Problem with message on dnsonly for unknown root login from cpanel

[Elizabeta]

Hello,

I have a version cPanel&WHM v90.0.17.
Yesterday evening I received this message:

Root Login from an Unknown Network IP Address (ip address from my cpanel)

Domain:	dns.*..ba
Service:	whostmgrd
Local IP Address:	ip adress from dns
Local Port:	2087
Remote IP Address:	ip adress from my cpanel
Remote Port:	43922
Authentication Database:	system
Username:	root
Known Network †:	No

 

[Elizabeta]

Just one information, in mesage logs from yesterday on dnsonly:


Nov 15 22:46:15 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#33786: received notify for zone '...com'

Nov 15 22:46:15 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#46056: received notify for zone '...ba'

Nov 15 22:46:15 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#46056: received notify for zone 's....ba'

Nov 15 22:46:15 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#46056: received notify for zone '....ba'

Nov 16 22:46:14 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#36447: received notify for zone '....com'

Nov 16 22:46:14 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#38020: received notify for zone '...ba'

Nov 16 22:46:14 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#38020: received notify for zone '...ba'

Nov 16 22:46:14 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#38020: received notify for zone '..ba'

Nov 17 22:46:13 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#60640: received notify for zone '....com'

Before, there is no such messages...
Yesterday, I have updatedcPanel and dns from version v90.0.16 to version v90.0.17.

Best regards,
Elizabeta

 

[WasChristine]

Hello Elizabeta.

For the first issue; It may be most beneficial that you open a support request following this guide such that our technical analysts can look into your issue in detail. If you create a support ticket, then please provide us with the ticket ID as a response to this post such that we may follow up.

Though as for the errors in the log, if this is a DNS Cluster then what may be happening is that a recent push from another cluster that is logging these requests. That can also be reviewed in detail through a ticket if need be.

 

[Elizabeta]

Hello,

Thank you for your answer.

I did not receive such a message again yesterday evening.

In log on dns I can see same messages for yesterday evening at the same time like two days ago

, but i did not received the message at same time:
Root Login from an Unknown Network IP Address (ip address from my cpanel)

Nov 19 22:46:14 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#38020: received notify for zone '..ba'

Nov 19 22:46:13 dns named[1846]: client @0x7fc5980c6900 (ip address from cpanel)#60640: received notify for zone '....com'

Is this normal behavior for DNS cluster?


Best regards,
Elizabeta

 

[WasChristine]

Hello Elizabeta.

We do see that you have a ticket with us regarding this issue. The analyst that addressed your concerns mentioned that the problem stems from the IP that is accessing the server. Considering that this has not happened recently, could you let us know if you do experience this issue again? With such issues, it is sometimes best to just open a support ticket such that our analysts can look into the problem in detail.