Skip to main content

Locked out after update

Comments

6 comments

  • cPanelMichael
    Hello @Thunderchild, Are you able to access the server via the command line to verify the specific reason you were unable to authenticate as the root user via WHM? The specific reason should be logged to the /usr/local/cpanel/logs/login_log file. Thank you.
    0
  • Thunderchild
    I am now able to log in as the hoster has an interface that allows me to change the password but I am confused as to what happened
    0
  • Thunderchild
    what is the best way to access this file?
    0
  • cPanelMichael
    what is the best way to access this file?

    You can review /usr/local/cpanel/logs/login_log via the command line with a command such as "cat" or "grep". EX: cat /usr/local/cpanel/logs/login_log
    Information on how to access your server via SSH is documented on the link below:
    0
  • Thunderchild
    i think this was me: [2019-02-21 18:55:28 +0000] info [whostmgrd] removed-ip - root "POST /login/?login_only=1 HTTP/1.1" DEFERRED LOGIN whostmgrd: brute force attempt (user root)has locked out IP removed-ip
    0
  • cPanelMichael
    Hello @Thunderchild, I removed the IP address from the output, but if it's your IP address then it shows your login attempt failed because the IP address was blocked by cPHulk. You can read about cPHulk Brute Force Protection and how to whitelist your IP address at: cPHulk Brute Force Protection - Version 78 Documentation - cPanel Documentation cPHulk Management on the Command Line - cPanel Knowledge Base - cPanel Documentation Thank you.
    0

Please sign in to leave a comment.