How to remove ipaddress block from new cphulk

dukemhr

• February 28, 2015 20:21

Hi , With the old cphulk I just went to the dbase and remove the ip address that was been blocked, for clients who had forgotten their passwords and I do not want to put them on a white list. Now it appears to be in a new table iplists. Is there some information for this new table so I know what it is doing, plus why is the ip address not used? Also is there anyway to make it block for more than one day, as the hackers just come back after one day and try again, 2 weeks was really good. Thanks

• 

  cPanelMichael

  • March 02, 2015 14:31

  Hello :) It's by design the IP addresses are unreadable in the database. The "Blacklist Management" tab in the cPHulk interface allows you to remove an IP address from the interface. You can also unblock an IP address from the iptables block out with a command such as:
  /scripts/hulk-unban-ip IP-HERE
  You can find updated documentation on cPHulk at: cPHulk Brute Force Detection Thank you.

  0
• 

  WebHostPro

  • March 25, 2015 21:54

  Tried that still blocked, how to remove any blocks by CPhulk? I think there is a mysql thing that needs to be done. And why doesn't the docs show you how to remove blocks and remove the software. The whitelist does not remove anything. So frustrating.

  0
• 

  cPanelMichael

  • March 26, 2015 12:23

  You can disable cphulkd completely by using the following commands:
  for i in `ps aux | grep -i "cphulkd - process" | awk {'print $2'}` ;do kill -9 $i ;done /usr/local/cpanel/bin/cphulk_pam_ctl --disable
  Thank you.

  0

Please sign in to leave a comment.