Leech protection detects when one login is being shared widely, which typically means a member has published their credentials.
HOW IT WORKS
It watches a password-protected directory and counts logins from distinct locations within a two-hour window. When the count exceeds your threshold, it suspends the account.
SETTING IT UP
- Protect a directory first using Directory Privacy.
- In cPanel open Leech Protection under Security.
- Browse to the directory and click it.
- Set "Number of logins allowed in a 2-hour period". Between 3 and 5 suits most cases.
- Optionally set a redirect URL for disabled users.
- Tick "Send email alert to" and enter your address.
- Optionally tick "Disable compromised accounts" to suspend automatically.
- Click Enable.
LIMITATIONS
This only applies to directories protected with cPanel Directory Privacy. It does not monitor WordPress logins or a membership plugin. For those, use the sharing controls in the membership plugin itself.
Legitimate users on mobile networks change IP address often and can trigger it, so do not set the threshold too low.
