lfd on ***.***.***: ModSecurity persistent IP database size alert

LFD was throwing the following error for sometime in a server:
ModSecurity persistent IP database (/var/cpanel/secdatadir/ip.pag) size is 10.72GB
This requires further investigation otherwise it will start to affect server performance.

Interestingly, when I was checking the file /var/cpanel/secdatadir/ip.pag using 'du', it was showing only 41MB usage. It is because this file is a sparse file, and it can store a lot of 0 bit into it. For some reason, lfd determines the actual size of this file and sends warning when the actual size of the file hits 10GB, not the usage. To fix this, simply truncate the file or create a new file.
mv /var/cpanel/secdatadir/ip.pagtouch; /var/cpanel/secdatadir/ip.pag; chmod 755 /var/cpanel/secdatadir/ip.pag; chown nobody:nobody /var/cpanel/secdatadir/ip.pag; service httpd restart
  • lfd, csf, config server firewall, cpanel, modsecurity
  • 0 Users Found This Useful
Was this answer helpful?

Related Articles

R1soft Backup Error - Failed To Backup LVM/MD Configuration

It looks like R1Soft manages it's own lvm.static file to process lvm backups. But sometimes it...

Does R1Soft work with LVM?

It does. But it is not fully supported as of 28th November, 2017. If you have a solid logical...

Error getting authority: Error initializing authority: Could not connect: Connection refused (g-io-error-quark, 39)

CentOS 7 / CloudLinux 7 / RHEL 7 may show the following error while restarting Apache/Exim or...

[957833.048873] EXT4-fs warning (device dm-0): ext4_dx_add_entry:2016: Directory index full!

A dedicated server customer came with an error of failed WHM login. When I tried to enter, I...

Fatal error: Uncaught exception 'Google_IO_Exception' with message 'Couldn't resolve host 'accounts.google.com''

Sometimes, Google library can return the following error: Fatal error: Uncaught exception...