ConfigServer Community Forum

Hello, my /usr/local/cpanel/logs/login_log is full of failed whm login attempts from ip addresses in verry strange countrys but it looks like the "attackers" know the defending mechanism against this type of attack because they stop after two failed attempts and a few hours hours later the...

Hello,

Problem is still there even after setting CC_SRC = "2".Csf emails me that 194.26.25.126 is blocked it reports that ip as (US/United States/California/Los Angeles/-) however that should be (RU/Russia/Moscow/-).

Hello, No a server needs a public ip people can obtain it and thus scan your server.I understand your issue is annoying but blocking whole countries will have it's impact on server performance.You could play a little with the csf settings that control portscanning but caution be careful you don't ca...

I would start by stop using an EOL (end of life) OS Centos 6 will only receive maintenance updates until November 30 2020 once that issue is sorted upgrade your csf version to the latest avalaible https://blog.configserver.com .

Hello,

Ok i'll change that csf setting and in the meantime i'll go complain to Maxmind :-) thank you.

problem is still there i forced a redownload of Maxmind databases by deleting the corrosponding files in /var/lib/csf/Geo but it didn't help it does download the databases but reports the wrong country sometimes not always.

Hello, PS_LIMIT *Port Scan* detected from 194.87.138.228 (RU/Russia/-). 11 hits in the last 250 seconds.I use temp blocks CC_LOOKUPS = 1 CC_SRC = 1 The dates in /var/lib/csf/Geo are reasonable recent oldest is 18 Oktober 2020 regarding CC_SRC i did read your notice maxmind now requires an apikey i g...

Hello, I have a cPanel / whm server with csf installed on it.I have csf configuerd to automatically report abusive ip addresses to abuseipdb blacklist it works fine however when i receive the email csf sends the blocked ip address has the wrong country for example csf just sends to me that 194.87.13...

Hello, As far as i know the mailscanner installer will automatically install clamavconnector when it's missing so everytime a mailscanner update or a msfe update is released you'll run into the same problem.The only possible solution to this is asking the developers of those scripts to provide a set...

Hello , In the mailscanner frontend on the mailscanner configuration page section "incoming work dir settings" The installer creates a group on your system called "mtagroup" and adds found users from mail, clamav, postfix, exim, etc to that group. This combined with Incoming Work...