Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Although I have many client accounts on my cPanel based server I'm really the only one who has login information to any of the accounts. I have cPhulk setup to alert me and blocking after 4 failed attempts. I usually have only a handful of bots trying to get in each day(2 hosts ago I never had any), but Today the rate has significantly increased, every 10 minutes or so(no not like clockwork, just averaging). Should I be concerned? Is there anything extra I should be doing, is there any automated reporting services I can use? Thanks.

share|improve this question
3  
Welcome to the internet my friend... –  voretaq7 Nov 8 '12 at 23:26
    
Cpanel authentication could really use some captcha protection. –  FINESEC Nov 8 '12 at 23:52
    
@FINESEC actually there are bots that crack captcha, and many people who can't :) –  wmbf86 Nov 9 '12 at 1:46
    
Yes, i'm affraid you're right, most captcha solutions can either be easily solved by OCR software or cannot be solved by people. There're some good captcha solutions out there, but they're not that easy to find. –  FINESEC Nov 9 '12 at 10:07

1 Answer 1

Make sure that you're using strong passwords, encourage your users to use strong passwords, report all incidents to abuse departaments and/or here: US-CERT Incident Reporting System

Other than that there's no much you can do about that, unless you want to do some coding.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.