Access denied?

[sholdings]

We got very strange message in /var/log/httpd/error_log. The message was logged every couple seconds. Besides, 127.0.0.1, there is another 2 ip are trying to do the same thing every couple seconds too. Any idea? Is this some kind of DoS attack? but whi 127.0.0.1.

Thanks

Code: Select all

[Mon Apr 25 08:20:18 2011] [error] [client 127.0.0.1] PHP Warning:  mysql_connect() [<a href='function.mysql-connect'>function.mysql-connect</a>]: Access denied for user 'nagiosql'@'localhost' (using password: YES) in /usr/local/nagiosxi/html/db/adodb/drivers/adodb-mysql.inc.php on line 364
[Mon Apr 25 08:20:35 2011] [error] [client 127.0.0.1] PHP Warning:  mysql_connect() [<a href='function.mysql-connect'>function.mysql-connect</a>]: Access denied for user 'nagiosql'@'localhost' (using password: YES) in /usr/local/nagiosxi/html/db/adodb/drivers/adodb-mysql.inc.php on line 364
[Mon Apr 25 08:20:51 2011] [error] [client 127.0.0.1] PHP Warning:  mysql_connect() [<a href='function.mysql-connect'>function.mysql-connect</a>]: Access denied for user 'nagiosql'@'localhost' (using password: YES) in /usr/local/nagiosxi/html/db/adodb/drivers/adodb-mysql.inc.php on line 364
[Mon Apr 25 08:21:04 2011] [error] [client 127.0.0.1] PHP Warning:  mysql_connect() [<a href='function.mysql-connect'>function.mysql-connect</a>]: Access denied for user 'nagiosql'@'localhost' (using password: YES) in /usr/local/nagiosxi/html/db/adodb/drivers/adodb-mysql.inc.php on line 364
[Mon Apr 25 08:21:23 2011] [error] [client 127.0.0.1] PHP Warning:  mysql_connect() [<a href='function.mysql-connect'>function.mysql-connect</a>]: Access denied for user 'nagiosql'@'localhost' (using password: YES) in /usr/local/nagiosxi/html/db/adodb/drivers/adodb-mysql.inc.php on line 364

[rdedon]

A few things to check would be access logs to see if there is any rogue activity or outside attempts for access as ell. Also, could you make sure you have full access to the Web Interface including the Core Config Manager?