How to export all failed IPs from cpHulk into txt/csv?

CrazySerb

• January 28, 2022 12:10

How do I export a list of all the IPs from History Reports section of cpHulk? I've got tens of thousands of failed logins / IPs listed in there from all kinds of random countries (obvious brute force login attempts), and going page by page and copying those IPs would take, oh, I dunno, a month or two each time. Is there a way to export this list into a TXT or CSV file so that I can just import them into the Firewall / cpHulk blacklist easily somehow? Obviously a nice little checkbox column next to them all would be ideal, or at least paging options higher than 100 items per page (1,000 items per page would suffice, I'd think). Any SSH commands I could use to export these lists somehow? As this list is useless to me right now since it takes so much manual time to do anything with it....

• 

  cPRex Jurassic Moderator

  • January 28, 2022 19:12

  Hey there! This is something you should bring up to the CSF team at Technical Support as we don't create the plugin or interface on our end. You can access the deny list at /etc/csf/csf.deny as that gives the IP address, service that blocked it, reason, country of origin, and time - using that flat file might be easier for your processing than the interface.

  0
• 

  phil99

  • January 30, 2022 17:55

  For exporting the list, have a look at the WHM API1 functions: /usr/sbin/whmapi1 get_cphulk_failed_logins | awk '$0 ~ /ip:/ {print $2}' > file.txt
  

  0

Please sign in to leave a comment.