How To Disable cPHulk and Flush Blocked IPs By SSH.

cPHulk Brute Force Protection is a crucial security feature that enhances the security of your WHM. Its feature prevents infamous IPs from brute-forcing their way into your WHM. Moreover, cPHulk disables FTP, SSH, and IMAP/POP3 logins for IPs that exceed a certain threshold of unsuccessful login attempts.

Sometimes you might lock yourself out of WHM, but you can always regain access by shutting cPHulk for a short while and using SSH to flush out its database.

NOTE: You require root access to carry out the following operations.

If you are blocked out of access to SSH, then access it from another IP.

By running the below given command you can temporarily cease cPHulk and access WHM.

/usr/local/cpanel/etc/init/stopcphulkd stop

You can flush cPHulk’s tables to wipe out all the blocked IPs by using the following commands. Click  How To  for guide on deleting a single ip.

Here our concern lies with two tables namely, brutes & logins.

1. Log into your server with SSH and then MySQL

[root@yourserver /]#mysql

2. Connect to cPHulk’s MySQL database.

mysql> connect cphulkd

3. mysql>delete from brutes;

4. mysql>delete from logins;

5. mysql> quit

That’s all !