logwatch report on Sudo (secure-log)

[coffeeboyuk]

Hi,

I notice my logwatch reported the following:

--------------------- Sudo (secure-log) Begin ------------------------


wp-toolkit => root
------------------
/bin/cat - 52 Time(s).
/bin/sh - 5 Time(s).
/bin/test - 28 Time(s).

---------------------- Sudo (secure-log) End -------------------------

It's been reporting these logs for a while but is this wp-toolkit part of the cpanel automated updates or have my server been compromised?

 

[cPRex]

Hey there! That's all part of the cPanel WordPress Toolkit system. You can read more on this here: WordPress Toolkit | cPanel & WHM Documentation

 

[coffeeboyuk]

Thanks for the reply.

 

[cPRex]

Sure thing!