cPHulk Brute Force Protection

cPHulk provides protection from brute force attacks against your web services.

cPHulk is Enabled cPHulk is Disabled

Configuration Settings

Username-based Protection

Username-based protection tracks login attempts for user accounts. When disabled, cPHulk will not lock user accounts, but existing account locks will remain.

IP Address-based Protection

IP Address-based protection tracks login attempts from specific IP addresses. When disabled, cPHulk will not block IP addresses, but existing blocks will remain.

Warning: The command must complete within 15 seconds to avoid a timeout.

The following variables may be used in commands:

  • %exptime% - The Unix time when brute force protection will release the block
  • %max_allowed_failures% - Maximum allowed failures to trigger this type (excessive or non-excessive failures)
  • %current_failures% - Number of current failures
  • %excessive_failures% - 0 (not an excessive login failure) or 1 (an excessive login failure)
  • %reason% - The reason for the block
  • %remote_ip% - The blocked IP address
  • %authservice% - The last service to request authentication (for example, webmaild)
  • %user% - The last username to request authentication
  • %logintime% - The time of the request
  • %ip_version% - The IP version (4 or 6)

One-day Blocks
Warning: The command must complete within 15 seconds to avoid a timeout.

The following variables may be used in commands:

  • %exptime% - The Unix time when brute force protection will release the block
  • %max_allowed_failures% - Maximum allowed failures to trigger this type (excessive or non-excessive failures)
  • %current_failures% - Number of current failures
  • %excessive_failures% - 0 (not an excessive login failure) or 1 (an excessive login failure)
  • %reason% - The reason for the block
  • %remote_ip% - The blocked IP address
  • %authservice% - The last service to request authentication (for example, webmaild)
  • %user% - The last username to request authentication
  • %logintime% - The time of the request
  • %ip_version% - The IP version (4 or 6)

Login History
Notifications

Note: Users can enable login notifications in the Contact Information area inside of cPanel.

Whitelist

Note: IP addresses on the whitelist can always log in to your server.

You may include an optional comment with each IP address.

Example: 169.254.1.1 # Comment for this IP address.

You can also paste in the contents of a previously downloaded whitelist.

Displaying 0 to 0 out of 0 records.

Displaying 0 records out of 0 records.

IP Address Comment Actions
Loading whitelist data … The whitelist is empty. No whitelist entries match the filter.

Blacklist

Note: IP addresses on the blacklist can never log in to your server.

You may include an optional comment with each IP address.

Example: 169.254.1.1 # Comment for this IP address.

You can also paste in the contents of a previously downloaded whitelist.

Displaying 0 to 0 out of 0 records.

Displaying 0 records out of 0 records.

IP Address Comment Actions
Loading whitelist data … The whitelist is empty. No whitelist entries match the filter.

Countries

Country Name Status
Afghanistan (AF)
Albania (AL)
Algeria (DZ)
American Samoa (AS)
Andorra (AD)
Angola (AO)
Anguilla (AI)
Antarctica (AQ)
Antigua and Barbuda (AG)
Argentina (AR)
Armenia (AM)
Aruba (AW)
Australia (AU)
Austria (AT)
Azerbaijan (AZ)
Bahamas (BS)
Bahrain (BH)
Bangladesh (BD)
Barbados (BB)
Belarus (BY)
Belgium (BE)
Belize (BZ)
Benin (BJ)
Bermuda (BM)
Bhutan (BT)
Bolivia (BO)
Bosnia and Herzegovina (BA)
Botswana (BW)
Bouvet Island (BV)
Brazil (BR)
British Antarctic Territory (BQ)
British Indian Ocean Territory (IO)
British Virgin Islands (VG)
Brunei (BN)
Bulgaria (BG)
Burkina Faso (BF)
Burundi (BI)
Cambodia (KH)
Cameroon (CM)
Canada (CA)
Cape Verde (CV)
Cayman Islands (KY)
Central African Republic (CF)
Chad (TD)
Chile (CL)
China (CN)
Christmas Island (CX)
Cocos [Keeling] Islands (CC)
Colombia (CO)
Comoros (KM)
Congo [DRC] (CD)
Congo [Republic] (CG)
Cook Islands (CK)
Costa Rica (CR)
Croatia (HR)
Cuba (CU)
Curaçao (CW)
Cyprus (CY)
Czech Republic (CZ)
Denmark (DK)
Djibouti (DJ)
Dominica (DM)
Dominican Republic (DO)
East Timor (TL)
Ecuador (EC)
Egypt (EG)
El Salvador (SV)
Equatorial Guinea (GQ)
Eritrea (ER)
Estonia (EE)
Ethiopia (ET)
Falkland Islands [Islas Malvinas] (FK)
Faroe Islands (FO)
Fiji (FJ)
Finland (FI)
France (FR)
French Guiana (GF)
French Polynesia (PF)
French Southern Territories (TF)
Gabon (GA)
Gambia (GM)
Georgia (GE)
Germany (DE)
Ghana (GH)
Gibraltar (GI)
Greece (GR)
Greenland (GL)
Grenada (GD)
Guadeloupe (GP)
Guam (GU)
Guatemala (GT)
Guernsey (GG)
Guinea (GN)
Guinea-Bissau (GW)
Guyana (GY)
Haiti (HT)
Heard Island and McDonald Islands (HM)
Honduras (HN)
Hong Kong (HK)
Hungary (HU)
Iceland (IS)
India (IN)