[Cpanel Blog] Is cPHulk working properly? June,2012

I'm not sure if cPHulk is working properly or not. Could somone please confirm this for me.

The Logwatch email shows the following attempted attacks.. All the IPs have been blocked, but I'm not sure if its before or after the numbers got so high. I also noticed that the usernames had up to 1323 login attempts but were blocked for two weeks for 30 attempts.


Logwatch email (I've stripped out the IPs)
Failed logins from:
IP1: 333 times
IP2: 1374 times
IP3: 210 times
IP4: 223 times

Illegal users from:
IP1: 3520 times
IP2: 2815 times
IP3: 427 times
IP4: 9948 times


My settings

IP Based Brute Force Protection Period in minutes: 15
Brute Force Protection Period in minutes: 5
Maximum Failures By Account: 15
Maximum Failures Per IP: 10
Maximum Failures Per IP before IP is blocked for two week period: 30

Send a notification upon successful root login when the IP is not whitelisted: off
Extend account lockout time upon additional authentication failures: on
Send notification when brute force user is detected: off
Is cPHulk working properly?
[Cpanel Blog] how to protect whm/cpanel (the host web application ) using mod_security? May,2012

Related Post