Guides tagged “brute force”
Step-by-step MdmHost guides about brute force, sorted A-Z.
12 guides
Configure cPHulk brute-force protection in WHM (root guide)
Set up cPHulk in WHM to stop password guessing on cPanel, WHM, email and FTP: thresholds, whitelisting your IP, country rules and unblocking from SSH.
Configure DirectAdmin Brute Force Monitor and IP blocking
Set up DirectAdmin's Brute Force Monitor to detect failed logins on DirectAdmin, SSH, FTP and mail, block attackers with CSF or the firewall, and unblock IPs.
Configure Fail2ban jails: bantime, findtime and maxretry in jail.local
Set up Fail2ban properly with a jail.local file. Tune bantime, findtime and maxretry, enable incremental bans, whitelist your own IP and pick the right log backend.
Disable XML-RPC and protect wp-login.php
Stop brute-force attacks on WordPress: disable XML-RPC, limit login attempts, add 2FA and an extra password on wp-admin, and check what still needs XML-RPC.
Protect Plesk with Fail2Ban (IP address banning)
Enable Fail2Ban in Plesk, choose which jails to activate, tune ban time and retries, whitelist trusted IPs and unban an address that was blocked by mistake.
Protect SSH from brute-force attacks with Fail2ban
Install Fail2ban, create a safe jail.local for SSH, check which addresses are banned and unban yourself if you mistype a password too often.
Rate-limit SSH and other ports with ufw limit
Use ufw limit to slow down SSH brute-force attempts. Learn how the 6-connections-in-30-seconds rule works, apply it to a custom SSH port, pair it with Fail2ban and test it.
Rename the built-in Administrator account
Rename the built-in Administrator account to cut down brute-force noise on Remote Desktop, using Rename-LocalUser or Local Security Policy, without locking yourself out.
Secure Remote Desktop on Windows Server
Stop password-guessing on Remote Desktop with strong passwords, Network Level Authentication, a lockout policy and firewall rules limited to your IP.
Set an account lockout policy against RDP password guessing
Lock accounts for a short time after repeated failed Remote Desktop logins, choose sensible threshold and duration values, and know how to unlock yourself if it happens.
Stop brute force and floods with Cloudflare rate limiting rules
Create Cloudflare rate limiting rules that slow down login brute force, search and checkout abuse, and small HTTP floods, with sensible thresholds and testing tips.
Tune LFD login failure blocking and email alerts in CSF
Adjust LFD triggers, block durations, permanent blocks and alert emails so CSF stops brute-force attacks without flooding your inbox or blocking genuine users.
Browse by topic
- Getting startedYour first hour with a new server: access, logins and basics.69 guides
- cPanelFiles, databases, email, domains and every cPanel tool, step by step.37 guides
- WHM & resellingWHM, packages, reseller accounts, WHMReseller and running a hosting brand.49 guides
- WordPressInstall, secure, speed up, migrate and fix WordPress sites.40 guides
- Email & webmailMailboxes, webmail, forwarders, spam filters and email delivery.37 guides
- DomainsRegistering, transferring and managing domains and nameservers.20 guides
- SSL certificatesFree AutoSSL, Let's Encrypt, paid certificates and HTTPS.19 guides
- CloudLinuxCloudLinux setup and use: LVE limits, CloudLinux Manager, CageFS and PHP/Node.js selectors.31 guides
- LiteSpeedLiteSpeed Web Server, LSCache and the LiteSpeed Cache plugin: install, settings and tuning.30 guides
- Imunify360Malware scanning, firewall and proactive defence with Imunify360.23 guides
- SoftaculousInstall, update, clone and back up apps with Softaculous.23 guides
- WP SquaredcPanel's WordPress platform: sites, plugins, staging and backups.9 guides
- SitePadBuild and publish websites with the SitePad builder.9 guides
- SitejetDesign, edit and publish sites with the Sitejet builder.9 guides
- WHMResellerAlpha and master resellers with WHMReseller: install, setup and use.12 guides
- VirtFusionInstall, set up and manage VirtFusion: hypervisors, packages, servers and WHMCS integration.7 guides
- VirtualizorManage your VPS with Virtualizor: power, OS reinstall, VNC, IPs and backups.30 guides
- PleskWebsites, email, databases and settings in the Plesk panel.52 guides
- DirectAdminUsers, domains, email and reseller tools in DirectAdmin.40 guides
- WHMCSBilling, automation, products and client management with WHMCS.51 guides
- Control panelscPanel & WHM, Plesk, DirectAdmin and other panels on your VPS.106 guides
- SecurityKeys, passwords, firewalls and keeping a server patched.115 guides
- Networking & DNSIP addresses, reverse DNS, ports and traffic.34 guides
- Websites & appsWeb servers, WordPress, PHP, Node.js, SSL and app hosting.52 guides
- DatabasesMySQL, MariaDB, PostgreSQL, Redis and MongoDB on a VPS.64 guides
- Billing & accountInvoices, renewals, the client area and your account.9 guides
- TroubleshootingWhen something is not working: checks and fixes.68 guides
- Linux VPSSSH, packages, services and everyday Linux administration.70 guides
- Windows VPS & RDPRemote Desktop, Windows Server settings and Admin RDP tips.58 guides
- Docker & DevOpsContainers, Git deploys, automation, monitoring and backups.58 guides
Still stuck?
Ask MdmHost AI for a quick answer, or open a ticket and our team will take a look. We are here 24/7.