Can't log into cPanel, or WHM, but FTP accessible with same password?

[melankton]

We're having a strange error on a client site I helped to set up day before yesterday. Before today the root password and the one cpanel account we had setup was working fine and we could log in without any errors. I was actually logged in to both earlier today without any problems.

My client then tried to access WHM and the cpanel account with the same passwords as before, but she's getting a "invalid login" error message. I then tried logging in again with the same credentials and I'm also getting invalid login error. We haven't been able to reset the password because the account is hosted through digital ocean and they haven't sent the reset email yet.

The weird thing is, I'm able to access FTP and upload to the cpanel account with the same password the login form is claiming as "invalid". What on earth could be causing this? I've never experienced this error with cpanel before. Hopefully someone can shed some light on it.

 

[Infopro]

Is yours, and your Clients IPs listed in the whitelist in cPhulk? You may be blocked.

 

[melankton]

No they're not. I will have to do that once we regain access. I tried logging in from a different IP, but it still says invalid login.

 

[Infopro]

If multiple users tried to login to an account with the same username, it might have gotten blocked. If those users kept trying, it got blocked for a longer period of time.

 

[melankton]

There may have been hacked and the hacker changed information. I think so.

I don't think the server was hacked. We installed everything day before yesterday and only two people have access.

I think it might be firewall or cPhulk that locked us out, just like @infopro stated. We can now log into cpanel with the one account that was created (with same password as before) and are still working on resetting the root password.