156 reputation
5
bio website
location
age
visits member for 2 years, 7 months
seen Nov 25 at 20:47

Aug
29
awarded  Popular Question
Apr
19
revised Recommended way to disable atd (and other unnecessary startup processes) in Ubuntu 14.04 LTS?
tone down hyperbole
Apr
19
answered Recommended way to disable atd (and other unnecessary startup processes) in Ubuntu 14.04 LTS?
Apr
19
asked Recommended way to disable atd (and other unnecessary startup processes) in Ubuntu 14.04 LTS?
Mar
2
awarded  Commentator
Mar
2
comment Do cPHulk Brute Force Protection Settings Effect Hosts?
Great - thanks for the info. Take a look at the documentation - - especially the second one "Brute force protection period in minutes" - where I have some concern (but whitelisting may save you): "In the Brute Force Protection Period in minutes field, enter a number of minutes. If several potential hacker IPs attempt to log in and reach the cPanel user's defined log in attempts during this configured time, then this will be considered a brute force attempt. All IP addresses will be blocked from logging into the cPanel user's account. In addition, this will lock the cPanel user's account."
Mar
2
comment How to Blacklist a Range of IPs in cPHulk Brute Force Attack Settings
Hey thanks for the info. Left a question on the other site. Was wondering if you're using the wildcards or just the settings mentioned in your previous post.
Mar
2
comment Do cPHulk Brute Force Protection Settings Effect Hosts?
If I read this correctly, the first setting at 525949 minutes will ensure that any repeated failures (3), even spread out over this long period, will block the hacker's specific IP. The second setting for 525949 will block ALL IPs, including your own, any time any hackers fail for any account 3 times or more. According to my read of the documentation this will block ALL IPs (except perhaps white-listed ones) after any hackers try and fail 3 or more times. So, this effectively blocks ALL IPs (see docs.cpanel.net/twiki/bin/view/AllDocumentation/WHMDocs/CPHulk). Is this correct?
Feb
27
comment How to Blacklist a Range of IPs in cPHulk Brute Force Attack Settings
I'm really glad it helped, @H. Ferrence! I'm curious, I've been blacklisting at the "103.26.0.0/16" form by default (since it's easier to click) and I don't want to blacklist my own IP (I use a very restricted form for US addresses, since I want to be able to admin at internet cafes, work, hotel, random ISP). I find I regularly get a spate of attacks from different countries, but I know that IP address ranges are not particularly deterministic (e.g., 138.x.x.x may have locations in both US and Thailand…). What's the default you're using now to reduce the attacks?
Feb
19
comment How to Blacklist a Range of IPs in cPHulk Brute Force Attack Settings
Glad it helped! I use it all the tim now...
Feb
18
comment How to Blacklist a Range of IPs in cPHulk Brute Force Attack Settings
I just edited the answer to provide additional background without too much detail, I hope...
Feb
18
revised How to Blacklist a Range of IPs in cPHulk Brute Force Attack Settings
Additional background without too much detail, I hope...
Feb
18
awarded  Teacher
Feb
18
comment How to Blacklist a Range of IPs in cPHulk Brute Force Attack Settings
You should enter "103.26.193.0/24" instead. That should wild-card the last digit of the IP. To wildcard the last two, "103.26.0.0/16".
Feb
18
comment How to Blacklist a Range of IPs in cPHulk Brute Force Attack Settings
So, are you saying that you enter 103.26.0.0/16 in the box and after saving it shows as 103.26.nnn.nnn? If the text is changing out from under you I'd suspect perhaps a browser issue. WHM 11 seems like it's new enough. I've used this method for a while and don't have trouble - I'm kinda stumped...
Feb
17
awarded  Editor
Feb
17
revised How to Blacklist a Range of IPs in cPHulk Brute Force Attack Settings
Clarify how to enter the blocked IPs in cPHulk
Feb
17
comment How to Blacklist a Range of IPs in cPHulk Brute Force Attack Settings
Hmm… It appears to work for me… Which version of WHM are you using, and how many are you trying to block? I typically use the xxx.xxx.0.0/16 style (to avoid over-blocking) but I've taken to attempting larger ranges. How is it that you're determining it doesn't work -- you still get failure attempts from the blocked IPs? Updated answer for clarity...
Feb
16
comment How to Blacklist a Range of IPs in cPHulk Brute Force Attack Settings
This solution will work in your situation. Hope that helps!
Feb
13
answered How to Blacklist a Range of IPs in cPHulk Brute Force Attack Settings