API returns 400 error after enabling cPanel Account Protection with Imunify360

sarat beer

• April 17, 2025 07:29

Hi​
Description: After enabling cPanel Account Protection via Imunify360, our API calls to the cPanel server are returning a 400 Bad Request error. We've already whitelisted the API server's IP address using the appropriate command.​

However, the issue persists. The access logs show entries like:​

[Date and Time] "GET /json-api/create_user_session?api.version=1&user=[username]&service=cpaneld HTTP/1.1" 400 ...
 

The WL:"0" indicates that the IP is not recognized as whitelisted. We've also ensured that the WebShield service is active.​

Despite these measures, the API calls continue to fail with a 400 error. We suspect that Imunify360's WebShield might still be blocking or challenging the requests.​

Request:

Could you please assist in identifying why the whitelisted IP is not being recognized and why the API calls are failing? Any guidance on additional configurations or steps to resolve this issue would be greatly appreciated.

• 

  cPRex Jurassic Moderator

  • April 18, 2025 14:29

  Hey there!  Sorry about the delay in this reply, but I wanted to check with the Imunify team first before I recommended anything.  They let me know that they don't recommend enabling the panel_protection feature if there are any automated queries to ports 2083 or 2087. 

  0

Please sign in to leave a comment.