cPanel login invalid while using correct username and password
Sometimes you may get login invalid error while trying to login to your cPanel account. But the username and password that you are entering is correct. This will happen because of your IP address is blocked by cphulkd for BruteForce.
What is cPHulk ?
cPhulk is a similar feature like Firewall, with cphulk cPanel will give you and extra measure of protection from attacks like bruteforce. Suppose someone is trying to compromise your server using random failed logins
So from the above description you can see that this is an important feature of cPanel/WHM so disabling this feature will not be a good idea, instead you can white-list your IP address on the BruteForce protection. So it will allow connections from your IP address.
You can see the errors related to blocked connections by cphulkd for BruteForce from the cPanel error log itself,
/usr/local/cpanel/logs/error_log
And the error will be like pasted below,
main::badpass('faillog', 'brute force attempt (user iserversupport) has locked out IP xxx.xxx.xxx.xx...', 'skip_hulk', 1, 'msg_code', 'invalid_login') called at cpsrvd-ssl line 5790 main::connect_cphulkd() called at cpsrvd-ssl line 5255 main::handle_form_login() called at cpsrvd-ssl line 1131 main::handle_one_connection() called at cpsrvd-ssl line 996
You can simply white-list the IP address on cphulkd by using the following script,
/scripts/cphulkdwhitelist
This script can be used along with the IP address that you need to white-list. See the sample command below,
/scripts/cphulkdwhitelist <IP-Address-for-whitelist>
This will allow your IP address through cphulk and now you will be able to login to the cPanel using correct password.
You can also do this from WHM. For that login to WHM and go to,
Home >> Security Center >> cPHulk Brute Force Protection
There will be options to White/Black list IP addresses on cPHulk Brute Force Protection.
If you need our help to fix any issues on your server. Please feel free to contact us, simply email to support@iserversupport.com
my ip is not static its changing always. i whitelisted ip but i got these error many times what should i do?
If IP is not static whitelist wont really work. Install a firewall to prevent bruteforce attack, also if you add ssh key you can whitelist IP using the command /scripts/cphulkdwhitelist “IP”
Thank you, it worked perfect!
I’m glad to hear that it worked worked for you :)
How and where i enter that script to whiltelist my IP
You can do it from whm or command line using ssh.
I have developed a website and when I passed cPanel details to my client, he is not able to login to cpanel and showing error “Unable to login” Please reply me.
It should be an issue with cphulk as well. Make sure the user use correct login details and allow their IP in firewall and cphulk
cant login while using correct username and password while my site is also showing 500 internal server error
I am having this problem on my web-mail whenever i want to login it’s says login invalid,i tried using outlook Microsoft word,and it always says server not found,i have tried to explain to the person who designed the website for me and he say the web mail works perfect on his laptop,we are very far away that i can’t visit the guy where he stays i want to know if i can get a great guideline to take so i can start using my email and also login and make use of the email. Thank you looking forward to receive a wonderful reply.
This should be an issue with the cphulk block, if you are not able to access website via webmail you wont be able to access via email client as well. So first find the IP address and allow it on cphulk and and firewall you are using.
Hello,
You need to know your public IP address when you add the IP whitelist cphulk.
You need to run the exact commands /scripts/cphulkdwhitelist your public ip address and all will work again. for some reason, your public IP was banned and you need to allow it through the built in cpanel firewall. Probably due to incorrect passwords or some unusual activity.
David Gawler
It could be that you are trying to log into the wrong cPanel account. Make sure you are using the correct username and password for the account you are trying to access. If you continue to have trouble, you may need to contact your hosting provider for assistance.