Root login from 64.0.0.0
We have several machines in several data centers and one in particular is doing something weird.
When I log into SSH or WHM, I receive an email notification that a "Root login from 64.0.0.0" was logged, but the weird thing is, that obviously not my IP. It is in the 64.x.x.x range though.
This only occurs on this one particular server. Other servers at the same data center and same config show my correct IP in the notification.
I've checked everything I can think of network related and everything appears to be correct, so I am stumped and open to any suggestions.
-
Forgot to mention, the OS is CloudLinux 6.6 and cPanel version is 11.50.0 0 -
Check the output from the command: export | grep -i ssh | grep [0-9]
on that specific server. This will show your IP, check if it's correct.0 -
Hello :) Have you whitelisted your entire IP range with cPHulk? Thank you. 0 -
Check the output from the command:
export | grep -i ssh | grep [0-9]
on that specific server. This will show your IP, check if it's correct.
Yes, it shows the correct IP.Hello :) Have you whitelisted your entire IP range with cPHulk? Thank you.
Nope, just my IP.0 -
Forgot to mention, the OS is CloudLinux 6.6 and cPanel version is 11.50.0
Hello :) Could you open a support ticket using the link in my signature so we can take a closer look at the issue? You can post the ticket number here so we can update this thread with the outcome. Thank you.0 -
Hello :) Could you open a support ticket using the link in my signature so we can take a closer look at the issue? You can post the ticket number here so we can update this thread with the outcome. Thank you.
Ticket #70583150 -
I just doubled checked the issue after submitting the ticket and could not reproduce the issue. I'm thinking a recent update may have solved it. Weird. 0 -
I'm happy to see the issue is no longer occurring. Thank you for updating us with the outcome. 0
Please sign in to leave a comment.
Comments
8 comments