.svg)
.svg)
.svg)
.svg)
.svg)
Protect your VPS with recommended firewall, brute-force protection, and account security practices.
1) Install & Configure CSF (ConfigServer Security & Firewall)
cd /usr/src
rm -fv csf.tgz
wget https://download.configserver.com/csf.tgz
tar -xzf csf.tgz
cd csf
sh install.shAccess via WHM → Plugins → ConfigServer Security & Firewall. Recommended: disable testing mode (TESTING = 0) and restart CSF.
2) Enable cPHulk Brute Force Protection
In WHM → Security Center → cPHulk:
- Enable protection for SSH, WHM, cPanel, and email services.
- Block IPs after 10 failed login attempts within 15 minutes.
- Whitelist your own IP to avoid lockout.
3) SSH Hardening
- Change SSH port from
22to a non-standard port. - Disable root login and use sudo if possible.
- Use SSH keys instead of passwords.
- Restrict SSH to known IPs via CSF or firewalld.
4) Malware & Intrusion Detection
- Install
clamscanormaldet(Linux Malware Detect). - Enable ModSecurity with OWASP rules via WHM → Security Center.
- Consider ImunifyAV/Imunify360 (commercial plugin for cPanel).
