• Uncategorized
  • 4

cPanel is showing invalid login – The IP address is blocked by cphulkd for BruteForce

cpHulk : It’s a Brute Force Protection system in a WHM/cPanel server. By enabling this feature from the WHM we can protect the server from unwanted login attempts. We can simply configure the cpHulk from the WHM panel. I got the below pasted error when I checked one server which has cPanel login issue with a client.

Error details:

# tailf /usr/local/cpanel/logs/error_log
Duplicate logaccess:  at cpsrvd-ssl line 3000
        main::badpass('faillog', 'brute force attempt (user root) has locked out IP xxx.xxx.xxx.xx...', 'skip_hulk', 1, 'msg_code', 'invalid_login') called at cpsrvd-ssl line 5790
        main::connect_cphulkd() called at cpsrvd-ssl line 5255
        main::handle_form_login() called at cpsrvd-ssl line 1131
        main::handle_one_connection() called at cpsrvd-ssl line 996
Duplicate logaccess:  at cpsrvd-ssl line 3000
        main::badpass('faillog', 'brute force attempt (user brightpub) has locked out IP xxx.xxx.xxx.xx...', 'skip_hulk', 1, 'msg_code', 'invalid_login') called at cpsrvd-ssl line 5790
        main::connect_cphulkd() called at cpsrvd-ssl line 5255
        main::handle_form_login() called at cpsrvd-ssl line 1131
        main::handle_one_connection() called at cpsrvd-ssl line 996

Do not worry about that, here is a simple script to Whitelist the IP address on cpHulk service.

/scripts/cphulkdwhitelist

Usage:

/scripts/cphulkdwhitelist IP-Address

You can simply white-list the IP address on cpHulk from the WHM control panel itself. Here is the steps to White-list and Black-list IP in cpHulked from WHM.

Step I : Login to WHM panel.
Step II : Go to,

Home >> Security Center >> cPHulk Brute Force Protection

Step III : Select “White/Black list management

cpHulk

From there, you can see the options to White/Black list IPs quickly. There is also an option to edit the entries 🙂

That’s it!

 

Related
1, Simple steps to install IonCube loader on a cPanel server
2, Simple steps to install CloudFlare plugin on cPanel server
3, Install Security Advisor Addon on WHM/cPanel server

Arunlal Ashok

Sr. Linux Server Administrator. I'm managing Linux servers since 2012. I started this blog to share and discuss my ideas. Check My Profile in uPwork (oDesk) and create a job, if you need any administration help. Thanks!!

You may also like...

4 Responses

  1. Todd says:

    I have this same problem today on my site “websites-software-solutions” and just waited 20 minutes and it fixed itself. I agree whitelisting the IP is the way to go.

  2. Simphiwe Mkhize says:

    When I am trying to /scripts/cphulkdwhitelist IP-Address I get the following errer “cphulkd is not enabled”

Leave a Reply

Your email address will not be published. Required fields are marked *