Report of log records for blocked IPs

swbrains

• January 17, 2020 09:31

I know in the CSF firewall I can enter an IP address and see if it's blocked. Is there a way to view a report of why it's blocked? To that end, I have been logging into my server via FTP and downloading the "messages" and "lfd.log" files and searching them for the offending IP address which usually yields the reasons for the block. It would be really helpful if there was a way to pull that information within the cPanel UI. Is there such a feature that I'm not aware of?

• 

  quietFinn

  • January 17, 2020 16:03

  I usually check those in WHM -> Plugins -> ConfigServer Security & Firewall -> Server Information -> Search System Logs

  0
• 

  swbrains

  • January 18, 2020 02:08

  That helps a lot -- Thank you!

  0
• 

  keat63

  • January 18, 2020 19:39

  In CSF go to the button 'Firewall Deny IP's' This will show you all denied IP's and the reason for denial.

  0
• 

  cPanelLauren

  • January 20, 2020 17:54

  Thanks @keat63 and @quietFinn! @swbrains keep in mind as well that if you manually block an IP address there won't be a reason unless you also add one.

  0

Please sign in to leave a comment.