0

Can the software ModSecurity defend from Brute Force Attacks on PHPmyadmin and WordPress as well?

A particular hosting company providing shared hosting told me that ModSecurity should cover PHPmyadmin and WordPress as well as their Admin area and Cpanel area.

Does it sound plausible to you?

1

mod_security sits in the Apache webserver to offer some level of security for applications hosted on that webserver. Assuming you're talking about shared hosting (as opposed to dedicated or VPS providers), there's no reason their mod_security installation wouldn't be able to protect against attacks against any application installed on their webserver.

That being said, mod_security is highly configurable, so you'd need to check that there's brute force protection for the login pages you care about, and you'll also want to check if mod_security is even enabled for those paths.

Also note that some mod_security rulesets (those looking for SQL injection) are likely to have a very high false positive rate on PHPmyadmin, as they'll look for strings similar to the SQL queries legitimate users might enter into PHPmyadmin.

  • I checked that with the team and was told that mod_security is enabled by default for all customers of the shared hosting plans and that it's rules for protection from BFA PHPmyadmin and WordPress instances exist and all of this isn't changeable. Thanks for clarifying on this. – Arcticooling Jan 11 '18 at 16:07
0

cPanel already uses modsecurity with OWASP CRS that will do all you are asking and more, if is your own cooking then just add ModSecurity with OWASP CRS v3.0 or later as previous may have lot's of false positives and CRS 3.0 and later already have WP exceptions available and paranoia level 1 to reduce false positives.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.