Search found 5 matches

by Orlando
07 Apr 2020, 10:34
Forum: General Discussion (csf)
Topic: LFD fails with Log line flooding/looping in /etc/apache2/logs/error_log Litespeed
Replies: 1
Views: 1759

LFD fails with Log line flooding/looping in /etc/apache2/logs/error_log Litespeed

Hello, On our server LFD fails because of: Log line flooding/looping in /etc/apache2/logs/error_log When Litespeed restarts, because of this lines in /etc/apache2/logs/error_log: [INFO] [341034] Processing config file: /etc/apache2/conf.d/userdata/lscache_vhosts.conf [INFO] [341034] Processing confi...
by Orlando
17 Jan 2020, 09:30
Forum: General Discussion (csf)
Topic: False Account modification alert
Replies: 0
Views: 2570

False Account modification alert

Hello, On one of our servers we received an email like: Reported Modifications: New account [root] has been created with uid:[0] gid:[0] login:[/root] shell:[/bin/bash] But nothing was changed for the root user. grep '0:0' /etc/passwd root:x:0:0:root:/root:/bin/bash chage -l root Last password chang...
by Orlando
25 Nov 2019, 09:59
Forum: General Discussion (csf)
Topic: Getting New account [root] has been created with uid:[0] gid:[0] login:[/root] shell:[/bin/bash]
Replies: 0
Views: 3093

Getting New account [root] has been created with uid:[0] gid:[0] login:[/root] shell:[/bin/bash]

Hello, We received today a strange email about: New account [root] has been created with uid:[0] gid:[0] login:[/root] shell:[/bin/bash] But on the server everything seems to be fine, user not missing, wasn't deleted, scanned with rootkit hunters, etc and it doesn't seems to be compromised. grep '0:...
by Orlando
26 Feb 2019, 15:00
Forum: General Discussion (csf)
Topic: Getting daily csf failed alert from the server
Replies: 1
Views: 2375

Re: Getting daily csf failed alert from the server

Getting same issue.

\Error: Error processing command for line [329] (6 times): [Another app is currently holding the xtables lock. Perhaps you want to use the -w option?], at line 329 in /usr/sbin/csf

Centos7 _ cpanel.

Do you use any other Firewall app?