Skip to main content

cpanel changes my users' passwords

Comments

8 comments

  • ctorres

    it is possible that it is due to the cphulk configuration I leave here the reference that gave me the idea to configure my cphulk service in cpanel
    WHM login attempt reports "Login is invalid" - cPanel

    0
  • cPRex Jurassic Moderator

    Did you confirm that the issue was cPHulk?

    0
  • Alex Peralta

    i have same problem and cphulk its not the issue, users password change when assingn new one they can login their account's

     

    regards

    0
  • cPRex Jurassic Moderator

    Alex Peralta - is this happening with multiple cPanel users on the machine, or just one account?  If you change the password for the user, does that password that you have verified to work stop working later?

    0
  • Alex Peralta

    Hello cPRex this happening with all cpanel users when change to new password stops working pass feew days

    0
  • cPRex Jurassic Moderator

    It sounds like the accounts are compromised on some way.  Do you see anything in /usr/local/cpanel/logs/access_log for 'passwd' from IP addresses you don't recognize?

    0
  • Alex Peralta

    Hello cPRex i see some ips out of my customers country i was talking with administrator server and told me in june server was atacket and infected by malware, malware was cleaned but accounts still change password, he delete al public_html folders and restore backups or customer upload again his sites.

     

    regards

    0
  • cPRex Jurassic Moderator

    It sounds like there is either still malware on the server, or someone is intercepting the traffic to get the current passwords.  Was this malware on the root of the system? If so, that can't be cleaned, and the data should be migrated to a new system.

    0

Please sign in to leave a comment.