{"id":7842,"date":"2020-09-03T15:41:16","date_gmt":"2020-09-03T13:41:16","guid":{"rendered":"https:\/\/xneelo.co.za\/insights\/?p=7842"},"modified":"2024-04-09T13:51:10","modified_gmt":"2024-04-09T11:51:10","slug":"security-measures-in-place-to-mitigate-abuse","status":"publish","type":"post","link":"https:\/\/xneelo.co.za\/insights\/security-measures-in-place-to-mitigate-abuse\/","title":{"rendered":"Security measures in place to mitigate abuse"},"content":{"rendered":"

We know how important it is for our customers to have peace of mind while they transact online. Our chosen mechanisms work together to minimise our customers\u2019 abuse risk and limit their exposure. As an example, a common form of email abuse is unsolicited (spam) emails. To best prevent our customers from being inundated with these emails, we add \u2018bad\u2019 IP addresses (the address sending the spam) to a database and block any incoming emails at the server level. <\/span><\/p>\n

Fail2ban<\/span><\/h2>\n

Fail2ban<\/span><\/a> is an intrusion prevention software that scans log files and blocks any IP addresses that have been identified as malicious. Fail2ban looks for suspicious activity like password failures and vulnerability searches and rejects these IP addresses for a specific period of time. This is just one of the measures we take to help prevent Brute Force password attacks against mailboxes and Content Management Systems (CMS) like WordPress and Joomla.<\/span><\/p>\n

A Brute Force Attack, one of the most common forms of abuse, is when an attacker tries to gain access to a website or a web server by attempting various passwords and usernames in close succession, essentially bombarding the server. <\/span><\/p>\n

Web Application Firewalls (WAF)<\/span><\/h2>\n

ModSecurity<\/span><\/h3>\n

ModSecurity<\/span><\/a> is a web application firewall that monitors traffic to your website for malicious activity in real-time. It does this through a set of rules that detect and block the most common website attacks. ModSecurity is active on all our Web Hosting packages and our Managed Dedicated Servers. <\/span><\/p>\n

ModSecurity acts like a shield between your website and the internet, offering an additional layer of protection. It is an early detection system that offers a moderate level of protection, making it harder for malicious attackers to gain unauthorised access to your website. <\/span><\/p>\n

Cloudbric WAF<\/span><\/h3>\n

Cloudbric WAF<\/span><\/a>* is an advanced, enterprise-grade web application firewall which shields your website and website applications (like WordPress) against hackers. It guards against suspicious and malicious website traffic, which specifically looks for opportunities to exploit weaknesses in your website\u2019s code. There are <\/span>three key ways<\/b> that Cloudbric WAF protects your site:<\/span><\/p>\n