Avatar of willsherwood
willsherwood asked on

cpanel "hulk" login "firewall"

our cpanel servers use two types of firewalls  CSF/LFD which completely blocks an IP address from any access (including viewing web pages), and
"hulk" which just blocks logging in (to email, ftp, cpanel, prot dir, etc.)

from our (separate) support site server, we have JS to test and ascertain if the IP address the customer is viewing from is blocked via LFD (a long equation that tries to dis-ambiguate server down and slow server).  Unfortunately there are no APIs that we can find to test for an IP being on the "deny" list,   so this empirical method gets us 99% there, and is good enough for the effort expended.

However we've not been able to find a way to test for an IP being on the HULK (login) block list.  (again, we cannot find any APIs that our support server can cURL-check an IP address).
Does anyone know of an (empirical) technique to test for Hulk blocking login from a given IP?
we've tried to think of a way to have a generic test account (that doesn't do anything or have any privs in case a hacker finds out about it), but cannot find a way to have a cURL to attempt login and determine success.

any ideas?

thanks

(there used to be a cPanel category in EE, but cannot find it any longer)
LinuxWeb Servers

Avatar of undefined
Last Comment
willsherwood

8/22/2022 - Mon
Mazdajai

Have you examine the brute history report? If an ip address is logged on the report, I would assume it has been blocked.

http://docs.cpanel.net/twiki/bin/view/AllDocumentation/WHMDocs/CPHulk
ASKER
willsherwood

but i don't know how to circumvent cPanel's not allowing executing scripts when i try to make my own API, for example to execute this script (to be from a cURL call in order to scrape the results to find an IP addr that is blocked)

/scripts/cphulkdblacklist

thanks
ASKER
willsherwood

p.s.   i'm familiar with how to manually view the white/black lists and log from WHM
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
ASKER CERTIFIED SOLUTION
Mazdajai

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
ASKER
willsherwood

thank you
Mazdajai

Did cPanel able to help on this?
ASKER
willsherwood

still waiting...
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.