cphulk protection

[k1k]

Hello,

Many of our customers are attacked with cPanel login bruteforce attempts. Many of the "attackers" use simple wget for their attacks . However some of the attacks were successful .

I know that the cPanel have a software for bruteforce attempts (cphulkd) and I was wondering if it is able to detect and block such attacks. I have enabled it on one of my machines and sent 10 wrong login attempts(the cphulk limit is 3 ) . However I saw the failed attempts in the log, but the cphulkd has note detected anything.
Please let me know what should I do.

[Kent Brockman]

Hi. If you have a bit of remaining operational me mory in your box, installing a firewall would be a good solution.

I do use CSF and have everything under control. You can read more here:
http://forums.cpanel.net/showthread.php?t=53511

[k1k]

Hello,

Thanks for the idea but you can also see that there is no protection for cPanel login failures/bruteforce attacks. So I need another solution.I hope that a cPanel support representative could help us with that issue.

[chirpy]

csf does indeed include protection again brute-force attacks against cPanel/WHM and Webmail logins.