Skip to main content

abuse report received, but do not know how to address



  • cPRex Jurassic Moderator

    Hey there!  This wouldn't be related to any of the cPanel tools on the system, and I don't have any one-size-fits-all recommendations to track down the offending account.  tcpdump or iptables both sound like good options to me if you know the IP being targeted. 

  • Daniel Biro

    Thanks @cPRex!

    Just for reference I received a good tip from my colocation-provider and I was able to find out who causes it.

    This is the command that helped me out (with extra filters of course):

    iptables -A OUTPUT -m state --state NEW -j LOG --log-uid

    If using csf, I first disable it, then run the command and then enable it and this way the logging starts...

  • cPRex Jurassic Moderator

    Nice - thanks for sharing that!


Please sign in to leave a comment.