Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

CPHulk difference between service and authservice

Discussion in 'Security' started by diracuser, Mar 27, 2015.

  1. diracuser

    diracuser Active Member

    Joined:
    Oct 22, 2014
    Messages:
    38
    Likes Received:
    1
    Trophy Points:
    8
    cPanel Access Level:
    Root Administrator
    Hi

    The emails that I receive from cPHulk show the following information:

    Last authentication request
    ===========================
    Service: pure-ftpd
    Local IP Address: xxx.xxx.xxx.xxx
    Local Port: 21
    Remote IP Address: xxx.xxx.xxx.xxx
    Authentication Database: system
    Username: zzzzzzzzzzz
    Reverse DNS: adsl.viettel.vn
    Origin Country: Vietnam (VN)


    Last authentication request
    ===========================
    Service: pure-ftpd
    Local IP Address: xxx.xxx.xxx.xxx
    Local Port: 21
    Remote IP Address: xxx.xxx.xxx.xxx
    Authentication Database: ftp
    Username: qqqqqqqqq
    Origin Country: Philippines (PH)


    What is the difference between service and authservice??

    In both cases the service attack is pure-ftpd but in the first email
    Authentication Database: system and in the second is Authentication Database: ftp

    I don't know the difference, anybody knows it?

    Thanks
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,711
    Likes Received:
    1,794
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    The "Authentication Database" entry in the notification represents the last service to request authentication (for example,ftp). It's likely a request by Chkservd to see if the FTP service was running is why one of those notifications shows "system".

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice