"cPHulk Brute Force Protection" question

deo_hai_van

Active Member
Feb 8, 2011
26
0
51
Hi,
Does "cPHulk Brute Force Protection" also protect access to FTP also or just WHM?

Thanks
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,261
463
Hello :)

Yes, cPhulk protects more than just access attempts to Web Host Manager. Other services protected include cPanel, SSH, FTP, IMAP, and POP3. Note that cPHulk will not protect POP3 or IMAP against IP-based brute force attacks if you use the Courier mailserver. Courier does not log the IP addresses of failed POP3 and IMAP logins.

You can find documentation for cPHulk at:

cPHulk for Brute Force Protection

Thank you.
 

deo_hai_van

Active Member
Feb 8, 2011
26
0
51
Hello :)

Yes, cPhulk protects more than just access attempts to Web Host Manager. Other services protected include cPanel, SSH, FTP, IMAP, and POP3. Note that cPHulk will not protect POP3 or IMAP against IP-based brute force attacks if you use the Courier mailserver. Courier does not log the IP addresses of failed POP3 and IMAP logins.

You can find documentation for cPHulk at:

cPHulk for Brute Force Protection

Thank you.

thank you for the helpful info!
 

mtylerb

Well-Known Member
Nov 10, 2007
57
0
56
Warburg, AB, Canada
cPanel Access Level
Root Administrator
Hello :)

Yes, cPhulk protects more than just access attempts to Web Host Manager. Other services protected include cPanel, SSH, FTP, IMAP, and POP3. Note that cPHulk will not protect POP3 or IMAP against IP-based brute force attacks if you use the Courier mailserver. Courier does not log the IP addresses of failed POP3 and IMAP logins.

You can find documentation for cPHulk at:

cPHulk for Brute Force Protection

Thank you.
Good idea to keep this in mind if you have cphulk enabled. If your email program tries multiple logins with the wrong password too many times and then try to log in to cPanel or WHM to fix the issue, cPanel/WHM's login will tell you that you have the wrong password even though your IP is actually banned. Might just have to wait it out or disable cphulk from an SSH console to log in and whitelist your IP address. Even better, do that first.