breakout (cpanel) to include whm and webmail attempts
Posted: 02 Feb 2009, 22:36
x.x.x.x # lfd: 5 (cpanel) login failures from x.x.x.x in the last 300 secs - Mon Jan 19 20:06:44 2009
Would it be possible to know if this was an actual /cpanel or :2083 attempt vs. webmail or whm? This could help with overall granularity and deciding on what to set as permanent blocks or temp blocks, thanks.
Would it be possible to know if this was an actual /cpanel or :2083 attempt vs. webmail or whm? This could help with overall granularity and deciding on what to set as permanent blocks or temp blocks, thanks.