Guides from the NOC

Published Docker container ports staying open even after UFW denies them? Learn why Docker bypasses UFW via iptables, and how to actually lock it down.

Lock a folder with cPanel Directory Privacy the right way. Fix login loops, caching conflicts, and .htpasswd path errors that break Basic Auth.

Getting a 403 Forbidden error? Learn every real cause - ModSecurity, hotlink protection, IP blocks, CDN rules, permissions - and how to fix each one.

Learn how cPanel's IP Blocker actually works, how to block or allow specific visitor IPs, and why it fails behind Cloudflare or with rotating bot traffic.

Comment spam flooding your WordPress site? Configure Akismet the right way, add extra bot-blocking filters, and clean out old spam comments for good.

Set up cPanel Leech Protect to catch shared or leaked logins on password-protected folders, fix the greyed-out option, and avoid false lockouts.

wp-login.php getting hammered by bots? Set up a custom Fail2Ban jail on your VPS to block WordPress login brute-force attacks right at the firewall level.

Set up a self-hosted WireGuard VPN on your VPS: install, keys, wg0.conf, firewall rules, client config, and fixes for handshake and routing problems.

Set up ClamAV and rkhunter on an unmanaged VPS to catch malware and rootkits early, cut false positives, and automate scheduled scans with cron jobs.

Getting "Are you sure you want to do this?" in WordPress? Learn why nonce tokens expire, how caching causes it, and the exact steps to fix it for good.

WordPress blocking SVG, WebP, or other uploads with 'Sorry, this file type is not permitted for security reasons'? Here's the safe way to fix it.

Imunify360 flagged and quarantined a file on your cPanel hosting? Learn why it happens, how to check the scan report, restore safe files, and stop repeats.

Seeing a file list instead of your site? Learn why directory listing gets exposed in cPanel and how to disable it with .htaccess or Index Manager.

Fonts falling back, videos downloading instead of playing, or JSON parse errors on your cPanel site? Fix MIME type headers the right way, step by step.

Set up WordPress two-factor authentication, enforce it for every admin account, and recover fast if you ever get locked out of wp-admin.

Learn how to enable DNSSEC correctly, fix the DS record mismatch that takes sites offline, and verify the chain of trust actually works end to end.

Learn how to password protect a folder in cPanel using Directory Privacy, fix the 500 errors it can cause, and remove it safely when you're done.

XML-RPC brute-force attacks spiking your CPU? Learn how to confirm the attack in your logs and disable xmlrpc.php safely in cPanel, WordPress, or Cloudflare.

Learn how to allow external MySQL connections in cPanel with Remote MySQL, fix error 1130/2003, and secure remote database access the right way.

Images loading on other sites and draining your bandwidth? Learn to set up cPanel Hotlink Protection correctly, step by step, without breaking your site.

Set up ConfigServer Security & Firewall (CSF) in WHM the right way: correct ports, testing mode, LFD alerts, and how to recover if you lock yourself out.

Set up two-factor authentication in cPanel with an authenticator app, and learn exactly how to recover access if you lose your device or get locked out.

WordPress site hacked or redirecting to spam? Learn how to confirm it, clean infected files and database, and recover safely step by step.

Image or file uploads failing in WordPress with an HTTP error? Learn the real causes - PHP limits, folder permissions, mod_security - and fix each one.