background-color: #1E1E1E\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #9CDCFE\">sudo<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">userdel<\/span><span style=\"color: #D4D4D4\"> -<\/span><span style=\"color: #9CDCFE\">r<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">username<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"7_Aktifkan_Firewall_dan_Fail2Ban\"><\/span>7. Aktifkan Firewall dan Fail2Ban<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Firewall membantu membatasi akses tidak sah ke VPS. Gunakan <strong>UFW (Uncomplicated Firewall)<\/strong> di Ubuntu\/Debian dengan perintah berikut:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#1E1E1E\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#D4D4D4;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><textarea class=\"code-block-pro-copy-button-textarea\" aria-hidden=\"true\" readonly>sudo ufw enable<\/textarea><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki dark-plus\" style=\"background-color: #1E1E1E\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #9CDCFE\">sudo<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">ufw<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">enable<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>Untuk memblokir serangan brute force pada SSH, instal dan konfigurasi <strong>Fail2Ban<\/strong>:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#1E1E1E\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#D4D4D4;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><textarea class=\"code-block-pro-copy-button-textarea\" aria-hidden=\"true\" readonly>sudo apt install fail2ban -y\nsudo systemctl enable fail2ban\nsudo systemctl start fail2ban<\/textarea><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki dark-plus\" style=\"background-color: #1E1E1E\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #9CDCFE\">sudo<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">apt<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">install<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">fail2ban<\/span><span style=\"color: #D4D4D4\"> -<\/span><span style=\"color: #9CDCFE\">y<\/span><\/span>\n<span class=\"line\"><span style=\"color: #9CDCFE\">sudo<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">systemctl<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">enable<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">fail2ban<\/span><\/span>\n<span class=\"line\"><span style=\"color: #9CDCFE\">sudo<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">systemctl<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">start<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #9CDCFE\">fail2ban<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>Fail2Ban akan otomatis memblokir IP yang mencoba login berkali-kali dengan kredensial yang salah.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Kesimpulan\"><\/span>Kesimpulan<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Menjaga <a href=\"https:\/\/www.jetorbit.com\/panduan\/tag\/vps\/\" data-type=\"post_tag\" data-id=\"553\">VPS <\/a>tetap aman dari malware adalah tugas yang harus dilakukan secara berkala. Dengan melakukan scanning, memperbarui sistem, dan menerapkan langkah-langkah keamanan di atas, VPS bisa lebih terlindungi dari serangan yang berbahaya. Jangan lupa untuk selalu melakukan backup rutin agar data tetap aman jika sewaktu-waktu harus melakukan pemulihan sistem akibat serangan malware.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Memiliki VPS yang aman dari malware adalah hal penting bagi siapa saja yang mengelola server sendiri. Serangan malware bisa menyebabkan berbagai masalah, mulai dari pencurian data hingga performa server yang melambat. Jika VPS sudah terinfeksi, tindakan cepat sangat dibutuhkan agar kerusakan tidak semakin parah. Berikut adalah Panduan 7 Cara Scan dan Mengatasi VPS yang Terdeteksi [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":2809,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[488],"tags":[712,553],"class_list":["post-9843","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-vps","tag-malware","tag-vps"],"_links":{"self":[{"href":"https:\/\/www.jetorbit.com\/panduan\/wp-json\/wp\/v2\/posts\/9843","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jetorbit.com\/panduan\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jetorbit.com\/panduan\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jetorbit.com\/panduan\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jetorbit.com\/panduan\/wp-json\/wp\/v2\/comments?post=9843"}],"version-history":[{"count":5,"href":"https:\/\/www.jetorbit.com\/panduan\/wp-json\/wp\/v2\/posts\/9843\/revisions"}],"predecessor-version":[{"id":9972,"href":"https:\/\/www.jetorbit.com\/panduan\/wp-json\/wp\/v2\/posts\/9843\/revisions\/9972"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.jetorbit.com\/panduan\/wp-json\/wp\/v2\/media\/2809"}],"wp:attachment":[{"href":"https:\/\/www.jetorbit.com\/panduan\/wp-json\/wp\/v2\/media?parent=9843"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jetorbit.com\/panduan\/wp-json\/wp\/v2\/categories?post=9843"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jetorbit.com\/panduan\/wp-json\/wp\/v2\/tags?post=9843"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}