Things like this are common…. someone tries the wrong email password or is convinced that the password they are using for their cPanel is the correct one… but it is not! and cPHulk marks the IP.
We will obviosly need another IP or another server and SSH to do this:
/usr/local/cpanel/etc/init/stopcphulkd stop
Now we can enter WHM and FLUSH the cPHulk DB… we can also do this from the command line:
mysql cphulkd
delete from brutes;
delete from logins;
But we will need the mysql acces…. I alwasy go with the WHM Flush option.
It saved me many times :S
Esto suele ocurrir… alguien trata de revisar / enviar correos con la contraseña equivocada o intenta ingresar al servidor convencido/a de que la contraseña esta bien… pero no! y el CPHulk marka la IP.
Obviamente tenemos que tener acceso SSH desde otra IP o servidor. Ingresamos y en el shell ponemos:
/usr/local/cpanel/etc/init/stopcphulkd stop
Ahora podemos ingresar al WHM y darle un FLUSH a las reglas. También podemos hacer esto vía shell con:
mysql cphulkd
delete from brutes;
delete from logins;
Pero necesitaríamos el acceso a Mysql… yo prefiero hacerlo con WHM.
Espero les sirva. A mi me salvó varias veces :S
From several articles/threads on the internet, this was the only command that really worked to stop cpHulk.
Thank you, saved my butt! My new hetzner server blocked me for no reason.
Kind regards,
Deian
Thanks a lot for tutorial… you saved me from mess i have enabled CPHULK while initial server setup and i wasn’t able to login afterwords but this guide saved me…