Cpanel Password changed Automatically

[howardfmcw]

Hi, today my password got changed from vietnam location. i didn't attempted to change.someone else changed it through the service "whm"
can anyone help me to identify the cause of this security breach?
have root access of the server as well.

Waiting for the answer

 

[keat63]

How secure was your original password. ?
Could it have been leaked, any virus or malware on your local PC etc.

Consider installing CSF firewall if not already, and utilising Host Access Control

 

[rackaid]

You will need to provide some more details.

Exactly which password was changed?
You say it was changed via the WHM service, how did you learn this?
Do you have cpHulk enabled?

 

[cPanelLauren]

Hi, today my password got changed from vietnam location. i didn't attempted to change.someone else changed it through the service "whm"

My Assumption is that you were looking in the cPanel access logs for this information. If so, it should tell you the user they signed in with as well as detail which password was changed. The following should be helpful for identifying the kinds of information that is helpful in a forums post In Progress - Guide To Opening An Effective Forums Thread