Hosting Glossary
What is Brute-Force Attack?
Brute-Force Attack in plain English — the definition, the analogy, and why it matters to anyone who runs a website.
The short answer
A brute-force attack tries credentials repeatedly — passwords guessed by the thousand, or leaked pairs replayed — until something opens.
The sections below unpack it properly — how it works, why a site owner should care, and a concrete example of it in the wild.
Written by the HostingAlly team · Last revised 27 July 2026
0
Jargon left unexplained
100+
Linked definitions
Real
Platform examples
Free
To read, obviously
Automated and impersonal, it hammers every login on the internet continuously — wp-login, SSH, mail. Variants include credential stuffing (breach-dump replays) and password spraying (few guesses across many accounts to dodge lockouts).
Defences stack cheaply: unique strong passwords defeat guessing, attempt limits and fail2ban throttle the volume, 2FA nullifies even the correct guess, and key-only SSH ends the game entirely.
A picture that makes Brute-Force Attack stick
A thief trying every key on a giant ring at every door on the street, nightly — bored, mechanical, and defeated entirely by locks that don't take standard keys.
Analogies simplify, of course — but this one holds up well enough to reason with, and reasoning is the point of a glossary.
Why you should care
Your login pages are under this weather permanently — the defence stack turns constant attack into constant log noise, and its absence is how 'admin/password123' sites join botnets.
You don't need to operate this layer daily — you need to recognise it when it's the explanation for something, which is exactly when this page pays for itself.
What it looks like in practice
An SSH log shows thousands of nightly failures against common usernames — key-only authentication renders them decorative, and fail2ban trims even the noise.
Multiply that example across every site on the internet and you have the concept's entire job description.
The HostingAlly angle
On our hosting this mostly takes care of itself — the platform applies the sensible defaults, and the panel exposes the controls when you want them. The concepts worth knowing next: Two-Factor Authentication, Firewall, SSH and Phishing.
NVMe storage and LiteSpeed caching are standard here, not premium-tier extras.
Jargon is a service failure
We think unexplained jargon is a service failure — this glossary is the support desk's accumulated translations, published where the search engines can hand them out.
NVMe storage and LiteSpeed caching are standard here, not premium-tier extras.
- 100+ terms, plain English
- Analogies and real examples
- Cross-linked related concepts
- Written by the support desk
Why HostingAlly
Every plan includes this, whatever you pay
Linked, not siloed
Related terms cross-reference, so one lookup becomes a working understanding.
Grounded in a real platform
Examples reference the hosting you'd actually use, not abstract diagrams.
Analogies that stick
Each concept gets a picture you'll remember at the moment you actually need it.
Honest about what you can skip
Most terms are recognise-level, not operate-level — the glossary says which is which.
The practical stakes named
Not just what it is — when it's the answer to a problem you're having.
One term, fully landed
Brute-Force Attack defined, pictured by analogy and placed in your own control panel — recognise-level in a single read.
Getting Started
How to get going
- 1
Spot it in your own setup
The fastest way to learn a hosting term is to find it in your own panel — five minutes of looking beats an hour of reading.
- 2
Check the defaults
Our platform ships sane defaults for this — verify rather than assume, and you'll know your setup instead of hoping about it.
- 3
Follow the related terms
Concepts travel in packs — Two-Factor Authentication, Firewall and SSH complete this one's picture, and each is a two-minute read away.
Included
What's covered on our plans
- Renewal prices that match signup prices
- Free SSL certificate on every plan, renewed automatically
- One-click installer for WordPress and 400+ apps
- SSH, Git and Composer access on developer-friendly plans
- Staging environments for risk-free changes
- 30-day money-back guarantee on hosting plans
- DDoS protection at the network level
- Softaculous one-click app installer
- WordPress Toolkit with automatic updates
- LiteSpeed server-level caching
FAQ
Your questions, answered
Are attackers really targeting my small site's login?
Not 'you' — everything; the scanning is internet-wide and automated. Which is reassuring, properly understood: mechanical attacks fall to mechanical defences, and the standard stack is exactly that.
Do login attempt limits risk locking me out?
Occasionally, recoverable — via panel access, IP allowlisting or waiting out the window. The asymmetry is the point: minor inconvenience for you, arithmetic futility for a guesser with thousands of attempts to spend.
Do you include email with hosting?
Yes — mailboxes on your own domain come with every hosting plan, with webmail, IMAP/POP/SMTP access and spam filtering. Standalone email hosting also exists for domains whose websites live elsewhere.
Can I transfer a domain I already own?
Yes — transfers in are routine: unlock the domain at the current registrar, grab the auth code, and start the transfer from your client area. The remaining registration time carries over, and DNS keeps working throughout.
How long does it take to get started?
Minutes — hosting activates on payment, the domain (free for year one on annual plans) connects immediately, and one-click installers put WordPress or 400+ other apps live the same sitting. If you have an existing site, our team migrates it free, usually within 24 hours.
What happens to my data if I cancel?
Your site and files remain yours — download a full backup from the panel any time, before or during cancellation. Domains stay registered to you for their paid term and can transfer to any registrar after the standard 60-day window.
Do prices go up at renewal?
No — the price you sign up at is the price you renew at. We don't run teaser-rate economics, so there's no year-two ambush to plan around, and your bookkeeping can rely on the number staying put.
Keep exploring
SSH (Secure Shell)
SSH is the encrypted protocol for operating a server through a terminal.
Phishing
Phishing is fraud by impersonation — messages and pages mimicking trusted brands to harvest credentials and payments.
WordPress Hosting
Managed WordPress with LiteSpeed caching, staging and automatic backups.
VPS Hosting
KVM virtual servers with root access, DDoS protection and flat pricing.
Planning to switch hosts? Grab the checklist here.
The steps that keep a site migration dull rather than dramatic: what to back up first, how to shift email across without losing a single message, when to touch DNS, and the two mistakes behind nearly every hour of downtime we come across.
Get online without the games.
From your first site to a fleet of servers, the upgrade path is an account change, not a migration.
View WordPress Hosting plans