How to remove ipaddress block from new cphulk

dukemhr

Registered
Mar 22, 2009
1
0
51
Hi ,
With the old cphulk I just went to the dbase and remove the ip address that was been blocked, for clients who had forgotten their passwords and I do not want to put them on a white list. Now it appears to be in a new table iplists. Is there some information for this new table so I know what it is doing, plus why is the ip address not used?
Also is there anyway to make it block for more than one day, as the hackers just come back after one day and try again, 2 weeks was really good.
Thanks
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,908
2,216
463
Hello :)

It's by design the IP addresses are unreadable in the database. The "Blacklist Management" tab in the cPHulk interface allows you to remove an IP address from the interface. You can also unblock an IP address from the iptables block out with a command such as:

Code:
/scripts/hulk-unban-ip IP-HERE
You can find updated documentation on cPHulk at:

cPHulk Brute Force Detection

Thank you.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,908
2,216
463
You can disable cphulkd completely by using the following commands:

Code:
for i in `ps aux | grep -i "cphulkd - process" | awk {'print $2'}` ;do kill -9 $i ;done
/usr/local/cpanel/bin/cphulk_pam_ctl --disable
Thank you.