Can't connect ssh after server compromised

[KanyonBT]

Hello,
Firstly my english is weak, I apologize already for this.

my problem doesn't work ssh. 1 day ago no problem but now ftp and putty with cant connected ssh.

50 sites on the server were damaged and attacked.

Is it possible to re-install ssh or reset its settings?

I say again whm I can connect with root
but I can not connect to ssh with the same username and password.

 

[rpvw]

Hello,
If you are unable to log into SSH but WHM is accessible, there is a script that will provide a minimal, default configuration of SSH to allow you to log in again. To use this script, you append the following to the url for WHM:

/scripts2/doautofixer?autofix=safesshrestart

For example, if your server's address is 1.2.3.4, this url will provide a temporary ssh instance that will allow login:

https://1.2.3.4:2087/scripts2/doautofixer?autofix=safesshrestart

Take note of the output from running that script, as it may restart ssh on a port other than 22 if somehow the previous ssh instance is still running.

You probably will also want to read:
Why can't I clean a hacked machine - cPanel Knowledge Base - cPanel Documentation

 

[cPanelMichael]

Hello,

The document referenced on the previous post is the best place to start:

Why can't I clean a hacked machine - cPanel Knowledge Base - cPanel Documentation

Additionally, you could try the workaround quoted in the previous response if you have access to WHM and want to start a default instance of SSH.

Thank you.

 

[KanyonBT]

çok teşekkür ederim.

aşağıdaki url sayesinde ssh oturum açma başarılı

/scripts2/doautofixer?autofix=safesshrestart