Someone is continuousely bruteforcing on my dedicated server since past 10-12 hrs I was out of station so din't knew about it but saw hundreds of mails of login fail from the same IP address I already have turned on cPHulk Brute Force Protection and blocked that IP address but still the person is able to bruteforce with the same IP address What should i do now Please help me asap as already my server got hacked by bruteforcing a couple of days back and i lost many of my sites
I dont understand why cPHulk isnt working.. you should look into that.. but you could also try denying the IP with APF or IPTables .
i have done that with APF too but i dont know what IPtables is i am new to server management so please help me out
i just blocked the IP from IP deny manager and host access control for all kinds of access and since then there has been no attack
To prevent further attacks google - configserver Includes scripts which automatically block attackers.