Skip to main content

Host Access Control slow fetching IP addresses

Comments

11 comments

  • cPRex Jurassic Moderator
    Hey there! That page just reads from /etc/hosts.allow and /etc/hosts.deny, so I don't know why it would be taking so long to load. If you run the following command, do you see anything holding that file open? lsof | grep allow
    If not, do you see anything in the cPanel error log at /usr/local/cpanel/logs/error_log while accessing that page of the interface?
    0
  • coffeeboyuk
    Hi, I see something here but don't understand it. Net::SSLeay error left in queue from previous call: "error:140E0197:SSL routines:SSL_shutdown:shutdown while in init"" (336462231) at /usr/local/cpanel/Cpanel/NetSSLeay.pm line 28. Net::SSLeay error left in queue from previous call: "error:140E0197:SSL routines:SSL_shutdown:shutdown while in init"" (336462231) at /usr/local/cpanel/Cpanel/NetSSLeay.pm line 28. [2023-08-01 20:21:21 +0100] info [whostmgrd] Successfully verified signature for cpanel (key types: release). [2023-08-01 20:21:29 +0100] warn [whostmgrd] Timed out (2 seconds) while reading from socket. [2023-08-01 20:21:29 +0100] info [whostmgrd] Brute force checking was skipped because cphulkd failed to process "root"" from "31.94.57.221"" for the "system"" service. [2023-08-01 20:21:29 +0100] warn [whostmgrd] Timed out (2 seconds) while reading from socket. [2023-08-01 20:21:29 +0100] info [whostmgrd] Brute force checking was skipped because cphulkd failed to process "root"" from "31.94.57.221"" for the "system"" service. [2023-08-01 20:21:29 +0100] warn [whostmgrd] Timed out (2 seconds) while reading from socket. [2023-08-01 20:21:29 +0100] info [whostmgrd] Brute force checking was skipped because cphulkd failed to process "root"" from "31.94.57.221"" for the "system"" service.
    0
  • coffeeboyuk
    By the way, running the command I see nothing returning. Just to rerun things, I went into host access control to see if the error logs generated and I see these lines: [2023-08-01 21:09:37 +0100] info [cpsrvd] version 11.112.0.5 online [2023-08-01 21:10:46 +0100] info [whostmgrd] Successfully verified signature for cpanel (key types: release). [2023-08-01 21:10:52 +0100] warn [whostmgrd] Timed out (2 seconds) while reading from socket. [2023-08-01 21:10:52 +0100] info [whostmgrd] Brute force checking was skipped because cphulkd failed to process "root"" from "31.94.57.221"" for the "system"" service. [2023-08-01 21:10:54 +0100] warn [whostmgrd] Timed out (2 seconds) while reading from socket. [2023-08-01 21:10:54 +0100] info [whostmgrd] Brute force checking was skipped because cphulkd failed to process "root"" from "31.94.57.221"" for the "system"" service. [2023-08-01 21:10:54 +0100] warn [whostmgrd] Timed out (2 seconds) while reading from socket. [2023-08-01 21:10:54 +0100] info [whostmgrd] Brute force checking was skipped because cphulkd failed to process "root"" from "31.94.57.221"" for the "system"" service. [2023-08-01 21:10:54 +0100] warn [whostmgrd] Timed out (2 seconds) while reading from socket. [2023-08-01 21:10:54 +0100] info [whostmgrd] Brute force checking was skipped because cphulkd failed to process "root"" from "31.94.57.221"" for the "system"" service. Is there a problem somewhere? Why is it saying failed to process and why is there a time out socket issue?
    0
  • cPRex Jurassic Moderator
    Just as a test, can you try disabling cPHulk and see if the page speed increases?
    0
  • coffeeboyuk
    No difference. By the way, I'm using AlmaLinux v8.8.0 STANDARD kvm cPanel Version 112.0.5 Any ideas? By the way, looking at the logs, I don't see the error message generated.
    0
  • cPRex Jurassic Moderator
    I don't have any other ideas on my end, so it would likely be best to create a ticket with our team so we can check it out.
    0
  • coffeeboyuk
    OK. will do it now
    0
  • cPRex Jurassic Moderator
    Let me know that ticket number once you get it so I can follow along.
    0
  • coffeeboyuk
    Ticket number is #95100372
    0
  • coffeeboyuk
    By the way, when I go to cPHulk Brute Force Protection and click on history, that is slow fetching information too, although the page loads but it's slow fetching data. But after a while it seems to load fast, I assume it's because it from cache.
    0
  • cPRex Jurassic Moderator
    I see Natasha was able to find a very large amount of nftables rules that would explain the slowness.
    0

Please sign in to leave a comment.