Recent increase in users blocked by CPHulk

F

fugtruck

Member
Apr 27, 2010
21
0
51
Within the past two or three weeks, we have noticed a major increase in the number of our users being blocked by cPHulk for failed login attempts across many of our cPanel servers. Looking at the cphulkd log files, we see that the IP address that the failed login attempts are coming from are indeed the IP addresses that the users in question are actually connecting from.

Now, if it were just one person here or there that this is happening to, I would not think anything about it. But the number of users we are having locked out is very abnormal. For example, I don't know I have had more than one or two end users in the past year locked out by cPHulk, but now we are having several users per day complaining.

Is anyone else experiencing this?
 
cPanelMichael

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,884
2,243
463
Hello :)

I have not seen any recent reports regarding false positives for cPHulk. It should only be logging the failed login attempts. Have you verified if the login attempts have actually failed, or that it's reported a failed login attempt incorrectly?

You may want to submit a ticket so we can investigate further:

Submit A Ticket

Thank you.
 
You must log in or register to reply here.
Thread starter Similar threads Forum Replies Date
M CORS errors on multiple sites appearing recently Security 2
P CSF Firewall Behaviour chaged after recent update Security 10
N [newmailcgi] Recently Uploaded CGI scripts that send email on ***** Security 3
D Security problem? "[newmailcgi] Recently Uploaded CGI scripts that send email" Security 1
J mod_security problem in most recent update Security 21
Similar threads
CORS errors on multiple sites appearing recently
CSF Firewall Behaviour chaged after recent update
[newmailcgi] Recently Uploaded CGI scripts that send email on *****
Security problem? "[newmailcgi] Recently Uploaded CGI scripts that send email"
mod_security problem in most recent update
Top Bottom