Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Unable to stay logged in via SSH using PuTTY

Discussion in 'General Discussion' started by WebHostPro, Oct 6, 2017.

  1. WebHostPro

    WebHostPro Well-Known Member
    PartnerNOC

    Joined:
    Jul 28, 2002
    Messages:
    1,618
    Likes Received:
    11
    Trophy Points:
    318
    Location:
    LA, Costa RIca
    cPanel Access Level:
    Root Administrator
    Twitter:
    The last two servers I set up after I installed cPanel they now kick me out of SSH through PUTTY.

    The really strange part is it's only with putty, WinSCP connects fine, WHM connects fine.

    Mind is totally blown here, any ideas?

    I have my IP in the host allow section, in the firewall, and have tried it from three networks.

    It's only with the last two servers I have set up.

    Thanks,
    Charles
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,658
    Likes Received:
    1,424
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
  3. WebHostPro

    WebHostPro Well-Known Member
    PartnerNOC

    Joined:
    Jul 28, 2002
    Messages:
    1,618
    Likes Received:
    11
    Trophy Points:
    318
    Location:
    LA, Costa RIca
    cPanel Access Level:
    Root Administrator
    Twitter:
    It does have two IP constantly blocked every minute for days which makes me think it's either compromised or it locked itself up to protect against an attack.

    Oct 11 14:20:41 lv17 polkitd[522]: Registered Authentication Agent for unix-process:3087:89358 (system bus name :1.138 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8)
    Oct 11 14:20:42 lv17 polkitd[522]: Unregistered Authentication Agent for unix-process:3087:89358 (system bus name :1.138, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) (disconnected from bus)

    There is thousands of these: Oct 11 14:21:15 lv17 sshd[3155]: refused connect from 61.177.172.51 (61.177.172.51)

    Oct 11 14:21:56 lv17 sshd[3194]: refused connect from 61.177.172.51 (61.177.172.51)
    This is me: Oct 11 14:22:00 lv17 sshd[3177]: Accepted password for root from 22.222.22.222 port 51079 ssh2
    Oct 11 14:22:01 lv17 sshd[3177]: pam_unix(sshd:session): session opened for user root by (uid=0)
    Just disconnects right away: Oct 11 14:22:01 lv17 sshd[3177]: pam_unix(sshd:session): session closed for user root
    Oct 11 14:22:38 lv17 sshd[3371]: refused connect from 61.177.172.51 (61.177.172.51)
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,658
    Likes Received:
    1,424
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
  5. WebHostPro

    WebHostPro Well-Known Member
    PartnerNOC

    Joined:
    Jul 28, 2002
    Messages:
    1,618
    Likes Received:
    11
    Trophy Points:
    318
    Location:
    LA, Costa RIca
    cPanel Access Level:
    Root Administrator
    Twitter:
    Nope, thanks for trying though. Strange if I bounce off another server I can SSH in. I also am blocked out WHM now even though my IP is in the Whitelist for CSF.

    I'm starting to think this is a cphulk issue. How can I disable that from command?

    I ran:

    /scripts/restartsrv_cphulkd --stop; /scripts/restartsrv_cphulkd --start

    No luck, than this and still no luck :(

    /usr/local/cpanel/bin/cphulk_pam_ctl --disable
     
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,658
    Likes Received:
    1,424
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    You can review the cPHulk logs at:

    /usr/local/cpanel/logs/cphulkd.log

    Information on how to enable or disable it from the command line is documented at:

    cPHulk Management on the Command Line - cPanel Knowledge Base - cPanel Documentation

    Feel free to open a support ticket if you'd like us to take a closer look.

    Thank you.
     
  7. WebHostPro

    WebHostPro Well-Known Member
    PartnerNOC

    Joined:
    Jul 28, 2002
    Messages:
    1,618
    Likes Received:
    11
    Trophy Points:
    318
    Location:
    LA, Costa RIca
    cPanel Access Level:
    Root Administrator
    Twitter:
    I'll throw in a ticket, no biggie. Thanks for trying.
     
Loading...

Share This Page