cPHulk Failed Attempts from new IPs everyday

phoxlabs

• November 01, 2013 13:13

I have a dedicated server with a few accounts on it with cPHulk enabled hosted at a Colo. I get about 15 notifications everyday saying that there was "Large number of attempts from IP XXX.XXX.XXX.XXX", all from random countries around the world. I have strong passwords setup and everything is running fine but my question is, is this normal? Are these just bots out there scanning IPs with open ports and just trying to brute force to attach an account? Should I install another layer of security? Ignore the notifications? As they have come in, I have blacklisted them so far.

• 

  cPanelMichael

  • November 01, 2013 18:16

  Hello :) Yes, this is quite typical. I recommend installing a third-party firewall application such as CSF if you have not done so already. Thank you.

  0
• 

  quizknows

  • November 02, 2013 01:52

  [quote="phoxlabs, post: 1495652"> Are these just bots out there scanning IPs with open ports and just trying to brute force to attach an account?
  All day, every day. I agree with the suggestion for CSF, it will handle a lot of the blocking (if not all of it) for you.

  0

Please sign in to leave a comment.