cPanel is showing invalid login – The IP address is blocked by cphulkd for BruteForce

cpHulk : It’s a Brute Force Protection system in a WHM/cPanel server.

By enabling this feature from the WHM we can protect the server from unwanted login attempts.

In this article I am explaining the steps to whitelist your IP address on cPanel’s cphulkBrute Force Protection system.

We can simply configure the cpHulk from the WHM panel. I got the below pasted error when I checked one server which has cPanel login issue with a client.

Error details:

# tailf /usr/local/cpanel/logs/error_log
Duplicate logaccess:  at cpsrvd-ssl line 3000
        main::badpass('faillog', 'brute force attempt (user root) has locked out IP xxx.xxx.xxx.xx...', 'skip_hulk', 1, 'msg_code', 'invalid_login') called at cpsrvd-ssl line 5790
        main::connect_cphulkd() called at cpsrvd-ssl line 5255
        main::handle_form_login() called at cpsrvd-ssl line 1131
        main::handle_one_connection() called at cpsrvd-ssl line 996
Duplicate logaccess:  at cpsrvd-ssl line 3000
        main::badpass('faillog', 'brute force attempt (user brightpub) has locked out IP xxx.xxx.xxx.xx...', 'skip_hulk', 1, 'msg_code', 'invalid_login') called at cpsrvd-ssl line 5790
        main::connect_cphulkd() called at cpsrvd-ssl line 5255
        main::handle_form_login() called at cpsrvd-ssl line 1131
        main::handle_one_connection() called at cpsrvd-ssl line 996

Do not worry about that, here is a simple script to Whitelist the IP address on cpHulk service.

/scripts/cphulkdwhitelist

Usage:

/scripts/cphulkdwhitelist IP-Address

Dockerize your NodeJS app with Nginx as reverse proxy

You can simply white-list the IP address on cpHulk from the WHM control panel itself. Here is the steps to White-list and Black-list IP in cpHulked from WHM.

First Step: Login to WHM panel.

Second Step: Go to,

Home >> Security Center >> cPHulk Brute Force Protection

Third Step: Select “White/Black list management

cpHulk

From there, you can see the options to White/Black list IPs quickly. There is also an option to edit the entries 🙂

That’s it!

 

Related
1, Simple steps to install IonCube loader on a cPanel server
2, Simple steps to install CloudFlare plugin on cPanel server
3, Install Security Advisor Addon on WHM/cPanel server

Post navigation

Arunlal Ashok

Operations Engineer at Endurance International Group. Linux lover. Like to play on Linux console. I started this blog to share and discuss Linux thoughts.

Always happy for an open discussion! Write to arun (@) crybit (dot) com. Check about me for more details. About this blog and our strong members, check The team CryBit.com
We like to travel. Our travelogues are published at Trip Mentor

6 thoughts on “cPanel is showing invalid login – The IP address is blocked by cphulkd for BruteForce

  1. I have this same problem today on my site “websites-software-solutions” and just waited 20 minutes and it fixed itself. I agree whitelisting the IP is the way to go.

  2. hi, I have major issue that my server disk is almost full so i want to delete some data from my server, so please help me for solving this problem, i m really worried for that, it might be cresh something. than what i do so please…

Leave a Reply

Your email address will not be published. Required fields are marked *