The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

SSH logins from 0.0.0.0?

Discussion in 'Security' started by mvandemar, Mar 16, 2015.

  1. mvandemar

    mvandemar Member

    Joined:
    Jun 17, 2006
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    1
    I just set up a new vps, and the default settings seem to have it set to email me on every successful ssh login, which is fine. However, this is the email that is coming through:

    Successful Root Login.

    Service: sshd
    Remote IP Address: 0.0.0.0
    Authentication Database: system
    Username: root
    This notice is the result of a request made by a computer with the IP address of “0.0.0.0” through the “sshd” service on the server.

    It's every time I ssh in, I don't get a separate one with my actual ip in it, and I can see using the last command that my real ip is showing there (as well as my real ip in the https and ftp logs). I tried searching but I could not find anyone else with the same symptoms. Does anyone know why it would be showing my ip address like that? It's a much less useful security feature without the correct one in there, although it is still helpful to know if someone else is ssh'ing in when I am not working on the server.

    Thanks.

    -Michael
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,734
    Likes Received:
    661
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
  3. mvandemar

    mvandemar Member

    Joined:
    Jun 17, 2006
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    1
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,734
    Likes Received:
    661
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
  5. mvandemar

    mvandemar Member

    Joined:
    Jun 17, 2006
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    1
    Apparently not. I just ssh'd in from another server and it did send me the correct IP info. Also, now I am getting no notifications at all when I ssh in from my home network (my isp is Verizon FIOS). Where are those emails controlled?

    -Michael
     
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,734
    Likes Received:
    661
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Root login notifications are manged at:

    "WHM Home >> Server Contacts >> Contact Manager"

    The email address utilized for the root contact is configured at:

    "WHM Home >> Server Contacts >> Edit System Mail Preferences"

    Thank you.
     
Loading...

Share This Page