howto prevent outgoing brute-force attacks
Hi,
Recently i have 2 security incidents caused by outdated software used by our customers (shared server).
In both cases an outdated joomla installation permit code execution and my server was been used to try brute-force attacks to others servers wordpress.
Something like this: Detecting WordPress Outbound Bruteforce attack
My question is how is possible to prevent and detect this. What is the best way to deal with this because i can't force all customers to have updated software and i believe that exist a way to sniff periodicly the traffic or check the outgoing traffic, etc...
I'm looking for some security tool for that. Some ideas?
Thanks for advice,
Wilson
-
Hello, You have to scan all accounts data with maldet and calmscan regularly. For that you have to set cron. 0 -
Hello, You may also find these threads helpful: Prevent wordpress Brute Force Attacks Outbound wp-login.php brute force attack from my cpanel server Thank you. 0
Please sign in to leave a comment.
Comments
2 comments