ConfigServer Community Forum

I could not access my sites so I used a VPN to see what is wrong and I discovered that my own IP was listed as temporary Blocks: IP:xxxxxxx Port: Dir:in TTL:3600 (lfd - *Port Scan* detected from xxxxxxx. 21 hits in the last 105 seconds) Before that I tried 4-5 numbers in order access cpanel like dom...

I get this alert every 5 minutes:

File: /tmp/systemd-private-c187857224034146b6d5778aa1a95646-ea-php73-php-fpm.service-Va0Oin/tmp/config.tmp.phlT82
Reason: Script, file extension
Owner: x:x (1009:1011)
Action: No action taken

What should I do about it?

Checking the emails, these are forum notifications send by my server IP. Can I exclude that IP/server/email from the relay limits?

Time: Sun Feb 9 17:19:31 2020 +0200
Type: LOCALHOSTRELAY, Remote IP
Count: 101 emails relayed
Blocked: No