Mobile app version of vmapp.org
Login or Join
Michele947

: WHM Root Password Stops Working I have WHM hosted on a virtual-dedicated Linux Enterprise Centos 5 server hosted at iWeb. Now and then my root password will stop working. I will get a red

@Michele947

Posted in: #Centos #Linux #Whm

I have WHM hosted on a virtual-dedicated Linux Enterprise Centos 5 server hosted at iWeb.

Now and then my root password will stop working. I will get a red message saying: "The login is invalid."

The problem is that I know I have the right password. I can login via ssh and change the root password using "scripts/chpass root newpassword" and that won't solve the problem.

I suspected it might have to do with cpHulk brute force protection. So, again via SSH, I reset the brutes and logins MySQL tables. This does not solve the problem.

The ONLY way I found to solve the problem is to "re-initialize the smart layer" on my virtual-dedicated server.

10.02% popularity Vote Up Vote Down


Login to follow query

More posts by @Michele947

2 Comments

Sorted by latest first Latest Oldest Best

 

@Si4351233

The problem seems to have been resolved.

I was going through the logs and noticed the server was under constant root login attack.

I have installed DenyHosts and denied SSH login with passwords. The problem has not happened since then.

I was shocked to see how many foreign IP addresses (from Russia, China, etc.) were trying to root login to my server!

10% popularity Vote Up Vote Down


 

@Courtney195

You are right. This behavior is very similar when cPHulk Brute Force Protection blocks your IP address or the account.

If only your IP address is blocked then it is easy to get access back by switching to another IP address. If that's not an option then another solution is to whitelist your IP address via SSH,

/scripts/cphulkdwhitelist x.x.x.x


Ref. cPHulk Brute Force Protection :: manage whitelists in the command line

I would also suggest you to go through your cpHulk settings and configure it by considering this kind of situation.
Keep Maximum Failures By Account higher than Maximum Failures Per IP. So there are more chances to get the access back only by switching the IP address.

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme