The Nxeon Blog
Guides for people who run their own servers.
Straight-talking tutorials and comparisons on VPS hosting, game servers, Linux and security. No fluff, just what actually works. 346 guides from the team that runs the servers.
Search results
19 guides for “brute-force” · Clear search
How to Read and Manage Linux Logs with journalctl
systemd's journal holds nearly every log on a modern Linux server. Learn to filter, follow, and prune it with journalctl so you can debug fast.
How to Secure a Self-Hosted WordPress Site
WordPress powers a huge share of the web, which makes it a huge target. Harden your self-hosted install at the server, app, and login layers.
How to Secure a MySQL Database
An exposed or default-configured database is a breach waiting to happen. Lock down MySQL/MariaDB: bind to localhost, strong users, least privilege and TLS.
How to Protect a VPS from Brute-Force Attacks
Bots relentlessly guess logins against every public server. Here's a layered playbook — keys, firewall, rate limits and bans — to make brute-forcing pointless.
How to Set Up a UFW Firewall on Ubuntu
UFW makes Linux firewalling approachable. Learn to allow only the ports you need, set default-deny, rate-limit SSH, and verify your rules.
How to Install and Configure fail2ban
fail2ban watches your logs and automatically bans IPs that fail to log in too many times. Here's how to install it and write custom jails.
How to Set Up SSH Key Authentication and Disable Passwords
Stop relying on passwords. Generate an SSH key pair, install your public key on the VPS, and turn password logins off for good.
How to Harden SSH on a Linux VPS
A practical, copy-paste guide to locking down the SSH daemon on your VPS — the single most important service to secure on a public server.
How to Self-Host Vaultwarden Behind an Nginx Reverse Proxy
Already run Nginx? Here's how to put Vaultwarden behind it properly — real config, Let's Encrypt TLS, WebSocket support and the security headers that matter.
How to Secure a WordPress Site on a VPS
Running WordPress on your own VPS means owning its security — which is a good thing. This practical checklist locks down the server, PHP and WordPress itself.
Common ports every developer should know (22, 80, 443, 3306…)
You don't need to memorise all 65,535 ports — just the ones that come up daily. Here's the working developer's reference to the ports you'll actually use.
How to set up fail2ban to stop brute-force attacks
fail2ban watches your logs and bans IPs that keep failing logins. Learn to install it, protect SSH, tune ban times, and add jails for web services.
Deploy your first server in under a minute.
Creating an account is free and takes no card details. Every guide here runs on a Nxeon VPS or game server.