cPHulk Failed Attempts from new IPs everyday

phoxlabs

Registered
Nov 1, 2013
3
0
1
cPanel Access Level
Root Administrator
I have a dedicated server with a few accounts on it with cPHulk enabled hosted at a Colo. I get about 15 notifications everyday saying that there was "Large number of attempts from IP XXX.XXX.XXX.XXX", all from random countries around the world.

I have strong passwords setup and everything is running fine but my question is, is this normal? Are these just bots out there scanning IPs with open ports and just trying to brute force to attach an account?

Should I install another layer of security? Ignore the notifications?

As they have come in, I have blacklisted them so far.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,911
2,234
363
Hello :)

Yes, this is quite typical. I recommend installing a third-party firewall application such as CSF if you have not done so already.

Thank you.