The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

issue connected to my server

Discussion in 'Security' started by seizart, Oct 9, 2014.

  1. seizart

    seizart Active Member

    Joined:
    Feb 21, 2013
    Messages:
    40
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    Hello

    I m regularly disconnected from whm and i can t reconnect immediately, and one of my collegue (working from home) ha hasn t been able to connect to root or anyother account via ftp or sftp.

    I don t know what to do really.

    Code:
    erver version: SSH-2.0-OpenSSH_5.3
    Suivi :	Using SSH protocol version 2
    Suivi :	We claim version: SSH-2.0-PuTTY_Local:_Aug__7_2013_21:23:58
    Suivi :	Doing Diffie-Hellman group exchange
    Suivi :	Doing Diffie-Hellman key exchange with hash SHA-256
    Suivi :	Host key fingerprint is:
    Suivi :	ssh-rsa 2048 65:40:35:89:de:2d:61:e4:00:69:af:5e:3f:94:20:b0
    Suivi :	Initialised AES-256 SDCTR client->server encryption
    Suivi :	Initialised HMAC-SHA1 client->server MAC algorithm
    Suivi :	Initialised AES-256 SDCTR server->client encryption
    Suivi :	Initialised HMAC-SHA1 server->client MAC algorithm
    Suivi :	Pageant is running. Requesting keys.
    Suivi :	Pageant has 0 SSH-2 keys
    Commande :	Pass: ************
    Suivi :	Sent password
    Suivi :	Access denied
    Erreur :	Échec de l'authentification.
    Suivi :	CControlSocket::DoClose(1030)
    Suivi :	CSftpControlSocket::ResetOperation(1094)
    Suivi :	CControlSocket::ResetOperation(1094)
    Erreur :	Erreur critique
    Erreur :	Impossible d'établir une connexion au serveur
    Suivi :	CFileZillaEnginePrivate::ResetOperation(1094)
    
    Oct  9 16:48:54 serveur sshd[15486]: Failed password for invalid user admin from 122.225.109.109 port 47459 ssh2
    Oct  9 16:48:54 serveur sshd[15487]: Disconnecting: Too many authentication failures for admin
    Oct  9 16:48:54 serveur sshd[15486]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.109.109 
    Oct  9 16:48:55 serveur sshd[15495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.109.109  user=root
    Oct  9 16:48:55 serveur sshd[15490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.109.109  user=root
    Oct  9 16:48:58 serveur sshd[15495]: Failed password for root from 122.225.109.109 port 50735 ssh2
    Oct  9 16:48:58 serveur sshd[15490]: Failed password for root from 122.225.109.109 port 48458 ssh2
     
  2. mageshm

    mageshm Well-Known Member

    Joined:
    Apr 17, 2014
    Messages:
    90
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Chennai, INDIA
    cPanel Access Level:
    DataCenter Provider
    @ seizart,

    1) The above output shows different ssh port every instant, try to login with proper ssh port
    2) Do you have admin user to login ssh ?
    3) If you have CSF or other firewall disable and try to access ssh and let me know the causes.
     
  3. seizart

    seizart Active Member

    Joined:
    Feb 21, 2013
    Messages:
    40
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    how do i know if i have a firewall ? i just installed cpanel no modify anything
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,854
    Likes Received:
    676
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    You can install CSF if you want an easier tool for managing your firewall rules:

    ConfigServer Security & Firewall

    Check to make sure you are using the correct username/password combination when accessing SSH.

    Thank you.
     
  5. seizart

    seizart Active Member

    Joined:
    Feb 21, 2013
    Messages:
    40
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    is it compatible with cpanel? can i install it on whm?

    If i don t install it where should i look for to unlock from root access ?
     
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,854
    Likes Received:
    676
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Yes, it's compatible with cPanel/WHM and it's manageable from the UI. It's likely a good idea to start with installing this firewall and then check to see if the issue persists.

    Thank you.
     
  7. seizart

    seizart Active Member

    Joined:
    Feb 21, 2013
    Messages:
    40
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    i installed CSF , still same issue:

    i even add this ip to the white list

    Oct 21 10:00:52 serveur pure-ftpd: (?@24.201.15.xxx) [INFO] New connection from 24.201.15.xxx
    Oct 21 10:00:58 serveur pure-ftpd: (?@24.201.15.xxx) [WARNING] Authentication failed for user [root]
    Oct 21 10:00:58 serveur pure-ftpd: (?@24.201.15.xxx) [INFO] Logout.
     
  8. Peoplespaces

    Peoplespaces Well-Known Member

    Joined:
    Oct 1, 2001
    Messages:
    217
    Likes Received:
    2
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Try port 2289
     
  9. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,854
    Likes Received:
    676
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    The logs show that you are attempting to access FTP as "root". That is not permitted by default. Instead, access FTP as the account username or as the FTP account you created through cPanel.

    Thank you.
     
Loading...

Share This Page