garconcn
- Total activity 184
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 0
- Subscriptions 67
Posts
Recent activity by garconcn-
Is this xmlrpc brute force amplification attack?
Recently, I noticed that the "nobody" process was using 100% CPU for a long time on many cpanel servers. After lsof the process, I see the server was responding to the request from IP 50.93.203.147...
-
Does cpanel need UDP Port 21 for inbound?
I get confused about what UDP ports needed by cpanel for incoming. The cpanel default iptables rules on CentOS only allow incoming UDP port 53, but CSF firewall opens 20,21,53 by default. I did a G...
-
How to block this kind of wordpress scan?
Recently, I've seen lots of scanning traffic like follows on wordpress sites. How to block those? Is there a way to deny any request for the string "abdullkarem" in modsecurity? Thanks Oct 19 09:5...
-
How to enable frontpage extension for domain after install Custom mod_frontpage?
I've installed the mod_frontpage module and compiled EA. How to enable the Frontpage Extensions for a domain? In older cpanel server, there's several scripts to setup the Frontpage /scripts/setupf...
-
Slow Updates
It's still very slow to update cpanel.
-
Rsyslog forward log to remote syslog server
I've setup a central syslog server using LogAnalyzer on CentOS6 server to consolidate all the cpanel logs. I created a config file in /etc/rsyslog.d/ to foward any log contains 'apache-access' to r...
-
Apache error_log is in /var/log/messages file instead of /usr/local/apache/logs/error_log
Hi, On one of our server, the apache error log was logged in to the /var/log/messages file instead of default location /usr/local/apache/logs/error_log. Before, we use rsyslog to send the Apache e...
-
Exim - DNS list lookup defer for RBL server
We use our own RBL in cPanel. We found that sometimes it catches the IP by the RBL, sometimes it shows DNS lookup error. The RBL server is not busy at all, and we have RBL dns entry in the cpanel s...
-
failed cpanel login from the server IP
In lfd log, there's 5 failed cpanel login from the server IP every hour. This happens in multple cpanel servers. I found that the bandmin cron was running at the same time, not sure why the bandmin...
-
How to install logtail?
There's some Munin plugins use logtail in cpanel, but it's not installed on the server. I can't find how to install it. Anyone has experience with this? I am using CentOS 5. Thanks.