Bluehost Web Hosting Help

VPS or Dedicated Hosting - cPHulk Brute Force Protection

Overview

This article will cover the use of cPHulk. cPhulk is software designed to protect your server from brute force login attempts. It does this through blacklisting IP addresses that have too many failed login attempts within a short period.

ATTENTION: When enabling cPHulk it is critical that you whitelist your own IP address so that you do not block yourself from your server. If you believe you have been blocked from your server please refer to the Whitelisting in cPanel section.

Note: If you need your IP address, it can be found at www.BlueHost.com/ip

Tasks Involved

Click on any of the tasks to jump to that point in the guide.



Enable cPhulk

To enable, cPHulk follow these steps.

  1. Log in to WHM.
    The WHM login.
    The WHM login
  2. Click on Security Center.
    The WHM Security Center
    The WHM Security Center
  3. Click on the cPHulk Brute Force Protection icon.
    The cPhulk link
    The cPhulk link.
  4. Click on Enable under cPHulk is Currently Disabled.
    The Enable Link.
    The Enable Link.

The status should say cPHulk is Currently Enabled.

Whitelisting Your IP Address

These steps will explain how to whitelist an IP address. Whitelisted IP addresses will never be blocked by cPHulk.

  1. Click the White/Black list Management tab.
    White/Black list Management
    White/Black list Management
  2. Enter your IP address in the White list (Trusted IP list) entry field.
    Whitelist Entry
    Whitelist Entry
  3. Click Quick Add.

To modify multiple IPs at once, click Edit Whitelist

Whitelisting in cPanel

If you have been blocked from WHM or any other login on your server, you may still login to your Bluehost cPanel and whitelist your IP address.

Note: If you need your IP address, it can be found at www.BlueHost.com/ip

  1. Login to your Bluehost cPanel
  2. If you are not already on the hosting page, click the hosting link at the top.
  3. Click the performance link underneath the hosting tab.
  4. Click the system console link.
  5. Login with root as your username and your root password.
    Note: If you aren't sure of the root password please see: Setting your Root password
    Note: When typing in the password, the console will not act as if anything is being entered. This is done purposefully for security. Type your password carefully and hit enter as normal.
  6. Once you are logged into the console, run enter this command:
    /scripts/cphulkdwhitelist YOUR-IP
    Note: Please replace YOUR-IP with your actual IP address.
  7. Next run this command:
    mysql cphulkd -e "delete from brutes where ip='YOUR-IP'"
    Note: Please replace YOUR-IP with your actual IP address.
  8. Your IP address should now be whitelisted. Finally, enter this command to close the console. exit

Blacklisting IP Addresses

  1. Click the White/Black list Management tab.
    White/Black list Management
    White/Black list Management
  2. Enter the IP address into the Black list (Rejected IP list) entry field.
    Blacklist Entry
    Blacklist Entry
  3. Click Quick Add.

To modify multiple IPs at once, click Edit Blacklist.

Knowledgebase Article 64,247 views bookmark tags: dedicated security whm


Was this resource helpful?

Did this resolve your issue?


Please add any other comments or suggestions about this content:





Recommended Help Content

Securing a Dedicated or VPS Server

This article discusses some measures you can take to secure a Dedicated or VPS server

VPS or Dedicated Hosting - Install ClamAV

How to install ClamAV to help with virus protection.

VPS or Dedicated Hosting - Installing Java

How to install Java in a dedicated server.

Related Help Content

VPS or Dedicated Hosting - Installing Git

This is a tutorial on how to install Git onto the server.

VPS Dedicated Installing SSL

To help with installing an SSL certificate for an account on a dedicated server through the WHM

Hotlink Protection

I need to protect the /images folder to not show images when people type in the correct URL like www.mydomain.com/images/ to protect from prying eyes.

VPS or Dedicated Hosting - Using Multiple cPanel Accounts To Set Custom Nameservers

How to setup name servers for multiple cPanel accounts.

VPS or Dedicated Hosting - Assigning Dedicated IPs

How to assign a dedicated IP to a domain on a dedicated server.

VPS or Dedicated Hosting - Manage Login SSL Certificates

How to manage the SSL used for cPanel login through the WHM

VPS or Dedicated Hosting - Modify Exim Port (Mail Transfer Agent)

How to modify the Exim Port (Mail Transfer Agent) in the WHM

Error Code 500 on Dedicated and VPS Servers

This article will explain some common causes for 500 errors on Dedicated or V.P.S servers.