ConfigServer Community Forum

Subject cxs Scan on host.domain.com (Hits:1) (Viruses:0) (Fingerprints:1) Body: Scanning web upload script file... Time : Thu, 24 Nov 2022 23:58:36 -0500 Web referer URL : google.com Local IP : 11.11.11.11 Web upload script user : nobody (99) Web upload script owner: ertcin (1171) Web upload script ...

Also, if I click the "view cxs Watch Command" button inside WHM this is the command there: /usr/sbin/cxs --allusers --clamdsock /var/clamd --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 0 --noforce --html --ignore /etc/cxs/cxs.ignore --logfile /var/log/cxs.log --mail...

I'm trying to make cxs ignore the wordpress file admin-ajax.php so I created a file named cxs.ignore (it didn't exist) and put the following in it: hfile:/public_html/wp-admin/admin-ajax.php Restarted the service but I'm still receiving emails about that file. I read somewhere else on this forum tha...

Got it, thanks for your help

Thanks for all your help, Honestly I tried to find the answer using regex101.com but couldn't. What if I want to add more information to the log but I want csf to ignore it? Maybe something like: ignore the rest of the line after the ip address Something like this: 2022-11-12 18:14:32 192.34.9.3 htt...

It worked!, thank you!

A little help here guys. I created an extremely simple wordpress plugin that creates log of failed login attempts, this way I can target only a brute force attack and not a webmaster login into several sites in an hour for normal work (this is a server with more than a thousand wordpress sites) I ca...

I will, thank you

A little help here guys. I created an extremely simple wordpress plugin that creates log of failed login attempts, this way I can target only a brute force attack and not a webmaster login into several sites in an hour for normal work (this is a server with more than a thousand wordpress sites) I ca...