The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

127.0.0.1 times out!

Discussion in 'General Discussion' started by ozzi4648, Nov 25, 2002.

  1. ozzi4648

    ozzi4648 Guest

    On one box we see this:

    Nov 25 10:05:23 srv08 proftpd[19415]: srv08.primenet.cc (127.0.0.1[127.0.0.1]) - FTP login timed out, disconnected.
    Nov 25 10:13:44 srv08 proftpd[19522]: srv08.primenet.cc (127.0.0.1[127.0.0.1]) - FTP login timed out, disconnected.
    Nov 25 10:22:05 srv08 proftpd[19604]: srv08.primenet.cc (127.0.0.1[127.0.0.1]) - FTP login timed out, disconnected.
    Nov 25 10:30:25 srv08 proftpd[19689]: srv08.primenet.cc (127.0.0.1[127.0.0.1]) - FTP login timed out, disconnected.
    Nov 25 10:38:48 srv08 proftpd[19811]: srv08.primenet.cc (127.0.0.1[127.0.0.1]) - FTP login timed out, disconnected.

    On another cPanel box we see this:

    Nov 25 09:52:02 srv08 proftpd[19343]: srv08.primenet.cc (127.0.0.1[127.0.0.1]) - FTP session opened.
    Nov 25 09:52:02 srv08 proftpd[19343]: srv08.primenet.cc (127.0.0.1[127.0.0.1]) - FTP session closed.
    Nov 25 09:52:02 srv08 proftpd[19343]: srv08.primenet.cc (127.0.0.1[127.0.0.1]) - FTP session opened.
    Nov 25 09:52:02 srv08 proftpd[19343]: srv08.primenet.cc (127.0.0.1[127.0.0.1]) - FTP session closed.
    Nov 25 09:52:02 srv08 proftpd[19343]: srv08.primenet.cc (127.0.0.1[127.0.0.1]) - FTP session opened.
    Nov 25 09:52:02 srv08 proftpd[19343]: srv08.primenet.cc (127.0.0.1[127.0.0.1]) - FTP session closed.

    Why does the first one time out? Anyone know?
     
  2. moronhead

    moronhead Well-Known Member

    Joined:
    Aug 12, 2001
    Messages:
    706
    Likes Received:
    0
    Trophy Points:
    16
    & Nov 25 10:05:23 srv08 proftpd[19415]: srv08.primenet.cc (127.0.0.1[127.0.0.1]) - FTP login timed out, disconnected.

    This is the server checking the FTPd daemon every 8 minutes.

    & Nov 25 09:52:02 srv08 proftpd[19343]: srv08.primenet.cc (127.0.0.1[127.0.0.1]) - FTP session opened.
    Nov 25 09:52:02 srv08 proftpd[19343]: srv08.primenet.cc (127.0.0.1[127.0.0.1]) - FTP session closed.

    This usually points to an unsuccessful attempt to login including forced attempts.
     
  3. ozzi4648

    ozzi4648 Guest

    Right, but why does it work on one server and times out on another? It cant be firewall related.
     
  4. moronhead

    moronhead Well-Known Member

    Joined:
    Aug 12, 2001
    Messages:
    706
    Likes Received:
    0
    Trophy Points:
    16
    Can you see this repeated every 8 minutes in both cpanel servers?

    (127.0.0.1[127.0.0.1]) - FTP login timed out, disconnected.

    If you do, that's OK as the server is checking to make sure proftpd is alive.

    As to the successive FTP session opened/closed statements that follow each other within the same second, you won't see them unless there've been unsuccessful FTP login attempts.
     
Loading...

Share This Page