The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

The service “p0f” appears to be down

Discussion in 'General Discussion' started by guillof, Oct 27, 2016.

Tags:
  1. guillof

    guillof Member

    Joined:
    Jul 30, 2014
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    I'm receiving tons of email notifications. The subject is:

    [ip-172-31-x-xxx.ap-northeast-1.compute.internal] FAILED : p0f (172.31.x.xxx)


    That ip is not the one from my server anymore (it use to be), but still receiving those messages after I updated the ips, rebooted the server, etc.

    Any idea?
     
    #1 guillof, Oct 27, 2016
    Last edited by a moderator: Oct 27, 2016
  2. Vishnu Pradeep

    Vishnu Pradeep Registered

    Joined:
    Oct 9, 2016
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Hello Guillof,

    The alerts are due to enabling the "p0f" service from "service manager" in WHM/cPanel. This is used to monitor the services and alert if any services goes down. The alerts is usually send to "root" or "cpanel" user and is set to forward to your mail. This forwarding of mail is set in "Contact Manager" in WHM. As per your earlier post, I assume that the system mail accounts are still set to forward to your mail. Since you are not managing the server, please contact the responsible and remove this forwarder. Also, you could direct them to execute the following command to fix the issue, if you wish.
    -----------
    /usr/local/cpanel/scripts/check_cpanel_rpms --fix
    -----------

    Cheers,
    Vishnu Pradeep
     
    #2 Vishnu Pradeep, Oct 27, 2016
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,064
    Likes Received:
    1,288
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Could you verify if you migrated to a new server, or if you changed the IP address of the existing server? Could you review the email headers in the notification to verify which server the notification originates from?

    Thank you.
     
    #3 cPanelMichael, Oct 27, 2016
(You must log in or sign up to post here.)
Loading...
Similar Threads - service “p0f” appears
  1. electric

    New Thread How to enable ssl for mail services for customer's domain?

    electric, Aug 19, 2017 at 4:02 PM, in forum: Security
    Replies:
    0
    Views:
    30
    electric
    Aug 19, 2017 at 4:02 PM
  2. Dhaupin

    Comments in /etc/ips.remotedns (Remote Service IP's)

    Dhaupin, Aug 9, 2017, in forum: Bind / DNS / Nameserver Issues
    Replies:
    3
    Views:
    72
    cPanelMichael
    Aug 10, 2017
  3. guillof

    The service “cpanellogd” appears to be down

    guillof, Jul 26, 2017, in forum: General Discussion
    Replies:
    7
    Views:
    111
    cPanelMichael
    Jul 27, 2017
  4. John Schmerold

    cp systemd: service is marked executable. Please remove executable permission bits

    John Schmerold, Jul 21, 2017, in forum: Security
    Replies:
    3
    Views:
    131
    cPanelMichael
    Aug 9, 2017
  5. Nirjonadda

    Services cpanel-dovecot-solr

    Nirjonadda, Jul 19, 2017, in forum: General Discussion
    Replies:
    2
    Views:
    263
    cPanelMichael
    Jul 19, 2017

Share This Page