CC_Block active yet lfd alerts still being sent

Post Reply
bulgin23
Junior Member
Posts: 23
Joined: 06 Apr 2018, 01:17

CC_Block active yet lfd alerts still being sent

Post by bulgin23 »

Is it normal with active both:

CC_ALLOW_FILTER = UK, US

AND regex.custom.pm:

if (($globlogs{CUSTOM3_LOG}{$lgfile}) and ($line =~ /^.*\[client (\S+):\d+\].*(wp-login|xmlrpc).*/)) {
return ("WP whacker",$1,"WP_whacker","1","","172800");

to continue to receive alerts from non UK, US actors?

ps CC_ALLOW_FILTER = UK, US is active and working as "ipset list" shows both countries block lists active.
Post Reply