[分享] WHM 輕鬆使用 cPHulk.防止駭客暴力猜解密碼程式

夢想er

其實只要你的機器放上互聯網上，就會有人在用工具軟件試圖破解你的ssh登錄用戶密碼,這種攻擊就是不可避免的.
改端口是一點作用都沒有的,不信你改一下你的端口,再從別的機器nmap 你的機器,你的所有開放的端口一覽無遺.
限制有效登陸次數或者是把root所在網段以外的ip訪問都drop掉也是很好的防範方法，但是會給你的管理工作帶來不便.
我的解決方法是禁止root直接通過ssh訪問服務器，同時限制有效登陸次數為5次，不定期修改登錄用戶的密碼。 這種方法對一般的假黑客還是比較有效的.
Enabling Brute Force Detection In cPanel
If you are using WHM, there’s similar alternative using cPHulk.
cPHulk is a brute force protection system developped by the cPanel team and is exclusive to cPanel / WHM control panels. It has been integrated with cPanel version 11. With cPHulk, you can set a threshold for authentication attempts on services like POP3, cPanel, WHM, FTP, etc. After a certain amount of attempts, the attacker will no longer be able to authenticate.

How To Enable cPHulk
Enabling cPHulk is pretty easy. Simply log into your WHM control panel as root. From the main menu on the left, click on Security Center from the Security section.

Click on the cPHulk Brute Force Detection link at the top of the page. Now you may want to configure cPHulk before you enable it. The configuration parameters are pretty much self-explanatory so I won’t go into details about this. Basically you set the number of failed attempts before an IP or an account is blocked and you set how long you want it to be blocked.

When you’re done, simply click on the Enable button at the top.

Help Me! I Have Locked Myself Out!
I did lock myself out once. I had opened my FTP client and it tried to login automatically multiple times even though I had changed my FTP password. When I realized my FTP client had failed to authenticate it was too late: I was locked out of my own webserver.
Depending on the number of failed attempts, you could be locked out for a few minutes or for a two week period. To gain back access to your server, you can simply configure your web browser to use a proxy server. This way the incoming connection will be made from another IP address than the one blocked by cPHulk.
Once you’re logged in, go into your cPHulk panel and click on the Flush DB button. That’s it! You gained back accessed. Now be careful next time!