The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Cant login in as root - help!

Discussion in 'Security' started by AusDataHost, Apr 14, 2014.

  1. AusDataHost

    AusDataHost Member

    Joined:
    Feb 18, 2006
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    Hello all

    I have a server running Centos and cpanel.

    I logged in as root to remove an IP from a black list on sunday no problems yet today i can't login - saying incorrect password.

    Server is quite well protected and i have not had any unusual emails regarding suss logins etc

    Loads are low.

    Any ideas? server is in a data centre so its a bit tricky to diagnose with no access :(

    thanks
    Luke
     
  2. AusDataHost

    AusDataHost Member

    Joined:
    Feb 18, 2006
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    Got it booted into single user mode and could login via ssh and su to root

    any suggestions why that would work but not in normal mode?

    - - - Updated - - -

    reset pw in single user mode and now its working

    Little unnerving though - still concerned its compromised
     
  3. SS-Maddy

    SS-Maddy Well-Known Member

    Joined:
    Mar 28, 2009
    Messages:
    83
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    Please run rkhunter or chkrootkit in your server to ensure the server is safe. I hope you have patched the server for heartbleed though.
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,696
    Likes Received:
    656
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    Do you have cPHulk brute force detection enabled? If so, check the "Login/Brute Force History Report" to see if the "root" account was locked out.

    Thank you.
     
Loading...

Share This Page