I know in the CSF firewall I can enter an IP address and see if it's blocked. Is there a way to view a report of why it's blocked? To that end, I have been logging into my server via FTP and downloading the "messages" and "lfd.log" files and searching them for the offending IP address which usually yields the reasons for the block. It would be really helpful if there was a way to pull that information within the cPanel UI. Is there such a feature that I'm not aware of?
I usually check those in WHM -> Plugins -> ConfigServer Security & Firewall -> Server Information -> Search System Logs
In CSF go to the button 'Firewall Deny IP's'
This will show you all denied IP's and the reason for denial.
This will show you all denied IP's and the reason for denial.
Thanks @keat63 and @quietFinn!
@swbrains keep in mind as well that if you manually block an IP address there won't be a reason unless you also add one.
@swbrains keep in mind as well that if you manually block an IP address there won't be a reason unless you also add one.