Quote:
Originally Posted by James
We have turned off default FTP access for main cPanel admin accounts on all our shared web hosting servers because a sustained FTP brute force attack was targeting our shared servers. During security audit our Admins have noticed that number of malicious scripts were uploaded via FTP on the server using legit cPanel login details and the account owners were not even aware of such incidence.
Usually customers using weak FTP passwords are more susceptible to such attacks. We can change the FTP port but its not going to solve the problem. We strictly recommend all our clients to use strong FTP passwords. A strong password comprises of upper case, lower case, numeric and special characters. You should use the combination of these characters to build strong passwords for your FTP accounts.
There is no need to change your cpanel login password as FTP access has been disabled for the master cPanel login username.
|
Thanks for the info James