Unusual cpanel error log content
Hello,
I received this bit in a log scan report a few hours ago. Never seen anything like it - should I be worried? Everything on the server seems to be behaving normally.
CENTOS 6.6 x86_64 standard / WHM 11.46.0 (build 17)
TIA for your insight.
Bruce
/usr/local/cpanel/logs/error_log:
Duplicate logaccess: at /usr/local/cpanel/Cpanel/Server.pm line 420.
Cpanel::Server::logaccess(Cpanel::Server=HASH(0x3da4a08)) called at /usr/local/cpanel/Cpanel/Server.pm line 468
Cpanel::Server::badpass(Cpanel::Server=HASH(0x3da4a08), __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 3113
cpanel::cpsrvd::badpass(__CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 4179
cpanel::cpsrvd::docheckpass_cpaneld(__CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, undef, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 5062
cpanel::cpsrvd::handle_form_login() called at cpsrvd.pl line 1244
cpanel::cpsrvd::handle_one_connection() called at cpsrvd.pl line 1104
cpanel::cpsrvd::script() called at cpsrvd.pl line 430
Duplicate logaccess: at /usr/local/cpanel/Cpanel/Server.pm line 420.
Cpanel::Server::logaccess(Cpanel::Server=HASH(0x3da4a08)) called at /usr/local/cpanel/Cpanel/Server.pm line 468
Cpanel::Server::badpass(Cpanel::Server=HASH(0x3da4a08), __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 3113
cpanel::cpsrvd::badpass(__CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 4179
cpanel::cpsrvd::docheckpass_cpaneld(__CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, undef, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 5062
cpanel::cpsrvd::handle_form_login() called at cpsrvd.pl line 1244
cpanel::cpsrvd::handle_one_connection() called at cpsrvd.pl line 1104
cpanel::cpsrvd::script() called at cpsrvd.pl line 430
Duplicate logaccess: at /usr/local/cpanel/Cpanel/Server.pm line 420.
Cpanel::Server::logaccess(Cpanel::Server=HASH(0x3da49f0)) called at /usr/local/cpanel/Cpanel/Server.pm line 468
Cpanel::Server::badpass(Cpanel::Server=HASH(0x3da49f0), __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 3113
cpanel::cpsrvd::badpass(__CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 4179
cpanel::cpsrvd::docheckpass_cpaneld(__CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, undef, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 5062
cpanel::cpsrvd::handle_form_login() called at cpsrvd.pl line 1244
cpanel::cpsrvd::handle_one_connection() called at cpsrvd.pl line 1104
cpanel::cpsrvd::script() called at cpsrvd.pl line 430
Duplicate logaccess: at /usr/local/cpanel/Cpanel/Server.pm line 420.
Cpanel::Server::logaccess(Cpanel::Server=HASH(0x3da4a08)) called at /usr/local/cpanel/Cpanel/Server.pm line 468
Cpanel::Server::badpass(Cpanel::Server=HASH(0x3da4a08), __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 3113
cpanel::cpsrvd::badpass(__CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 4179
cpanel::cpsrvd::docheckpass_cpaneld(__CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, undef, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 5062
cpanel::cpsrvd::handle_form_login() called at cpsrvd.pl line 1244
cpanel::cpsrvd::handle_one_connection() called at cpsrvd.pl line 1104
cpanel::cpsrvd::script() called at cpsrvd.pl line 430
Duplicate logaccess: at /usr/local/cpanel/Cpanel/Server.pm line 420.
Cpanel::Server::logaccess(Cpanel::Server=HASH(0x3da49f0)) called at /usr/local/cpanel/Cpanel/Server.pm line 468
Cpanel::Server::badpass(Cpanel::Server=HASH(0x3da49f0), __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 3113
cpanel::cpsrvd::badpass(__CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 4179
cpanel::cpsrvd::docheckpass_cpaneld(__CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, undef, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 5062
cpanel::cpsrvd::handle_form_login() called at cpsrvd.pl line 1244
cpanel::cpsrvd::handle_one_connection() called at cpsrvd.pl line 1104
cpanel::cpsrvd::script() called at cpsrvd.pl line 430
Duplicate logaccess: at /usr/local/cpanel/Cpanel/Server.pm line 420, <$__ANONIO__> line 3.
Cpanel::Server::logaccess(Cpanel::Server=HASH(0x3da49f0)) called at /usr/local/cpanel/Cpanel/Server.pm line 468
Cpanel::Server::badpass(Cpanel::Server=HASH(0x3da49f0), __CPANEL_HIDDEN__, __CPANEL_HIDDEN__..., __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__) called at cpsrvd.pl line 3113
cpanel::cpsrvd::badpass(__CPANEL_HIDDEN__, __CPANEL_HIDDEN__..., __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__) called at cpsrvd.pl line 5564
cpanel::cpsrvd::connect_cphulkd() called at cpsrvd.pl line 5022
cpanel::cpsrvd::handle_form_login() called at cpsrvd.pl line 1244
cpanel::cpsrvd::handle_one_connection() called at cpsrvd.pl line 1104
cpanel::cpsrvd::script() called at cpsrvd.pl line 430
Duplicate logaccess: at /usr/local/cpanel/Cpanel/Server.pm line 420, <$__ANONIO__> line 3.
Cpanel::Server::logaccess(Cpanel::Server=HASH(0x3da49f0)) called at /usr/local/cpanel/Cpanel/Server.pm line 468
Cpanel::Server::badpass(Cpanel::Server=HASH(0x3da49f0), __CPANEL_HIDDEN__, __CPANEL_HIDDEN__..., __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__) called at cpsrvd.pl line 3113
cpanel::cpsrvd::badpass(__CPANEL_HIDDEN__, __CPANEL_HIDDEN__..., __CPANEL_HIDDEN__, 1, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__) called at cpsrvd.pl line 5564
cpanel::cpsrvd::connect_cphulkd() called at cpsrvd.pl line 5022
cpanel::cpsrvd::handle_form_login() called at cpsrvd.pl line 1244
cpanel::cpsrvd::handle_one_connection() called at cpsrvd.pl line 1104
cpanel::cpsrvd::script() called at cpsrvd.pl line 430
-
Hello :) I do not see anything that you should be concerned about. The log got generated as it seems the perl modules are called multiple times such as Cpanel::Server::badpass and Cpanel::Server::logaccess but still I would suggest you to run upcp with --force which will fix the issues if any. 0 -
Hello :) Internal case number 107785 is open to address the "Duplicate logaccess" error in the cPanel error log during certain failed login attempts. The message itself should not result in higher loads or memory usage on your system, but you may want to enable cPHulk or a third-party firewall if you find you are receiving several failed logins on your system. Thank you. 0 -
Thank you for the information. Already have a 3rd party firewall installed; there was a blocked attempted cpanel login very shortly before this log entry. Thanks again. 0
Please sign in to leave a comment.
Comments
3 comments