Security and SSL
Leech Protection: scope and compatibility with LiteSpeed
Leech Protection is a cPanel feature that detects an unusual number of logins with the same credential to password-protected directories. It can redirect or suspend users when they exceed the configured threshold.
It is not compatible with LiteSpeed Web Server, according to the cPanel documentation. If your service uses LiteSpeed, do not assume that this protection is working just because an option appears or an old configuration is still there.
On compatible servers
It is configured per directory, with a maximum number of logins over a two-hour period, a redirect destination and optional alerts. Check normal usage before enabling automatic suspension: several legitimate requests or an integration can increase activity.
Exceeding a threshold does not prove on its own that someone has shared the password. Review the logs and the context before removing a person's access.
How to protect access on your service
Use Directory Privacy with HTTPS and individual users when you need a web access barrier. For sessions, roles, login attempt limits and auditing, review the application's authentication features.
If you suspect a credential has been shared or stolen, change the affected password, remove unnecessary users and review the source. Ask support which measures are compatible with the server before relying on a legacy tool.
You may also find useful
- Change the main cPanel, FTP and SSH password Change the hosting's main credential and check which connections need updating afterwards.
- Exclude a directory or file when protecting a directory with a username and password Shows how to exclude a specific file from basic authentication with a Require rule in .htaccess with...
- Recover cPanel access and password View the hosting details or set a new password from the client area, and check which accounts are af...
- What to do about a suspicious login alert for cPanel or email Helps you check an unusual login to cPanel or email, tell legitimate activity apart and secure crede...
Something wrong or out of date? Tell us and we will review it.