The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

LogWatch for ******.****.***.**

Discussion in 'General Discussion' started by FeeL, Jul 7, 2009.

  1. FeeL

    FeeL Well-Known Member

    Joined:
    Apr 17, 2004
    Messages:
    135
    Likes Received:
    2
    Trophy Points:
    18
    Location:
    Rio de janeiro
    cPanel Access Level:
    Reseller Owner
    Hello There,

    My server is recieving ftp attacks and others in the last month, making me crazy. I´ve Blocked ftp for countries outside Brazil, but still strange things are happening.
    Looking at the logfile, I´ve seen this.

    su:
    Sessions Opened:
    faseq(uid=32003) -> root: 3 Time(s)
    (uid=0) -> root: 2 Time(s)

    sudo:
    Unknown Entries:
    authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=arasasasri00: 2 Time(s)

    Its kind of blurry to me..
    Does it mean that someone have erached root privileges??

    Thank you all
     

Share This Page