How to set up and harden a Windows VPS on Kamatera or Vultr for 24/7 e-commerce bots
Disclosure: some links in this guide are affiliate links. If you sign up through them, I may earn a commission at no extra cost to you. How this site makes money.
Deploy a Windows Server 2022 instance with at least 2 vCPU and 4GB RAM near your target marketplace datacenter. Then change the default RDP port (3389) via PowerShell to stop automated brute-force attacks, restrict access with a firewall allowlist for your own IP, and disable automatic Windows Update reboots.
"Spinning up a Windows VPS takes 60 seconds. Spinning up a Windows VPS that doesn't get brute-forced by port scanners within 12 hours or reboot itself in the middle of a Black Friday inventory sync requires proper hardening. Copy and run my exact PowerShell setup below."
Step-by-Step Production Deployment
- Provision the Instance: Sign up on Kamatera (claim the $100 30-day trial) or Vultr (deposit match up to $100 with code VULTRMATCH). Select Windows Server 2022 with a minimum of 2 vCPU and 4GB RAM. Choose New York/Virginia for US marketplaces or Frankfurt/London for EU operations.
- Change the Default RDP Port (Copy-Paste PowerShell): Open PowerShell as Administrator on your new VPS and run this snippet to move RDP from port
3389to49822and open the firewall rule automatically:
# Change RDP Port to 49822 and whitelist in Windows Firewall
$NewPort = 49822
Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -Name "PortNumber" -Value $NewPort
New-NetFirewallRule -DisplayName 'RDP-Custom-Port' -Profile 'Public,Private,Domain' -Direction Inbound -Action Allow -Protocol TCP -LocalPort $NewPort
Restart-Service TermService -Force
- Prevent Unexpected Windows Update Reboots: Run
gpedit.msc→ Computer Configuration → Administrative Templates → Windows Components → Windows Update → Enable 'No auto-restart with logged on users for scheduled automatic updates'.
Take a clean snapshot image of your configured VPS right after hardening the firewall and installing your dependencies—so you can clone new servers in 30 seconds.