port change in cPanel?

plausch.sup

• November 25, 2014 04:51

Hello, every 30 minutes, a bruteforce attack's my root login. How can i change my ssh port over cPanel ? At this Time, my ssh root login is enabled. Regards, Kristof

• 

  Infopro

  • November 25, 2014 09:58

  In the same forum you posted your question here, at top of threads list, you'd have found this: [Tutorial] Interested in increasing the security of your server? Read this. (sshd hardening) - cPanel Forums

  0
• 

  plausch.sup

  • November 25, 2014 10:54

  Oh, sorry. But thank you for the link. :)

  0
• 

  Infopro

  • November 25, 2014 11:02

  No need to be sorry. You were so close to finding it yourself. :)

  0
• 

  plausch.sup

  • November 25, 2014 11:16

  I have a big problem, after the first steps with iptables to secure the ssh port, i have been kicked from the server, And now i can't reconnect to the server. I would restart the ssh client over cPanel, but cPanel reported an failure. LOG: Waiting for "sshd" to restart "waiting for "sshd" to initialize "finished. Service Status: sshd (/usr/sbin/sshd) running as root with PID 32510 (pidfile check method) The service "sshd" failed to send the expected response to host "127.0.0.1" and port "22" because an error: Timed out while trying to connect. Startup Log: Starting sshd: [ OK ] Log Messages: Nov 25 13:16:07 edv sshd[32510]: Server listening on :: port 22. Nov 25 13:16:07 edv sshd[32510]: Server listening on 0.0.0.0 port 22. Nov 25 13:16:06 edv sshd[31876]: Received signal 15; terminating. Nov 25 13:14:40 edv sshd[29912]: pam_unix(sshd:session): session closed for user root Nov 25 13:11:49 edv sshd[31876]: Server listening on :: port 22. sshd has failed. Please contact your system administrator if the service does not automagically recover.

  0
• 

  cPanelMichael

  • November 26, 2014 15:47

  Hello :) You can try resetting your SSH configuration from Web Host Manager with the following URL:
  https://IP:2087/scripts2/doautofixer?autofix=safesshrestart
  You would replace "IP" with the server's IP address. Note that this is simply a temporary instance of SSH. You will have to login and modify the /etc/ssh/sshd_config file when you have temporary SSH access to ensure it's running properly from that point on. Thank you.

  0

Please sign in to leave a comment.