Sudden decrease in LFD blocked alerts

Post Reply
aleah78
Junior Member
Posts: 1
Joined: 11 Aug 2021, 02:21

Sudden decrease in LFD blocked alerts

Post by aleah78 »

I usually receive a minimum of 50 LFD blocked alerts a day, but yesterday I noticed a sudden decrease to only a handful. This seems like an anomaly, so I am a bit concerned. I haven’t made any changes to the Firewall configuration (except for PT_Usermem) and I’m not seeing any major changes in my server activity. In short, I don’t know if this is a problem or not. Just wondering if anyone has experienced this before and if I need to do more investigation. I checked the error logs and I’m not seeing any errors other than a CC error asking for a license key for MaxMind databases. I’m a newbie to CSF, I took over this server from my deceased husband last year. I’m still getting the usual alerts for WHM access, SSH access, Suspicious process/Excessive process..etc..,

Anyone know what’s happening?
Sergio
Junior Member
Posts: 1685
Joined: 12 Dec 2006, 14:56

Re: Sudden decrease in LFD blocked alerts

Post by Sergio »

If you are not receiving alerts means that CSF has blocked the IPs that are trying to do bad things to your server, so, that is a good sign that CSF is doing its work and the attacks have ceased for a while.
Post Reply