Server Root Access problem

asked Oct 8, 2013 in Security by jeremy (380 points)
I have an issue with the root access of my server. I think it’s been compromised and now I can no longer SSH my server. I am not sure how to investigate and resolve this issue. Any suggestions are highly welcome.
Many thanks in advanced

4 Answers

0 like 0 dislike
answered Oct 8, 2013 by darkshark (1,500 points)
First think you need to do is get access back to the SSH. Almost all providers provide virtual console attribute you may use in emergency cases to get access to your server using SSH. When you do regain your access to the server change the root password and SSH port. Then you can check your log files for further investigations.
0 like 0 dislike
answered Oct 8, 2013 by TopNet (10,360 points)
Another possibility would be to boot to recovery, then mount the disks and check the logs. You need to make a backup first (if you don’t already have one) and then reinstall.
0 like 0 dislike
answered Oct 8, 2013 by tareq101 (4,880 points)
Try restarting the server in the rescue mode and then change the root password. This will get you access to shh . So now you can reboot and limit access to shh to your IP only. Then you can check your log files.
0 like 0 dislike
answered Dec 11, 2013 by consolepark (620 points)
If anyone are an experienced linux systems administrator, and you would like direct root access to your managed dedicated server, we are happy to provide you for more information you can go through: