ConfigServer Community Forum

So if I whitelist some IP's from a country in the Firewall Allow IPs list and then add thata country code to the CC_DENY settings, will those whitelisted IP's be allowed access to the server?

Yea, I have to agree. There are a lot of posts but few replies from knowledgeable individuals.

I determined that some of these server warnings are coming from my old server that had not been shutdown yet after we migrated to a new server. They are terminating the old server so we'll see what happens.

I manually removed the /user/local/bandmin directory. I checked all cron jobs and did not see any bandmin text anywhere.

One more ...after I deleted the /usr/local/bandmin directory. ​---------- Forwarded message --------- From: (Cron Daemon) <root@web.XXXXXXXX.net> Date: Mon, Sep 30, 2019 at 8:40 PM Subject: {Spam?} Cron <root@web> /usr/local/bandmin/bandmin To: <root@web.XXXXXXXX.net> /bin/sh: /usr/local/bandmin/ban...

Here are three of about 30-35 just in the last month. ​---------- Forwarded message --------- From: (Cron Daemon) <root@web.XXXXXXXX.net> Date: Mon, Sep 30, 2019 at 11:40 AM Subject: {Spam?} Cron <root@web> /usr/local/bandmin/bandmin To: <root@web.XXXXXXXX.net> /bin/sh: /usr/local/bandmin/bandmin: I...

I checked the /etc/csf/csf.conf file and here are the settings: # This settings re-enables the cPanel Bandwith chains after iptables is # configured. If bandmin is not functioning, or you don't use the bandmin stats # you can disable this option LF_CPANEL_BANDMIN = "0" I had removed the /u...

I have LF_CPANEL_BANDMIN = "OFF" configured. Yet I still get emails. ​---------- Forwarded message --------- From: (Cron Daemon) <root@web.webbering.net> Date: Mon, Sep 30, 2019 at 10:10 AM Subject: {Spam?} Cron <root@web> /usr/local/bandmin/bandmin To: <root@web.webbering.net> /bin/sh: /u...

I got an email with this message: Scanning web upload script file... Time : Mon, 16 Sep 2019 15:23:48 -0500 Web referer URL : Local IP : 162.241.XXX.XXX Web upload script user : nobody (99) Web upload script owner: () Web upload script path : /home/FOLDERNAME/public_html/wp-content Web upload script...

I was looking at this thread as I use UptimeRobot for all of my client websites that I host on my server. # MJ12-Bot / Baidu / Ahrefs if (($globlogs{CUSTOM2_LOG}{$lgfile}) and ($line =~ /(\S+).*\"*(?:GET|POST|HEAD).* (MJ12bot|Baiduspider|AhrefsBot|UptimeRobot).*/)) { return ("LFD - MJ12-Ba...