Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

So I have enabled cPHulk on my web server, and just realized now that somebody (most likely a bot) is attempting to brute force their way into my WHM, thus leaving me out as well.

I was shown this message when attempting to login to my WHM from the IP I always use:

This account is currently locked out because a brute force attempt was detected. Please wait a few minutes and try again. Attempting to login again will only increase this delay. If you frequently experience this problem, we recommend having your username changed to something less generic.

So I am simply curious. Since somebody is obviously attempting to brute force my WHM, could they also be attempting to brute force my SSH? And does cPHulk protect SSH as well?

share|improve this question

closed as off-topic by HopelessN00b Jan 13 at 22:09

  • This question does not appear to be about server, networking, or related infrastructure administration within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

    
This question appears to be off-topic because it is about working with a service provider's management interface, such as cPanel. –  HopelessN00b Jan 13 at 22:09

1 Answer 1

up vote 2 down vote accepted

cPHulk also protects SSH yes. But I always use cPHulk in combination with CSF/LFD

Also in case you're locked out of your server try this:
https://www.example.com:2087/usr/local/cpanel/scripts2/doautofixer?autofix=disable_cphulk

Source

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.