Guides from the NOC

wp-login.php getting hammered by bots? Set up a custom Fail2Ban jail on your VPS to block WordPress login brute-force attacks right at the firewall level.

XML-RPC brute-force attacks spiking your CPU? Learn how to confirm the attack in your logs and disable xmlrpc.php safely in cPanel, WordPress, or Cloudflare.

Cut spam and brute-force logins by blocking traffic from specific countries using CSF's CC_DENY on a VPS or Cloudflare firewall rules - step by step.

Fix Windows VPS RDP connection errors and stop brute-force login attempts with port changes, NLA, firewall rules, and strict account lockout policies.

Learn how to configure Nginx limit_req to stop bot floods and brute-force attacks on your VPS, with real config examples, testing steps, and common mistakes.

Set up cPanel Leech Protect to catch shared or leaked logins on password-protected folders, fix the greyed-out option, and avoid false lockouts.

Locked out of cPanel, Webmail, or FTP after too many failed logins? Learn how cPHulk brute-force protection works, unblock your IP, and stop repeat lockouts.

Stop SSH brute-force bots on your VPS: set up key-based login, disable root access, and configure Fail2Ban step by step.