ip address scanning opened port alert

leonep

Well-Known Member
Nov 18, 2014
169
10
68
Pescara
cPanel Access Level
Root Administrator
hi ,
i have this block on csf
i only want to know if it is legit or not
thanks



Time: Tue Feb 16 14:50:18 2021 +0100
IP: 208.74.121.102 (US/United States/licensing.cpanel.net)
Hits: 11
Blocked: Permanent Block [PS_LIMIT]

Sample of block hits:
Feb 16 14:49:41 gemini kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= .....................................
 
Last edited by a moderator:

andrew.n

Well-Known Member
Jun 9, 2020
633
183
43
EU
cPanel Access Level
Root Administrator
Looks like legit so I would remove the block. cPanel checks the validity of the license multiple times a day and the block could be triggered due to that.
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
7,491
1,008
313
cPanel Access Level
Root Administrator
ON my personal server when I check the /usr/local/cpanel/logs/license_log file I get one check per day, but if there are issues with the machine, updates being run, or the machine was just created, there could be more.

208.74.x.x is definitely our network, so that's a safe IP address to remove.