cphulk invalid user cpanel

ctorres

• September 11, 2024 19:36

Hello.

I have problems with my cpanel server with cloudlinux which has imunify360 and cphulk, the cphulk is blocking access to users, how can I do to unblock them and also where I can see why, at the level of the logs appears the following:

"POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password

Can you explain to me how I can unlock an unlocked unlocked to those users.

• 

  cPRex Jurassic Moderator

  • September 11, 2024 19:59

  Hey there!  If you know the user's IP address you can use this guide to unblock them on the command line:

  https://support.cpanel.net/hc/en-us/articles/360063402573-How-to-unblock-an-IP-address-in-cPHulkd-from-the-command-line

  If you need to remove the block for an entire user, you can do that through WHM >> cPHulk Brute Force Detection under the Blacklist Management section and remove that user.

  1
• 

  ctorres

  • September 11, 2024 20:50

  how can I see from the console which are the blocked ips?

  0
• 

  ctorres

  • September 11, 2024 20:53

  you are right, use the following commands taking into account the public ip that is being blocked

  /usr/local/cpanel/scripts/hulk-unban-ip $ip # remove block
  /usr/local/cpanel/scripts/restartsrv_cphulkd # restart cphulk service

  
  can you tell me how to check the blocked ips from linux terminal?

  0
• 

  cPRex Jurassic Moderator

  • September 12, 2024 14:14

  The best way to get that information would be to use the WHM API, as this information is stored across both a database and configuration files on the server, so there isn't a way to read that info directly in a file.

  The various API commands for this work can be found here: https://api.docs.cpanel.net/openapi/whm/tag/Reporting/

  0

Please sign in to leave a comment.