cPHulk is a server-side brute-force protection system in WHM that watches for repeated failed logins to cPanel, webmail, FTP, and SSH. When someone guesses passwords too many times, cPHulk temporarily blocks that IP to stop the attack.
On shared hosting this runs at the server level and is managed by Toshost, so there's nothing to configure. The main thing to know: if you mistype your password several times, cPHulk may lock out your own IP for a while.
- Wait a few minutes and try again with the correct password.
- If you're still locked out, note your public IP address.
- Open a ticket with that IP and we'll release the block.
Using a password manager helps you avoid accidental lockouts in the first place.
