The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

CPHulk blocked my server which hosts WHMCS for failed login attempts to account root

Discussion in 'General Discussion' started by texas90, Dec 25, 2014.

  1. texas90

    texas90 Member

    Joined:
    Jun 10, 2014
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    I find this wierd.
    How can WHMCS try to login with a WRONG password? While I am using the hash key not username and passowrd in WHMCS.
    My WHMCS IP is in the list of blocked IPs by CPHulk and it says
    ""failed login attempts to account root (system) -- Large number of attempts from this IP""

    What is going on?
     
  2. danrussell

    danrussell Well-Known Member

    Joined:
    Nov 5, 2014
    Messages:
    60
    Likes Received:
    3
    Trophy Points:
    8
    cPanel Access Level:
    Root Administrator
    Hi :),

    It appears that your WHMCS installation to be infected by some malware, which is causing the Fake attempts to the server for root user.

    Scan the WHMCS installation for Malware and viruses. Also patch the latest version of WHMCS to avoid this in Future.
     
  3. texas90

    texas90 Member

    Joined:
    Jun 10, 2014
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    My WHMCS installation is up to date and I think it is unlikely that WHMCS would get infected with maleware.

    Can someone from cPanel tell me whats going on??
     
  4. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,447
    Likes Received:
    195
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Have you contacted WHMCS Technical Support to ask them if they've come across this sort of issue? If not, you should.
     
Loading...

Share This Page