Skip to main content

Unblocking cPanel/WHM Access (cPHulk Lockouts)

If you are receiving a "Permission denied" error or login timeout when accessing WHM or cPanel, you have likely triggered the built-in Brute Force Protection system called cPHulk.

Can't connect via SSH?
If cPHulk has blocked your IP entirely, SSH access might also be refused. In that case, log in using the Tilaa Video Display (Web Console) to perform the steps below.

1. Unblocking your IP via Command Line

The fastest way to regain access is to whitelist your specific IP address using the command line.

  1. Log in to your server via SSH (or Video Display) as root.
  2. Run the following command (replace with your actual public IP):
/scripts/cphulkdwhitelist 1.2.3.4

You should now be able to log in to the browser interface again.

2. Emergency: Disabling cPHulk

If whitelisting does not work, or if you are locked out due to a configuration error, you can temporarily disable the protection system entirely.

To disable cPHulk:

/usr/local/cpanel/etc/init/stopcphulkd
# OR
whmapi1 configureservice service=cphulkd enabled=0 monitored=0

To re-enable it (once you fixed the issue):

/usr/local/cpanel/etc/init/startcphulkd
# OR
whmapi1 configureservice service=cphulkd enabled=1 monitored=1

3. Preventing Future Lockouts (Whitelist)

Once you have regained access to WHM, we recommend adding your office or home IP to the permanent whitelist to prevent this from happening again.

  1. Log in to WHM.
  2. Navigate to Security Center > cPHulk Brute Force Protection.
  3. Click on the Whitelist Management tab.
  4. Add your IP address and a comment (e.g., "Office VPN").
  5. Click Add.

For more detailed information, refer to the official cPanel Documentation.