Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

LogWatch for ******.****.***.**

Discussion in 'General Discussion' started by FeeL, Jul 7, 2009.

  1. FeeL

    FeeL Well-Known Member

    Joined:
    Apr 17, 2004
    Messages:
    135
    Likes Received:
    2
    Trophy Points:
    168
    Location:
    Rio de janeiro
    cPanel Access Level:
    Reseller Owner
    Hello There,

    My server is recieving ftp attacks and others in the last month, making me crazy. I´ve Blocked ftp for countries outside Brazil, but still strange things are happening.
    Looking at the logfile, I´ve seen this.

    su:
    Sessions Opened:
    faseq(uid=32003) -> root: 3 Time(s)
    (uid=0) -> root: 2 Time(s)

    sudo:
    Unknown Entries:
    authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=arasasasri00: 2 Time(s)

    Its kind of blurry to me..
    Does it mean that someone have erached root privileges??

    Thank you all
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice