cPanel is showing invalid login – The IP address is blocked by cphulkd for BruteForce

cpHulk : It’s a Brute Force Protection system in a WHM/cPanel server. By enabling this feature from the WHM we can protect the server from unwanted login attempts. We can simply configure the cpHulk from the WHM panel. I got the below pasted error when I checked one server which has cPanel login issue with a client.

Error details:

# tailf /usr/local/cpanel/logs/error_log
Duplicate logaccess:  at cpsrvd-ssl line 3000
        main::badpass('faillog', 'brute force attempt (user root) has locked out IP xxx.xxx.xxx.xx...', 'skip_hulk', 1, 'msg_code', 'invalid_login') called at cpsrvd-ssl line 5790
        main::connect_cphulkd() called at cpsrvd-ssl line 5255
        main::handle_form_login() called at cpsrvd-ssl line 1131
        main::handle_one_connection() called at cpsrvd-ssl line 996
Duplicate logaccess:  at cpsrvd-ssl line 3000
        main::badpass('faillog', 'brute force attempt (user brightpub) has locked out IP xxx.xxx.xxx.xx...', 'skip_hulk', 1, 'msg_code', 'invalid_login') called at cpsrvd-ssl line 5790
        main::connect_cphulkd() called at cpsrvd-ssl line 5255
        main::handle_form_login() called at cpsrvd-ssl line 1131
        main::handle_one_connection() called at cpsrvd-ssl line 996

Do not worry about that, here is a simple script to Whitelist the IP address on cpHulk service.

/scripts/cphulkdwhitelist

Usage:

/scripts/cphulkdwhitelist IP-Address

You can simply white-list the IP address on cpHulk from the WHM control panel itself. Here is the steps to White-list and Black-list IP in cpHulked from WHM.

Step I : Login to WHM panel.
Step II : Go to,

Home >> Security Center >> cPHulk Brute Force Protection

Step III : Select “White/Black list management

cpHulk

From there, you can see the options to White/Black list IPs quickly. There is also an option to edit the entries 🙂

That’s it!

 

Related
1, Simple steps to install IonCube loader on a cPanel server
2, Simple steps to install CloudFlare plugin on cPanel server
3, Install Security Advisor Addon on WHM/cPanel server

Arunlal Ashok

DevOps (Server & Cloud infrastructure) Engineer. I'm managing Linux servers since 2012. I started this blog to share and discuss my ideas. Any questions? Write to arun (@) crybit.com

You may also like...

6 Responses

  1. Todd says:

    I have this same problem today on my site “websites-software-solutions” and just waited 20 minutes and it fixed itself. I agree whitelisting the IP is the way to go.

  2. Simphiwe Mkhize says:

    When I am trying to /scripts/cphulkdwhitelist IP-Address I get the following errer “cphulkd is not enabled”

  3. Hiren says:

    hi, I have major issue that my server disk is almost full so i want to delete some data from my server, so please help me for solving this problem, i m really worried for that, it might be cresh something. than what i do so please…

Leave a Reply

Your email address will not be published. Required fields are marked *