cPHulk Failed Attempts from new IPs everyday

[phoxlabs]

I have a dedicated server with a few accounts on it with cPHulk enabled hosted at a Colo. I get about 15 notifications everyday saying that there was "Large number of attempts from IP XXX.XXX.XXX.XXX", all from random countries around the world.

I have strong passwords setup and everything is running fine but my question is, is this normal? Are these just bots out there scanning IPs with open ports and just trying to brute force to attach an account?

Should I install another layer of security? Ignore the notifications?

As they have come in, I have blacklisted them so far.

 

[cPanelMichael]

Hello

Yes, this is quite typical. I recommend installing a third-party firewall application such as CSF if you have not done so already.

Thank you.

 

[quizknows]

Are these just bots out there scanning IPs with open ports and just trying to brute force to attach an account?

All day, every day.

I agree with the suggestion for CSF, it will handle a lot of the blocking (if not all of it) for you.