I have a server with WHM + CPanel and 5 of my costumer got infected with zbot.
This means that the domains they have are constantly receiving requests to certain destinations.
I tried to use mod_security but seems that it can't filter every requests... I don't really know why?
I still see in the access log the connection comming in and it's consuming a LOT of bandwidth and server load
Those accounts have already been clean so all of those requests go to error 404 (the ones catched on mod_security I am dropping the connection).
Is there anymore ways to defend against this requests?