CC_Block active yet lfd alerts still being sent
Posted: 01 Jan 2020, 16:41
Is it normal with active both:
CC_ALLOW_FILTER = UK, US
AND regex.custom.pm:
if (($globlogs{CUSTOM3_LOG}{$lgfile}) and ($line =~ /^.*\[client (\S+):\d+\].*(wp-login|xmlrpc).*/)) {
return ("WP whacker",$1,"WP_whacker","1","","172800");
to continue to receive alerts from non UK, US actors?
ps CC_ALLOW_FILTER = UK, US is active and working as "ipset list" shows both countries block lists active.
CC_ALLOW_FILTER = UK, US
AND regex.custom.pm:
if (($globlogs{CUSTOM3_LOG}{$lgfile}) and ($line =~ /^.*\[client (\S+):\d+\].*(wp-login|xmlrpc).*/)) {
return ("WP whacker",$1,"WP_whacker","1","","172800");
to continue to receive alerts from non UK, US actors?
ps CC_ALLOW_FILTER = UK, US is active and working as "ipset list" shows both countries block lists active.