The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

last -da suddenly changed... FTP not being logged

Discussion in 'General Discussion' started by claudio, Jun 2, 2005.

  1. claudio

    claudio Well-Known Member

    Joined:
    Jul 31, 2004
    Messages:
    201
    Likes Received:
    0
    Trophy Points:
    16
    Hi

    this one is pretty strange : )

    i was using last -da or last -10 to see last logins...

    so i discovered my server has not only cpanel running but also webmin

    and i stoped webmin from running and also found some scripts and quota file and others inside of /tmp so i deleted then....

    after that i realize that last -10 for instance is not giving me FTP logins

    it just shows my ssh logins and reboot signs...

    i already touched /var/log/wtmp

    and it stills the same

    Any help will be appreciated

    Thanks Folks

    Claudio
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    Just checked last on a few of my servers and FTP entries are not present. Did you recently switch from proftpd to pure-ftpd by any chance? It would appear that pure-ftpd doesn't create the wtmp entries that proftpd did.
     
  3. claudio

    claudio Well-Known Member

    Joined:
    Jul 31, 2004
    Messages:
    201
    Likes Received:
    0
    Trophy Points:
    16
    Man you are fast

    Hi

    I did change from PRO to PURE FTP

    and i also added a second HD so all the fstab entries were changed from label to /dev

    now i am glad to hear that you compared your (high trustable servers) with mine and it is normal

    i am a little bit concerned with this server because i moved a customer from another very compromissed server and i did found and deleted some backdoors scripts on /tmp and also some Quota and other stuff

    to work with this servers really scares me

    by the way i took a look at tripwire.org and didnt found a free tar.gz download, isnt it free anymore?

    thanks Jonathan you are really GREAT

    Claudio

    ps. nice dog your bull terrier (i saw him at your chirpy's home page )
     
    #3 claudio, Jun 2, 2005
    Last edited: Jun 2, 2005
  4. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
Loading...

Share This Page