Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

API or other empircal means for determining if IP is blocked by LSF or Hulk

Discussion in 'Security' started by willsherwood, Sep 18, 2013.

  1. willsherwood

    willsherwood Registered

    Jun 5, 2006
    Likes Received:
    Trophy Points:
    our cpanel servers use two types of firewalls CSF/LFD which completely blocks an IP address from any access (including viewing web pages), and
    "hulk" which just blocks logging in (to email, ftp, cpanel, prot dir, etc.)

    from our (separate) support site server, we have JS to test and ascertain if the IP address the customer is viewing from is blocked via LFD (a long equation that tries to dis-ambiguate server down and slow server). Unfortunately there are no APIs that we can find to test for an IP being on the "deny" list, so this empirical method gets us 99% there, and is good enough for the effort expended. (Anyone know of a better way?)

    However we've not been able to find a way to test for an IP being on the HULK (login) block list. (again, we cannot find any APIs that our support server can cURL-check for an IP address).
    Does anyone know of an (empirical) technique to test for Hulk blocking login from a given IP?
    we've tried to think of a way to have a generic test account (that doesn't do anything or have any privs in case a hacker finds out about it), but cannot find a way to have a cURL to attempt login and determine success.

    any ideas?

  2. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Apr 11, 2011
    Likes Received:
    Trophy Points:
    cPanel Access Level:
    Root Administrator
    Hello :)

    cPhulk stores the blocked IP addresses in it's MySQL database. You could develop a script that queries the database for a list of IP addresses that have been blocked.

    Thank you.
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice