Help I have been locked out by the brute force sistem.

[novice07]

I can't log in in WHM, even from my server's keyboard. Cphulkd Brute force protection is preventing access to my WHM account. I can;t login , all I get is Brute force protection, this account is currentlu locked out....... wait 10 minutes and try again, I did wait for half an hour and I still get the same message. Since I can't login WHM I can't disable the brute force protection.

Even more this burte force sistem has locked me out from loging on to Linux.
I had to login in single mode and reset my password with the passwd command.
Each time I try to login in to WHM I get locked out of my server if I restart the machine and each time I have to reset the password or else I am not able to login to Linux. All this after I input the wrong password for a Cpanel account, it locked all the accounts on the server including the root account.

Is this normal ? How can I disable the brute force sistem from outside WHM.

[raselaiub]

Hi,

Yes, you are having this problem since the brute force protection is enabled in your server. You can disbale this following those steps: WHM >> Security >> Security Center >> cPHulk Brute Force Protection.


Good luck!

[joand]

I am having the same problem. The instructions you gave are for disabling it from within WHM. However the problem is that we cannot get into WHM due to the brute force protection.

[thobarn]

Hi

if you can still ssh to the server login as root and type the following at the prompt

mysql

prompt should change to mysql

mysql> use cphulkd;

you will see...database changed

mysql>BACKUP TABLE `brutes` TO '/path/to/backup/directory';

backup first!

mysql> SELECT * FROM `brutes` WHERE `IP`='xxx.xxx.xxx.xxx';

insert your IP instead xxx.xxx.xxx.xxx. Is your IP there? If so,

mysql> DELETE FROM `brutes` WHERE `IP`='xxx.xxx.xxx.xxx';

that should remove your IP from the table and you will see that in mysql reply. Finally

mysql>quit

should return you to your usual prompt. HTH

` symbols are backticks, Above Caps Lock and Tab keys on a uk-gb keyboard, in some setups you can omit them
' symbol is the usual single quote
remember ; symbol after each line before pressing enter when you are in mysql prompt

[halyconprime]

hat dont fricking work either since it locks SSH!

[allpar]

But it's great advice for those of us who DO have access to SSH via a second server or hosting account.

[GandalfDDUK]

THANK YOU. You are a life saver.

[thobarn]

hat dont fricking work either since it locks SSH!

Hence the post starts "if you can still ssh...". If you cannot access WHM and neither SSH then you will need physical access and a keyboard

[viraj]

cpHulk is good in terms of security. I'd recommend accessing WHM or SSH from a different network & flushing the database by using either of the methods specified above.

[crazyaboutlinux]

for security its recommended to keep enabled this protection.

Yes, you are having this problem since the brute force protection is enabled in your server. You can disbale this following those steps: WHM >> Security >> Security Center >> cPHulk Brute Force Protection.

just enter your IP address as Trusted Hosts List in brute force protection & you won't be blocked again.

i also have the same problem before 6th months & i did this after then i never blocked again by brute force

[chandro]

Hi

if you can still ssh to the server login as root and type the following at the prompt

mysql

prompt should change to mysql

mysql> use cphulkd;

you will see...database changed

mysql>BACKUP TABLE `brutes` TO '/path/to/backup/directory';

backup first!

mysql> SELECT * FROM `brutes` WHERE `IP`='xxx.xxx.xxx.xxx';

insert your IP instead xxx.xxx.xxx.xxx. Is your IP there? If so,

mysql> DELETE FROM `brutes` WHERE `IP`='xxx.xxx.xxx.xxx';

that should remove your IP from the table and you will see that in mysql reply. Finally

mysql>quit

should return you to your usual prompt. HTH

` symbols are backticks, Above Caps Lock and Tab keys on a uk-gb keyboard, in some setups you can omit them
' symbol is the usual single quote
remember ; symbol after each line before pressing enter when you are in mysql prompt

this work for me, thanks a lot.