Guides from the NOC

Cut spam and brute-force logins by blocking traffic from specific countries using CSF's CC_DENY on a VPS or Cloudflare firewall rules - step by step.

Fix Windows VPS RDP connection errors and stop brute-force login attempts with port changes, NLA, firewall rules, and strict account lockout policies.

Add TOTP two-factor authentication to SSH logins on your VPS using PAM and Google Authenticator, including the fix for the lockout risk everyone hits first.

Published Docker container ports staying open even after UFW denies them? Learn why Docker bypasses UFW via iptables, and how to actually lock it down.

Set up ClamAV and rkhunter on an unmanaged VPS to catch malware and rootkits early, cut false positives, and automate scheduled scans with cron jobs.