block 404 not working

[deutschnaftula]

i have csf setup and its working very good (blocking everything i configured) but its not blocking 404 after 60 404s

my 404 logs look like this

[16/Mar/2017:18:04:04 -0400] "GET /site/cfg000b HTTP/1.1" 404 12095 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"



do i need to have any custom settings or why is this not working?

[deutschnaftula]

the log file is this


98.xx.xx.xx - btpro [25/Jun/2017:10:32:44 -0400] "GET /public/models/0015ae37.cfg HTTP/1.1" 404 431 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G930F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36"


i have in regex.custom.pm this

if (($globlogs{HTACCESS_LOG}{$lgfile}) and ($line =~ /(\S+).*] "GET *" 404 */)) {
return ("Application 404 error from",$1,"app404","10","80,443","1800");
}


all logs are saved in /var/log/apache2/error.log but its not working, what could be wrong??