Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

last -da suddenly changed... FTP not being logged

Discussion in 'General Discussion' started by claudio, Jun 2, 2005.

  1. claudio

    claudio Well-Known Member

    Joined:
    Jul 31, 2004
    Messages:
    201
    Likes Received:
    0
    Trophy Points:
    166
    Hi

    this one is pretty strange : )

    i was using last -da or last -10 to see last logins...

    so i discovered my server has not only cpanel running but also webmin

    and i stoped webmin from running and also found some scripts and quota file and others inside of /tmp so i deleted then....

    after that i realize that last -10 for instance is not giving me FTP logins

    it just shows my ssh logins and reboot signs...

    i already touched /var/log/wtmp

    and it stills the same

    Any help will be appreciated

    Thanks Folks

    Claudio
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,470
    Likes Received:
    21
    Trophy Points:
    463
    Location:
    Go on, have a guess
    Just checked last on a few of my servers and FTP entries are not present. Did you recently switch from proftpd to pure-ftpd by any chance? It would appear that pure-ftpd doesn't create the wtmp entries that proftpd did.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. claudio

    claudio Well-Known Member

    Joined:
    Jul 31, 2004
    Messages:
    201
    Likes Received:
    0
    Trophy Points:
    166
    Man you are fast

    Hi

    I did change from PRO to PURE FTP

    and i also added a second HD so all the fstab entries were changed from label to /dev

    now i am glad to hear that you compared your (high trustable servers) with mine and it is normal

    i am a little bit concerned with this server because i moved a customer from another very compromissed server and i did found and deleted some backdoors scripts on /tmp and also some Quota and other stuff

    to work with this servers really scares me

    by the way i took a look at tripwire.org and didnt found a free tar.gz download, isnt it free anymore?

    thanks Jonathan you are really GREAT

    Claudio

    ps. nice dog your bull terrier (i saw him at your chirpy's home page )
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #3 claudio, Jun 2, 2005
    Last edited: Jun 2, 2005
  4. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,470
    Likes Received:
    21
    Trophy Points:
    463
    Location:
    Go on, have a guess
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice