| 40 |
2026-05-03T12:07+00:00 |
audit |
ok |
441s |
3976 |
## NRG cPanel fleet — last 24h
**1. Need a yes/no: was that you on root@sur+cham+ist last night at 23:42–23:45 EEST?**
Source IP `82.76.239.154` (Romanian, no failed_login history in 7 days, first se |
| 6 |
2026-05-02T12:06+00:00 |
audit |
ok |
383s |
5118 |
## NRG cPanel cluster — last 24h audit
### 1. **WHM root login SUCCESS on cham from external IP 5.2.230.242 at 09:56:32 EEST today — same IP had `Accepted password for root` SSH on ist yesterday 12:5 |
| 1 |
2026-05-02T08:09+00:00 |
audit |
ok |
351s |
5656 |
Here's the 24h audit. Times are EEST (UTC+3) unless noted. Host IDs: ist=49, jah=144, sur=161, cham=162.
---
**1. New IP `5.2.230.242` got root-equivalent access on TWO hosts within 24h. This is the |