How do I scan a website with WHM?

To scan a website for security issues or vulnerabilities using WHM, you can utilize the built-in tools and features available in WHM or cPanel. Here’s how you can do it:

Method 1: Use the cPanel Security Tools

1. Log into WHM:
• Open your browser and go to https://yourserverIP:2087.
• Enter your WHM credentials.
2. Access cPanel Accounts:
• In WHM, navigate to Account Information > List Accounts.
• Locate the account associated with the website you want to scan and click on the cPanel icon next to it to log into that specific cPanel account.
3. Use cPanel Security Features:
• Once in cPanel, you can use various security tools:
• SSL/TLS Status: Check if SSL certificates are correctly installed.
• IP Blocker: Block suspicious IP addresses.
• Virus Scanner: Use the built-in virus scanner (if available) to scan files for malware.
• Softaculous: If installed, Softaculous can help identify outdated or vulnerable scripts.

Method 2: Install Security Plugins

You can also install security plugins that provide more comprehensive scanning features:

1. Install Security Plugins via cPanel:
• In the cPanel interface, go to Softaculous Apps Installer (if available).
• Search for security plugins like Wordfence (for WordPress) or ImunifyAV.
• Install the plugin and follow the instructions to run a security scan.

Method 3: Use WHM Security Features

1. Log into WHM:
• As above, access WHM through your server IP.
2. Check Security Advisor:
• Navigate to Security Center > Security Advisor.
• This tool provides an overview of potential security issues and configurations that may need attention.
3. Use ConfigServer Security & Firewall (CSF):
• If you have CSF installed, you can check for security issues, blocked IPs, and overall server security.
• Go to Plugins > ConfigServer Security & Firewall in WHM and review the logs and alerts.

Method 4: Manual File Scans

1. Access File Manager:
• Log into the cPanel account linked to the website.
• Use the File Manager to manually inspect files for suspicious content.
2. Check Log Files:
• Look into the Error Log and Raw Access Logs in cPanel to identify unusual activity.

Summary

While WHM doesn’t have a direct website scanning feature, you can effectively scan and check websites by logging into cPanel and utilizing the security tools available there. Additionally, installing security plugins and using WHM’s built-in security features can help enhance your website’s security posture.