Where are the CSF/LFD logs?

Question

Where are the CSF/LFD logs?

Answer

The log files that CSF and LFD use are the following:

• /var/log/lfd.log

  The log contains any failed login attempts, as well as IP addresses that have been blocked by CSF.
  
  

• /etc/csf/csf.deny

  Contains lists of IP addresses that have been blocked. For each entry, it shows the date the IP address was blocked and the reason.
  
  

• /etc/csf/csf.allow

  Contains lists of IP addresses that have been whitelisted.

Please note, CSF is a third-party product that cPanel does not directly support. If additional assistance is needed with CSF, their forums are located here:

CSF Forum