Problem with message on dnsonly for unknown root login from cpanel

Elizabeta

Well-Known Member
Mar 21, 2018
230
31
28
Mostar
cPanel Access Level
Root Administrator
Hello,

I have a version cPanel&WHM v90.0.17.
Yesterday evening I received this message:

⚠ Root Login from an Unknown Network IP Address (ip address from my cpanel)


Domain: dns.*..ba
Service: whostmgrd
Local IP Address: ip adress from dns
Local Port: 2087
Remote IP Address: ip adress from my cpanel
Remote Port: 43922
Authentication Database: system
Username: root
Known Network †: No ⚠
 
Last edited by a moderator:

Elizabeta

Well-Known Member
Mar 21, 2018
230
31
28
Mostar
cPanel Access Level
Root Administrator
Just one information, in mesage logs from yesterday on dnsonly:


Nov 15 22:46:15 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#33786: received notify for zone '...com'

Nov 15 22:46:15 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#46056: received notify for zone '...ba'

Nov 15 22:46:15 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#46056: received notify for zone 's....ba'

Nov 15 22:46:15 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#46056: received notify for zone '....ba'

Nov 16 22:46:14 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#36447: received notify for zone '....com'

Nov 16 22:46:14 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#38020: received notify for zone '...ba'

Nov 16 22:46:14 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#38020: received notify for zone '...ba'

Nov 16 22:46:14 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#38020: received notify for zone '..ba'

Nov 17 22:46:13 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#60640: received notify for zone '....com'

Before, there is no such messages...
Yesterday, I have updatedcPanel and dns from version v90.0.16 to version v90.0.17.

Best regards,
Elizabeta
 

cPanelChristine

Technical Analyst
Staff member
Aug 10, 2018
57
11
83
Houston, TX
cPanel Access Level
Root Administrator
Hello Elizabeta.

For the first issue; It may be most beneficial that you open a support request following this guide such that our technical analysts can look into your issue in detail. If you create a support ticket, then please provide us with the ticket ID as a response to this post such that we may follow up.

Though as for the errors in the log, if this is a DNS Cluster then what may be happening is that a recent push from another cluster that is logging these requests. That can also be reviewed in detail through a ticket if need be.
 

Elizabeta

Well-Known Member
Mar 21, 2018
230
31
28
Mostar
cPanel Access Level
Root Administrator
Hello,

Thank you for your answer.

I did not receive such a message again yesterday evening.

In log on dns I can see same messages for yesterday evening at the same time like two days ago

, but i did not received the message at same time:
⚠ Root Login from an Unknown Network IP Address (ip address from my cpanel)

Nov 19 22:46:14 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#38020: received notify for zone '..ba'

Nov 19 22:46:13 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#60640: received notify for zone '....com'

Is this normal behavior for DNS cluster?


Best regards,
Elizabeta
 

cPanelChristine

Technical Analyst
Staff member
Aug 10, 2018
57
11
83
Houston, TX
cPanel Access Level
Root Administrator
Hello Elizabeta.

We do see that you have a ticket with us regarding this issue. The analyst that addressed your concerns mentioned that the problem stems from the IP that is accessing the server. Considering that this has not happened recently, could you let us know if you do experience this issue again? With such issues, it is sometimes best to just open a support ticket such that our analysts can look into the problem in detail.