The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

WHM Login always incorrect password need to reboot vps to be able to login

Discussion in 'General Discussion' started by ermiebb, Feb 5, 2015.

  1. ermiebb

    ermiebb Member

    Joined:
    Feb 5, 2015
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Website Owner
    Hi,

    I always have this problem and it is very annoying

    For example:

    I haven't login in my WHM for a day or two or even for a couple of hours
    when i try to login to my WHM it says Incorrect password even if i dont change my pass
    then i am going to reset my root password in my vps panel then it will allow me to login in my whm successfully with my new password. then after that if i go idle for an hour or two when i refresh my browser or i try to relogin to WHM it says i again invalid password i need again to reset my password in my vps panel and reboot server again to be able to login to my whm...

    Whats causing this problem and how to resolve this?


    Thank you very much
     
    #1 ermiebb, Feb 5, 2015
  2. keat63

    keat63 Well-Known Member

    Joined:
    Nov 20, 2014
    Messages:
    859
    Likes Received:
    25
    Trophy Points:
    28
    cPanel Access Level:
    Root Administrator
    In my experience you are probably being locked out, due to brute force login attempts from unknowns. Potential hackers.
    Find cphulk and add your ip or range of ip's (if dynamic) to the white list for a start.
    Range of ip's will go along the lines xxx.xxx.0.0/16.

    Consider using host access control.
    Allow access to all for your ip (or range of ip's), this one goes along the lines xxx.xxx.0.0/255.255.0.0

    All - IP or Range - Allow

    And deny all to everyone else until you have it secured at least

    All - All - DENY

    Then as a matter of immediate importance, install CSF (firewall).
    When CSF is installed, choose a pre-configured profile as a starting point (i chose high).
    And remember to take csf out of test mode.

    It's not difficult but can be quite daunting when your'e first starting out.

    When you've done all this, come back as the guys on here are really helpful.
     
    #2 keat63, Feb 5, 2015
    Last edited: Feb 5, 2015
  3. ermiebb

    ermiebb Member

    Joined:
    Feb 5, 2015
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Website Owner
    Hi

    thanks for the reply,
    where do i find cphulk?

    currently searching it right now in whm...


    thanks!
     
    #3 ermiebb, Feb 6, 2015
  4. dalem

    dalem Well-Known Member
    PartnerNOC

    Joined:
    Oct 24, 2003
    Messages:
    2,602
    Likes Received:
    51
    Trophy Points:
    203
    Location:
    SLC
    cPanel Access Level:
    DataCenter Provider
    Home »
    Security Center »
    cPHulk Brute Force Protection
     
    #4 dalem, Feb 6, 2015
  5. ermiebb

    ermiebb Member

    Joined:
    Feb 5, 2015
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Website Owner
    thanks found it..

    holy mother of god i saw in the cphulk failed login logs a lots of failed login with different ip i think theres a thousands of failed logins different ip on the list in cphulk..

    how do i install csf? via whm?
     
    #5 ermiebb, Feb 6, 2015
  6. ermiebb

    ermiebb Member

    Joined:
    Feb 5, 2015
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Website Owner
    after i install csf do i still need the cphulk? do i disabl the cphulk or not?
     
    #6 ermiebb, Feb 6, 2015
  7. keat63

    keat63 Well-Known Member

    Joined:
    Nov 20, 2014
    Messages:
    859
    Likes Received:
    25
    Trophy Points:
    28
    cPanel Access Level:
    Root Administrator
    Install csf from a root login.
    http://download.configserver.com/csf/install.txt

    Leave CPHulk in tact, just add your IP or range, and any others that you trust, ie your VPS provider.

    Also under security center, add your entries in Host Access Control, like thus.
    Allow access to all for your ip (or range of ip's), IP entries should look like this for a range 111.222.0.0/255.255.0.0

    All - 111.222.0.0/255.255.0.0 - Allow
    Also add your VPS provider and anyone else you trust, eg your work ip, your home ip.

    And deny all to everyone else until you have it secured at least

    All - All - DENY

    The Deny rule should always be the last entry apparently, so if you add any more entries, make sure the denies are at the bottom of the list.

    - - - Updated - - -

    One other thing, finding your way around WHM and it's many features can be tricky at first, knowing for example where CPHULK is.
    Using the search box (top left), will help find these things.
     
    #7 keat63, Feb 6, 2015
    Last edited: Feb 6, 2015
  8. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    15,546
    Likes Received:
    291
    Trophy Points:
    433
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Linking to the proper documentation is always a better way to go:
    Host Access Control - cPanel Documentation

    The concern should be that for a new user, the actual documentation is going to be more accurate, complete, and safe to implement.
     
    #8 Infopro, Feb 6, 2015
  9. ermiebb

    ermiebb Member

    Joined:
    Feb 5, 2015
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Website Owner
    thank you guys
    problem solved.
     
    #9 ermiebb, Feb 6, 2015
  10. keat63

    keat63 Well-Known Member

    Joined:
    Nov 20, 2014
    Messages:
    859
    Likes Received:
    25
    Trophy Points:
    28
    cPanel Access Level:
    Root Administrator
    Now might be a good idea to run a quick security scan, and see what you can or dare tighten up.
    If you installed CSF, you might want to consider a CSF security scan also.

    CSF also gives very easy access to the logs, you'll be shocked as to how many devious goings on there are behind your back
     
    #10 keat63, Feb 6, 2015
(You must log in or sign up to post here.)
Loading...
Similar Threads - Login always incorrect
  1. Zurrie

    WHM login always download command.gz

    Zurrie, Nov 13, 2016, in forum: General Discussion
    Replies:
    4
    Views:
    316
    cPanelMichael
    Nov 15, 2016
  2. haulpd

    Push notifications when cPanel account login

    haulpd, Jul 20, 2017 at 12:03 PM, in forum: cPanel Developers
    Replies:
    2
    Views:
    30
    haulpd
    Jul 20, 2017 at 8:47 PM
  3. Krydos

    Prevent domain.com:2082 logins

    Krydos, Jul 18, 2017 at 10:52 PM, in forum: General Discussion
    Replies:
    6
    Views:
    53
    cPanelMichael
    Jul 19, 2017 at 10:32 AM
  4. AndyS

    SOLVED cPanel doesn't know my Login

    AndyS, Jul 18, 2017 at 2:31 PM, in forum: General Discussion
    Replies:
    7
    Views:
    62
    AndyS
    Jul 18, 2017 at 3:47 PM
  5. gentlemedia

    Root password change in WHM has no effect in cmd-line login

    gentlemedia, Jul 15, 2017 at 9:15 PM, in forum: Security
    Replies:
    10
    Views:
    124
    rpvw
    Jul 20, 2017 at 9:02 AM

Share This Page