Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

So I have enabled cPHulk on my web server, and just realized now that somebody (most likely a bot) is attempting to brute force their way into my WHM, thus leaving me out as well.

I was shown this message when attempting to login to my WHM from the IP I always use:

This account is currently locked out because a brute force attempt was detected. Please wait a few minutes and try again. Attempting to login again will only increase this delay. If you frequently experience this problem, we recommend having your username changed to something less generic.

So I am simply curious. Since somebody is obviously attempting to brute force my WHM, could they also be attempting to brute force my SSH? And does cPHulk protect SSH as well?

share|improve this question

1 Answer 1

up vote 2 down vote accepted

cPHulk also protects SSH yes. But I always use cPHulk in combination with CSF/LFD

Also in case you're locked out of your server try this:
https://www.example.com:2087/usr/local/cpanel/scripts2/doautofixer?autofix=disable_cphulk

Source

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.