This time the attack was a bruteforce attack from Serbia, since WHMCS doesn't have built-in brute force detection nor limits it eventually lead to resource exhaustion DOS.
We have tightened the security, made appropriate reports and are planning for further enhancements to resource control and brute force detection.
Monday, March 24, 2014