help with /var/log/secure

Is this normal as the IP is almost in constance connection


this is from my /var/log/secure



Jan 26 13:20:28 srv2 sshd[31370]: Did not receive identification string from 6xx.x3.106.42
Jan 26 13:23:29 srv2 sshd[31717]: Did not receive identification string from 6xx.xx.106.42
Jan 26 13:26:12 srv2 xinetd[1378]: START: imap pid=32008 from=127.0.0.1
Jan 26 13:26:29 srv2 sshd[32031]: Did not receive identification string from 6xx.xx.106.42
Jan 26 13:27:43 srv2 xinetd[1378]: START: imap pid=32156 from=127.0.0.1
Jan 26 13:28:35 srv2 xinetd[1378]: START: imap pid=32257 from=127.0.0.1
Jan 26 13:28:36 srv2 xinetd[1378]: START: imap pid=32264 from=127.0.0.1
Jan 26 13:28:36 srv2 xinetd[1378]: START: imap pid=32266 from=127.0.0.1
Jan 26 13:28:40 srv2 xinetd[1378]: START: imap pid=32273 from=127.0.0.1
Jan 26 13:29:29 srv2 sshd[32381]: Did not receive identification string from 6x.xx.106.42
Jan 26 13:31:22 srv2 Cp-Wrap[32671]: CP-Wrapper v1.2 resuming normal operations
Jan 26 13:31:22 srv2 Cp-Wrap[32671]: Pushing "625 COUNTDBS" to '/usr/local/cpanel/bin/mysqladmin' for UID: 625
Jan 26 13:31:23 srv2 Cp-Wrap[32671]: CP-Wrapper terminated without error
Jan 26 13:31:23 srv2 Cp-Wrap[32678]: CP-Wrapper v1.2 resuming normal operati
Jan 25 04:55:16 srv2 Cp-Wrap[21461]: CP-Wrapper terminated without error
Jan 25 04:55:16 srv2 Cp-Wrap[21465]: CP-Wrapper v1.2 resuming normal operations
Jan 25 04:55:16 srv2 Cp-Wrap[21465]: Pushing "553 GETDISK" to '/usr/local/cpanel/bin/mysqladmin' for UID: 553

Jan 26 11:46:09 srv2 Cp-Wrap[16647]: Pushing "611 LIST 0 0" to '/usr/local/cpanel/bin/ftpadmin' for UID: 611

 

 

 

 

Top