ip address scanning opened port alert

[leonep]

hi ,
i have this block on csf
i only want to know if it is legit or not
thanks



Time: Tue Feb 16 14:50:18 2021 +0100
IP: 208.74.121.102 (US/United States/licensing.cpanel.net)
Hits: 11
Blocked: Permanent Block [PS_LIMIT]

Sample of block hits:
Feb 16 14:49:41 gemini kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= .....................................

 

[andrew.n]

Looks like legit so I would remove the block. cPanel checks the validity of the license multiple times a day and the block could be triggered due to that.

 

[cPRex]

ON my personal server when I check the /usr/local/cpanel/logs/license_log file I get one check per day, but if there are issues with the machine, updates being run, or the machine was just created, there could be more.

208.74.x.x is definitely our network, so that's a safe IP address to remove.