Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Suphp log repeating entries every second

Discussion in 'General Discussion' started by magicalwonders, Sep 28, 2014.

  1. magicalwonders

    magicalwonders Well-Known Member

    Joined:
    Nov 21, 2012
    Messages:
    112
    Likes Received:
    2
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Hello,

    I'm going through my various logs trying to get everything into good shape, and I've noticed that I'm getting entries for the same action being repeated every second on one of them. -

    When checking the access logs, I can see the following, which appears to be someone trying to access my Wordpress control panel -
    According to my lockdown plugin in WP, the IP has been blocked for 30 mins, although that doesn't seem to have taken effect.

    When I try and add the IP 216.70.94.44 to my IP deny manager in cPanel for that account, it returns "Invalid IP range" and won't let me add it!

    Any ideas on what I can do?
     
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,197
    Likes Received:
    1,936
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello :)

    What do you see in /usr/local/cpanel/logs/error_log when attempting to block the IP address through cPanel?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. magicalwonders

    magicalwonders Well-Known Member

    Joined:
    Nov 21, 2012
    Messages:
    112
    Likes Received:
    2
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    This is a bit strange. There doesn't appear to be any entries in the error log anymore for this issue! Although the access log still references the login attempts for yesterday, and they eventually stopped appearing. I'm not sure where they've gone. There were hundreds of them!

    I can't find any any reference in /usr/local/cpanel/logs/error_log to my attempt to block the IP either. I searched the file for the IP address, but it didn't find anything.

    If it happens again I'll check with the log straight away and see what is says! :) For now though things seem to be OK again.
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice