Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

LFD and port scanning false positive

Discussion in 'Security' started by upsforum, Dec 11, 2013.

  1. upsforum

    upsforum Well-Known Member

    Joined:
    Jul 27, 2005
    Messages:
    471
    Likes Received:
    0
    Trophy Points:
    166
    I activated SSH access of my customer with a virtual host, the problem is that LFD blocked its ip with port scanning motivation:

    Dec 11 15:51:10 vps4 lfd[18580]: *Port Scan* detected from 00.000.00.000 (IT/Italy/host000-000-static.000-00-b.business.telecomi...). 11 hits in the last 171 seconds - *Blocked in csf* for 3600 secs [PS_LIMIT]

    - - - Updated - - -

    I have this values in configuration file

    PS_INTERVAL = Default: 300 [0 or 60-3600]
    PS_LIMIT = Default: 10 [2-20]
    PS_PORTS = 0:65535,ICMP
    PS_DIVERSITY = Default: 1 [1-100]
    PS_PERMANENT = Default: 0 [0-1]
    PS_BLOCK_TIME = Default: 3600 [300-86400]
    PS_EMAIL_ALERT = Default: 1 [0-1]
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,827
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello :)

    Keep in mind that any issues directly related to LFD/CSF are better handled directly on their support forums.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice