ConfigServer Community Forum

I'm using this rule I pulled from the forum: # BLOCKING LiteSpeed attacks by Sergio if (($lgfile eq $config{CUSTOM4_LOG}) and ($line =~ /^\S+\s+\S+\s\[NOTICE\].*Failed Login Attempt \- username: (\S+) ip: (\S+)/i)) { return ("$1",$2,"SECMAS_LiteSpeed","1","1")...

Hi, I have CSF monitoring one of my files, and it's not picking up non-standard log lines generated by LiteSpeed. I have a ton of these: 2023-04-07 10:44:40.487175 [NOTICE] [12043] [T0] [[redacted]:39787-22#_AdminVHost:lsapi] [STDERR] [WebAdmin Console] Failed Login Attempt - username: admin ip: 185...