How to protect Apache web server(w/ cPanel/DirectAdmin) from XMLRPC attacks

how to use this method to protect all the websites on an Apache web server.

On both cPanel and DirectAdmin servers running Apache, the file that we will use is /home/.htaccess Edit or create this file and add the blocking rule:

# content of the file /home/.htaccess

<Files "xmlrpc.php">

Require all denied

</Files>

 

How to rebuild corrupted userdata files in cPanel/WHM

cPanel uses userdata files to keep information about addon domains, parked domains, IPs, PHP versions used by accounts etc. If you came to the conclusion that the cPanel userdata files are corrupted, you can rebuild them. The process detailed below will be possible only if you have a valid httpd.conf file.

How to rebuild corrupted userdata files in cPanel/WHM

1. Log into your cPanel/WHM server with the root credentials

2. Move the existing userdata files to a new location. Use:

mv /var/cpanel/userdata /var/cpanel/userdata-original

3. Re-create the userdata directory with this command:

mkdir /var/cpanel/userdata 

How to install Ajenti control panel.

Ajenti is a modern, lightweight, open source, web-based control panel for managing virtual private servers (VPS).

Using Ajenti, an administrator can control a Linux server from a browser with its responsive web interface, which otherwise requires the use of a terminal. Optionally, one can extend the functionalities of Ajenti using few existing plug-ins or develop a custom plugin from scratch using Python.

Supported operating systems:

• Debian 9 or later
• Ubuntu Bionic or later
• CentOS 8 or later
• RHEL 8 or later

Other Linux-based systems might work, but you’ll have to use manual installation method.

Automatic Installation

curl https://raw.githubusercontent.com/ajenti/ajenti/master/scripts/install.sh | sudo bash -s -

SolusVM Master on CentOS 7

When moving a master from one server to another I came across a few issues with the new (v4) installer for SolusVM and CentOS 7.

The server was loaded with the minimal install of CentOS, and there is no specific information on SolusVM’s site for dependencies.

The first time I ran the install script, it never stated that there was a problem, but the back end web server was not accepting connections.

Long story short, before you run the SolusVM installer for CentOS 7, run the following command to ensure that the software needed is in place:

How to block an IP?

If you want to stop someone from visiting your website, you can use the IP Blocker interface within cPanel which allows you to block access to your site for one or more IP addresses or fully qualified domain names (FQDNs).

You can easily block an IP in cPanel by following these steps:

1) Log into cPanel.
2) Look for the “SECURITY” section and click on “IP Blocker” icon.
3) You can add a single IP, an IP range or a domain name to the block list, click the “Add” button to set the block.
4) If you scroll down on the same page, you’ll see a list of all the blocked IPs, from here you can also delete an IP from the block list.

Rock on.

How to ban any IP Address via .htaccess

If someone is trying to hack your website or you want to block their IP Address, you can add this line to your .htaccess file.

order allow,deny
deny from IP-ADDRESS
allow from all

Replace “IP-ADDRESS” with the IP Address you want to block.

Rock on.