Signs of Brute Force Attack

Indicators: Many failed logins, high CPU, locked accounts.

cPHulk Protection

WHM → Security Center → cPHulk → Enabled by default – blocks IPs after failed attempts.

Additional Protection

Enforce Strong Passwords

cPanel → Password & Security → Use strong passwords for all accounts.

Limit Login Attempts

Configure cPHulk settings for stricter limits.

Enable 2FA

Two-Factor Authentication for cPanel and email.

Defense Layers Table

LayerTool
IP blockingcPHulk
Strong authPassword + 2FA
Rate limitingCSF/LFD if available
MonitoringCheck login logs