The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Someone or virus spam WHM login root and script disable us

Discussion in 'General Discussion' started by natong, May 1, 2009.

  1. natong

    natong Well-Known Member

    Joined:
    May 17, 2008
    Messages:
    85
    Likes Received:
    0
    Trophy Points:
    6
    5 failed login attempts to account root (system) -- Large number of attempts from this IP:


    How to prevent spammer ? Because the cPHulk Brute Force Protection automatic disable account root and we can't login root too.
     
    #1 natong, May 1, 2009
    Last edited: May 1, 2009
  2. crazyaboutlinux

    crazyaboutlinux Well-Known Member

    Joined:
    Nov 3, 2007
    Messages:
    938
    Likes Received:
    0
    Trophy Points:
    16
    for security its recommended to keep enabled this protection.
    Quote:
    Yes, you are having this problem since the brute force protection is enabled in your server. You can disbale this following those steps: WHM >> Security >> Security Center >> cPHulk Brute Force Protection.

    just enter your IP address as Trusted Hosts List in brute force protection & you won't be blocked again.

    i also have the same problem before 6th months & i did this after then i never blocked again by brute force
     
  3. txmom

    txmom Member

    Joined:
    Apr 29, 2009
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    This is also in the Security Center:

    Host Access Control (block IP access)

    Host Access Control allows you to allow or deny access to your server or specific services based on the IP address of the incoming request.
     
  4. cPanelDavidG

    cPanelDavidG Technical Product Specialist

    Joined:
    Nov 29, 2006
    Messages:
    11,279
    Likes Received:
    8
    Trophy Points:
    38
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    If you are comfortable with the command line, you may also wish to consider moving SSH off its standard port to reduce the brute forcing performed against your root account. Some system administrators also require logging in as a wheel user first before being able to login as root for added security. That would need to be setup via the command line.
     
  5. natong

    natong Well-Known Member

    Joined:
    May 17, 2008
    Messages:
    85
    Likes Received:
    0
    Trophy Points:
    6
    I am lucky. I use SSH with private key and I can login root.

    then I clear database by

    Code:
    echo "delete from brutes; delete from logins;" | mysql cphulkd
    
     
Loading...

Share This Page