cPHulk Not Always Blocking

view full story

http://forums.cpanel.net – I've been using Cpanel for a few years now and for the second time in the past month I had a brute force attack that cPHulk didn't seem to block. The brute attack was on dovecot pop3-login both times. They slam every IP on the server. I have a /25 for SSL web sites. cPHulk sends out the email like normal but doesn't seem to block the IP. In return it keep sending out the warning email causing a flood. The only reason I found these was due to the mail queue on my other mail server receiving the emails jumping to little over over 5000 within a short time. Total emails send according to t (HowTos)