Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Strange Report from LFD

Discussion in 'General Discussion' started by isputra, Feb 17, 2007.

  1. isputra

    isputra Well-Known Member

    Joined:
    May 3, 2003
    Messages:
    575
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    Mbelitar
    Hi,

    I just received report from LFD like below :

    --------------------------------------
    On Sat Feb 17 19:45:20 2007, the Login Failure Daemon detected 207.58.149.229 (transfer.cpanel11.com) generating 9 (mod_security) login failures within the last 230 seconds and was blocked.

    Log entries:

    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/adxmlrpc.php"]
    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/adxmlrpc.php"]
    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/adxmlrpc.php"]
    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/adserver/adxmlrpc.php"]
    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/adserver/adxmlrpc.php"]
    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/adserver/adxmlrpc.php"]
    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/phpAdsNew/adxmlrpc.php"]
    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/phpAdsNew/adxmlrpc.php"]
    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/adxmlrpc.php"]
    ---------------------------------

    Yes, its from cpanel or maybe from cpanel because the domain looks like from cpanel. Is it true the ip and domain from cpanel ?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. verdon

    verdon Well-Known Member

    Joined:
    Nov 1, 2003
    Messages:
    868
    Likes Received:
    3
    Trophy Points:
    168
    Location:
    Northern Ontario, Canada
    cPanel Access Level:
    Root Administrator
    Do a whois on it... I don't think that has anything to do with cpanel. The domain is owned by somebody from India.
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice