Weird messages in secure log

[DennusB]

Hi All,

We just installed our new Plesk 12 server and while i was looking the secure log (/var/log/secure) i continue to see messages like :

Aug 5 10:06:48 plesk1 unix_chkpwd[4574]: password check failed for user (root)
Aug 5 10:06:48 plesk1 sshd[4571]: Unable to connect to Plesk Database: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (13)
Aug 5 10:06:50 plesk1 sshd[4571]: Failed password for root from 221.239.208.188 port 29436 ssh2
Aug 5 10:06:51 plesk1 unix_chkpwd[4576]: password check failed for user (root)
Aug 5 10:06:51 plesk1 sshd[4571]: Unable to connect to Plesk Database: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (13)

What is it? And why does it give an MySQL error? MySQL is running fine!

Regards,
Dennis

 

[schlimpf]

Regarding the third entry: You should consider securing your SSH access

 

[DennusB]

Regarding the third entry: You should consider securing your SSH access

Fixed SSH access, but why is MySQL giving errors in the secure log...? That is weird isnt it?

 

[schlimpf]

I dont know the reason for this, but I just checked the logs and also have these entries

 

[DennusB]

I dont know the reason for this, but I just checked the logs and also have these entries

Weird. Maybe SSH tries to get users from the DB or so?

 

[schlimpf]

I cant tell, but these entries exist since the server setup, so I more or less ignored them

 

[DennusB]

I cant tell, but these entries exist since the server setup, so I more or less ignored them

Yeah, here too. I hope a Parallels devver can tell us more!