The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

CPHulk difference between service and authservice

Discussion in 'Security' started by diracuser, Mar 27, 2015.

  1. diracuser

    diracuser Member

    Joined:
    Oct 22, 2014
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Hi

    The emails that I receive from cPHulk show the following information:

    Last authentication request
    ===========================
    Service: pure-ftpd
    Local IP Address: xxx.xxx.xxx.xxx
    Local Port: 21
    Remote IP Address: xxx.xxx.xxx.xxx
    Authentication Database: system
    Username: zzzzzzzzzzz
    Reverse DNS: adsl.viettel.vn
    Origin Country: Vietnam (VN)


    Last authentication request
    ===========================
    Service: pure-ftpd
    Local IP Address: xxx.xxx.xxx.xxx
    Local Port: 21
    Remote IP Address: xxx.xxx.xxx.xxx
    Authentication Database: ftp
    Username: qqqqqqqqq
    Origin Country: Philippines (PH)


    What is the difference between service and authservice??

    In both cases the service attack is pure-ftpd but in the first email
    Authentication Database: system and in the second is Authentication Database: ftp

    I don't know the difference, anybody knows it?

    Thanks
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,854
    Likes Received:
    676
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello,

    The "Authentication Database" entry in the notification represents the last service to request authentication (for example,ftp). It's likely a request by Chkservd to see if the FTP service was running is why one of those notifications shows "system".

    Thank you.
     
Loading...

Share This Page