Symptoms
When a cPanel port such as 2083, 2087, or 2096 is blocked by the firewall, the service can still be accessed using the service subdomain (e.g. cpanel.domain.com).
Description
Service subdomain requests are accepted by Apache on ports 80 and 443 rather than the respective cPanel port.
We've opened an internal case for our development team to investigate this further. For reference, the case number is CPANEL-47331. Follow this article to receive an email notification when a solution is published in the product.
Workaround
Disable service subdomains or use Host Access Control to block access.
