CPHulk difference between service and authservice

[diracuser]

Hi

The emails that I receive from cPHulk show the following information:

Last authentication request
===========================
Service: pure-ftpd
Local IP Address: xxx.xxx.xxx.xxx
Local Port: 21
Remote IP Address: xxx.xxx.xxx.xxx
Authentication Database: system
Username: zzzzzzzzzzz
Reverse DNS: adsl.viettel.vn
Origin Country: Vietnam (VN)


Last authentication request
===========================
Service: pure-ftpd
Local IP Address: xxx.xxx.xxx.xxx
Local Port: 21
Remote IP Address: xxx.xxx.xxx.xxx
Authentication Database: ftp
Username: qqqqqqqqq
Origin Country: Philippines (PH)


What is the difference between service and authservice??

In both cases the service attack is pure-ftpd but in the first email
Authentication Database: system and in the second is Authentication Database: ftp

I don't know the difference, anybody knows it?

Thanks

 

[cPanelMichael]

Hello,

The "Authentication Database" entry in the notification represents the last service to request authentication (for example,ftp). It's likely a request by Chkservd to see if the FTP service was running is why one of those notifications shows "system".

Thank you.