Private IPs in access logs?

Vipin Haridas

Member
Aug 3, 2016
9
0
1
India
cPanel Access Level
Root Administrator
Hi,

I could see the following entries in cPanel access logs:

=====
10.2.0.12 - root [08/22/2018:20:03:18 -0000] "POST /cgi/addon_WPC.cgi?s=bin/../lib/Server.pm:3367:_whm_perl_code:GT::Hello+-+127.0.0.1+[nocaller] HTTP/1.0" 200 0 "-" "-" "a" "-" 2087
10.2.0.16 - root [08/22/2018:20:13:46 -0000] "POST /cgi/addon_WPC.cgi?s=bin/../lib/Server.pm:3367:_whm_perl_code:GT::Hello+-+127.0.0.1+[nocaller] HTTP/1.0" 200 0 "-" "-" "a" "-" 2087
=====

Why I'm seeing private IP's in my cpanel logs? And is it a security risk?
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,228
463
Hello @Vipin Haridas,

The log suggests one of the third-party WHM plugins you installed is utilizing a POST operation. Since the operation is coming from the plugin itself, the logs show the internal IP address of the server. I recommend checking with the developer or support team for the plugin you are using for more details about what it's actually doing.

Thank you.