The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

cPHulk Failed Attempts from new IPs everyday

Discussion in 'Security' started by phoxlabs, Nov 1, 2013.

  1. phoxlabs

    phoxlabs Registered

    Joined:
    Nov 1, 2013
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    I have a dedicated server with a few accounts on it with cPHulk enabled hosted at a Colo. I get about 15 notifications everyday saying that there was "Large number of attempts from IP XXX.XXX.XXX.XXX", all from random countries around the world.

    I have strong passwords setup and everything is running fine but my question is, is this normal? Are these just bots out there scanning IPs with open ports and just trying to brute force to attach an account?

    Should I install another layer of security? Ignore the notifications?

    As they have come in, I have blacklisted them so far.
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    654
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    Yes, this is quite typical. I recommend installing a third-party firewall application such as CSF if you have not done so already.

    Thank you.
     
  3. quizknows

    quizknows Well-Known Member

    Joined:
    Oct 20, 2009
    Messages:
    940
    Likes Received:
    55
    Trophy Points:
    28
    cPanel Access Level:
    DataCenter Provider
    All day, every day.

    I agree with the suggestion for CSF, it will handle a lot of the blocking (if not all of it) for you.
     
Loading...

Share This Page