The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Strange Report from LFD

Discussion in 'General Discussion' started by isputra, Feb 17, 2007.

  1. isputra

    isputra Well-Known Member

    Joined:
    May 3, 2003
    Messages:
    576
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Mbelitar
    Hi,

    I just received report from LFD like below :

    --------------------------------------
    On Sat Feb 17 19:45:20 2007, the Login Failure Daemon detected 207.58.149.229 (transfer.cpanel11.com) generating 9 (mod_security) login failures within the last 230 seconds and was blocked.

    Log entries:

    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/adxmlrpc.php"]
    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/adxmlrpc.php"]
    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/adxmlrpc.php"]
    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/adserver/adxmlrpc.php"]
    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/adserver/adxmlrpc.php"]
    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/adserver/adxmlrpc.php"]
    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/phpAdsNew/adxmlrpc.php"]
    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/phpAdsNew/adxmlrpc.php"]
    [Sat Feb 17 19:45:16 2007] [error] [client 207.58.149.229] mod_security: Access denied with code 406. Pattern match "adxmlrpc.php" at REQUEST_URI [uri "/adxmlrpc.php"]
    ---------------------------------

    Yes, its from cpanel or maybe from cpanel because the domain looks like from cpanel. Is it true the ip and domain from cpanel ?
     
  2. verdon

    verdon Well-Known Member

    Joined:
    Nov 1, 2003
    Messages:
    836
    Likes Received:
    2
    Trophy Points:
    18
    Location:
    Northern Ontario, Canada
    cPanel Access Level:
    Root Administrator
    Do a whois on it... I don't think that has anything to do with cpanel. The domain is owned by somebody from India.
     
Loading...

Share This Page