The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

CSF Blocking a client constantly

Discussion in 'General Discussion' started by AntraxZ, Jul 2, 2011.

  1. AntraxZ

    AntraxZ Member

    Joined:
    May 17, 2011
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    1
    Code:
    Incoming IP 212.230.143.26 temporary block removed
    Jul  2 16:03:01 vps lfd[27250]: 212.230.143.26 (ES/Spain/-), more than 500 Apache 404 hits in the last 300 secs - *Blocked in csf* for 3600 secs [LF_APACHE_404]
    Jul  2 16:12:45 vps lfd[29154]: Incoming IP 83.34.30.21 temporary block removed
    Jul  2 16:19:35 vps lfd[30415]: Incoming IP 79.145.32.108 temporary block removed
    Jul  2 16:38:51 vps lfd[2706]: 80.224.163.229 (ES/Spain/80.224.163.229.dyn.user.ono.com), more than 500 Apache 404 hits in the last 300 secs - *Blocked in csf* for 3600 secs [LF_APACHE_404]
    Jul  2 16:42:38 vps lfd[3611]: 80.34.135.32 (ES/Spain/32.Red-80-34-135.staticIP.rima-tde.net), more than 500 Apache 404 hits in the last 300 secs - *Blocked in csf* for 3600 secs [LF_APACHE_404]

    what is this, how can I fix it? I have unbanned this client for about 5 times :S
     
  2. PIS

    PIS Member

    Joined:
    Jul 2, 2011
    Messages:
    21
    Likes Received:
    0
    Trophy Points:
    1
    Please read log file carefully. CSF says that client had more than 500 connection to pages, wich aren't at URL and apache returns 404 code more than 500 times. This is flood :), and of cause CSF blocks this user.
     
Loading...

Share This Page