cPanel VPS Server Cannot Login as root

I was worried the server was hacked, I was logged in already as root but couldn't login to CPanel or a new SSH session.  I even reset the password from the shell and it did not work still.

The reason is CPanel Hulk, it detected a brute-force attack so it locked down the root account entirely even from the correct password.  According to cPanel the best way around this is to whitelist your IP.

http://forums.cpanel.net/f5/password-not-working-whm-cpanel-root-administrator-297262.html

I was aware of CPanel Hulk but didn't know it completely locks an account even if the password is correct from non-offending IPs so this is something to be aware of, someone could potentially create a denial of service against any of your services/accounts just be intentionally bruteforcing them.

The most practical quick way is to just disable cpHulk:

http://realtechtalk.com/Disable_cphulk_in_CPanel_if_you_cant_login_even_with_the_right_password-1589-articles


Tags:

cpanel, vps, server, login, rooti, hacked, logged, couldn, ssh, reset, password, shell, hulk, detected, brute, whitelist, ip, http, forums, whm, administrator, html, didn, locks, offending, ips, potentially, intentionally, bruteforcing, disable, cphulk, realtechtalk, disable_cphulk_in_cpanel_if_you_cant_login_even_with_the_right_password, articles,

Latest Articles

  • Cisco Unified Communications Manager / CUCM IP 8.6,10,12 Install Error Solution
  • Ubuntu Debian Mint Linux SSHD OpenSSH Server Not Starting After Reboot Solution
  • nmap how to scan for all ports and not just the 1000 most common ports
  • Windows 7,8,10 and Server 2008, 2012, 2016, 2019 Read Only Attribute Won't Go Away
  • bind / named how to make a wildcard record and retain defined A records
  • Cisco Unified Communications Manager 12 Install Errors on Proxmox/KVM
  • Local Vs Universally Administered MAC Address NIC Refuses to come up
  • Cisco Unified Communications Manager 12 CUCM 12 - How To Enable Video Calling
  • Windows 7, 8, 10, Windows Server 2008, 2012, 2016, 2019 How To AC97 Audio Drivers and Other Unsigned Drivers
  • Cisco Unified Communications Manager / CUCM IP Telephony Definitions
  • tftp Linux xinetd verbose logging
  • Linux delete unused tap devices automatically
  • Linux qemu-kvm How To Enable Soundcard in Guestl
  • QEMU-KVM Windows and Server Guest Installs Mouse Tracking Pointer Location Solution
  • SSH Keep Alive To stop Disconnections
  • Linux How To Disable SATA NCQ For Better Performance
  • the sign-in method you're trying to use isn't allowed. For more info, contact your network administrator - solution for active directory
  • gsmartcontrol for Windows to Check the SMART S.M.A.R.T status
  • WebRTC Vulnerability Shows Local IP Address Even When Using a Proxy or VPN Firefox Fix And Disable Solution
  • chroot in Linux Howto Simple and Easy Guide