Unable to stay logged in via SSH using PuTTY

WebHostPro

Well-Known Member
PartnerNOC
Jul 28, 2002
1,685
23
318
LA, Costa RIca
cPanel Access Level
Root Administrator
Twitter
The last two servers I set up after I installed cPanel they now kick me out of SSH through PUTTY.

The really strange part is it's only with putty, WinSCP connects fine, WHM connects fine.

Mind is totally blown here, any ideas?

I have my IP in the host allow section, in the firewall, and have tried it from three networks.

It's only with the last two servers I have set up.

Thanks,
Charles
 

WebHostPro

Well-Known Member
PartnerNOC
Jul 28, 2002
1,685
23
318
LA, Costa RIca
cPanel Access Level
Root Administrator
Twitter
It does have two IP constantly blocked every minute for days which makes me think it's either compromised or it locked itself up to protect against an attack.

Oct 11 14:20:41 lv17 polkitd[522]: Registered Authentication Agent for unix-process:3087:89358 (system bus name :1.138 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8)
Oct 11 14:20:42 lv17 polkitd[522]: Unregistered Authentication Agent for unix-process:3087:89358 (system bus name :1.138, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) (disconnected from bus)

There is thousands of these: Oct 11 14:21:15 lv17 sshd[3155]: refused connect from 61.177.172.51 (61.177.172.51)

Oct 11 14:21:56 lv17 sshd[3194]: refused connect from 61.177.172.51 (61.177.172.51)
This is me: Oct 11 14:22:00 lv17 sshd[3177]: Accepted password for root from 22.222.22.222 port 51079 ssh2
Oct 11 14:22:01 lv17 sshd[3177]: pam_unix(sshd:session): session opened for user root by (uid=0)
Just disconnects right away: Oct 11 14:22:01 lv17 sshd[3177]: pam_unix(sshd:session): session closed for user root
Oct 11 14:22:38 lv17 sshd[3371]: refused connect from 61.177.172.51 (61.177.172.51)
 

cPanelMichael

Technical Support Community Manager
Staff member
Apr 11, 2011
47,911
2,233
363
cPanel Access Level
DataCenter Provider
Twitter

WebHostPro

Well-Known Member
PartnerNOC
Jul 28, 2002
1,685
23
318
LA, Costa RIca
cPanel Access Level
Root Administrator
Twitter
Nope, thanks for trying though. Strange if I bounce off another server I can SSH in. I also am blocked out WHM now even though my IP is in the Whitelist for CSF.

I'm starting to think this is a cphulk issue. How can I disable that from command?

I ran:

/scripts/restartsrv_cphulkd --stop; /scripts/restartsrv_cphulkd --start

No luck, than this and still no luck :(

/usr/local/cpanel/bin/cphulk_pam_ctl --disable
 

cPanelMichael

Technical Support Community Manager
Staff member
Apr 11, 2011
47,911
2,233
363
cPanel Access Level
DataCenter Provider
Twitter