How to change the number or failed logins for cPHulk to block an IP address

Question

How do you change the number of failed logins for cPHulk to block an IP address?

Answer

cPHulk lets you protect your server from brute-force attacks by blocking offending IP addresses. You can adjust the number of failures allowed before an IP address is blacklisted. Here is how you do so:

1. Log in to WHM as the root user
2. Navigate to the cPHulk interface in WHM at Home / Security Center / cPHulk Brute Force Protection / Configuration Settings
3. Make your desired change(s) to the Username-based Protection, IP Address-based Protection, and/or One-day Blocks options.
4. Click the Save button at the bottom.

For more information about cPHulk and these configuration settings, please see the documentation here.

cPHulk Brute Force Protection | cPanel & WHM Documentation