Access log entry question

chanklish

• August 07, 2018 10:49

hello in my access log i can see lines like this from different IPs : 5.166.152.165 - - [08/01/2018:10:59:40 -0000] "-" 401 0 "-" "-" "-" "-" 2087 what are these exactly ?

• 

  cPanelLauren

  • August 09, 2018 15:34

  Hello @chanklish Looks like that IP address tried to access WHM (2087) and received a 401 status which indicates that Authorization is required and they failed to authenticate properly. Thanks!

  0
• 

  chanklish

  • August 10, 2018 08:13

  Hello @chanklish Looks like that IP address tried to access WHM (2087) and received a 401 status which indicates that Authorization is required and they failed to authenticate properly. Thanks!

  
  Hi Lauren - is this normal authentication failure or the 2FA that comes after the user/password ?

  0
• 

  cPanelLauren

  • August 10, 2018 13:35

  HI @chanklish I have no way to know that. All I can tell you is it was a failed authentication attempt to WHM. Thanks!

  0

Please sign in to leave a comment.