SM0 She11

Path: / / tmp / csf

Full Path (server): /tmp/csf

📁 ConfigServer Open [D]
📁 Crypt Open [D]
📁 Geo Open [D]
📁 HTTP Open [D]
📁 JSON Open [D]
📄 LICENSE.txt [E] [D]
📁 Module Open [D]
📁 Net Open [D]
📄 accounttracking.txt [E] [D]
📄 alert.txt [E] [D]
📄 changelog.txt [E] [D]
📄 connectiontracking.txt [E] [D]
📄 consolealert.txt [E] [D]
📁 cpanel Open [D]
📄 cpanel.allow [E] [D]
📄 cpanel.comodo.allow [E] [D]
📄 cpanel.comodo.ignore [E] [D]
📄 cpanel.ignore [E] [D]
📄 cpanelalert.txt [E] [D]
📁 csf Open [D]
📄 csf.1.txt [E] [D]
📄 csf.allow [E] [D]
📄 csf.blocklists [E] [D]
📄 csf.c [E] [D]
📄 csf.cloudflare [E] [D]
📄 csf.conf [E] [D]
📄 csf.deny [E] [D]
📄 csf.directadmin.allow [E] [D]
📄 csf.directadmin.conf [E] [D]
📄 csf.directadmin.ignore [E] [D]
📄 csf.directadmin.pignore [E] [D]
📄 csf.dirwatch [E] [D]
📄 csf.div [E] [D]
📄 csf.dyndns [E] [D]
📄 csf.fignore [E] [D]
📄 csf.generic.allow [E] [D]
📄 csf.generic.conf [E] [D]
📄 csf.generic.ignore [E] [D]
📄 csf.generic.pignore [E] [D]
📄 csf.help [E] [D]
📄 csf.ignore [E] [D]
📄 csf.logfiles [E] [D]
📄 csf.logignore [E] [D]
📄 csf.mignore [E] [D]
📄 csf.pignore [E] [D]
📄 csf.rblconf [E] [D]
📄 csf.rbls [E] [D]
📄 csf.redirect [E] [D]
📄 csf.resellers [E] [D]
📄 csf.rignore [E] [D]
📄 csf.service [E] [D]
📄 csf.signore [E] [D]
📄 csf.sips [E] [D]
📄 csf.smtpauth [E] [D]
📄 csf.suignore [E] [D]
📄 csf.syslogs [E] [D]
📄 csf.syslogusers [E] [D]
📄 csf.uidignore [E] [D]
📄 csfajaxtail.js [E] [D]
📁 da Open [D]
📄 exploitalert.txt [E] [D]
📄 filealert.txt [E] [D]
📄 forkbombalert.txt [E] [D]
📄 install.txt [E] [D]
📄 integrityalert.txt [E] [D]
📄 lfd.logrotate [E] [D]
📄 lfd.service [E] [D]
📄 license.txt [E] [D]
📄 loadalert.txt [E] [D]
📄 logalert.txt [E] [D]
📄 logfloodalert.txt [E] [D]
📁 messenger Open [D]
📄 modsecipdbalert.txt [E] [D]
📄 netblock.txt [E] [D]
📄 out.txt [E] [D]
📄 out.txt2 [E] [D]
📄 permblock.txt [E] [D]
📄 portknocking.txt [E] [D]
📄 portscan.txt [E] [D]
📄 processtracking.txt [E] [D]
📁 profiles Open [D]
📄 queuealert.txt [E] [D]
📄 readme.txt [E] [D]
📄 recaptcha.txt [E] [D]
📄 regex.custom.pm [E] [D]
📄 regex.txt [E] [D]
📄 relayalert.txt [E] [D]
📄 resalert.txt [E] [D]
📄 reselleralert.txt [E] [D]
📄 restricted.txt [E] [D]
📄 sanity.txt [E] [D]
📄 scriptalert.txt [E] [D]
📄 sshalert.txt [E] [D]
📄 sualert.txt [E] [D]
📄 syslogalert.txt [E] [D]
📄 tracking.txt [E] [D]
📁 ui Open [D]
📄 uialert.txt [E] [D]
📄 uidscan.txt [E] [D]
📄 upgrade.txt [E] [D]
📄 usertracking.txt [E] [D]
📁 version Open [D]
📄 version.txt [E] [D]
📄 watchalert.txt [E] [D]
📁 webmin Open [D]
📄 webminalert.txt [E] [D]
📄 x-arf.txt [E] [D]

Editing: regex.custom.pm

#!/usr/bin/perl
###############################################################################
# Copyright 2006-2018, Way to the Web Limited
# URL: http://www.configserver.com
# Email: sales@waytotheweb.com
###############################################################################

sub custom_line {
	my $line = shift;
	my $lgfile = shift;

# Do not edit before this point
###############################################################################
#
# Custom regex matching can be added to this file without it being overwritten
# by csf upgrades. The format is slightly different to regex.pm to cater for
# additional parameters. You need to specify the log file that needs to be
# scanned for log line matches in csf.conf under CUSTOMx_LOG. You can scan up
# to 9 custom logs (CUSTOM1_LOG .. CUSTOM9_LOG)
#
# The regex matches in this file will supercede the matches in regex.pm
#
# Example:
#	if (($globlogs{CUSTOM1_LOG}{$lgfile}) and ($line =~ /^\S+\s+\d+\s+\S+ \S+ pure-ftpd: $\?\@(\d+\.\d+\.\d+\.\d+)$ \[WARNING\] Authentication failed for user/)) {
#		return ("Failed myftpmatch login from",$1,"myftpmatch","5","20,21","1","0");
#	}
#
# The return values from this example are as follows:
#
# "Failed myftpmatch login from" = text for custom failure message
# $1 = the offending IP address
# "myftpmatch" = a unique identifier for this custom rule, must be alphanumeric and have no spaces
# "5" = the trigger level for blocking
# "20,21" = the ports to block the IP from in a comma separated list, only used if LF_SELECT enabled. To specify the protocol use 53;udp,53;tcp
# "1" = n/temporary (n = number of seconds to temporarily block) or 1/permanant IP block, only used if LF_TRIGGER is disabled
# "0" = whether to trigger Cloudflare block if CF_ENABLE is set. "0" = disable, "1" = enable

# If the matches in this file are not syntactically correct for perl then lfd
# will fail with an error. You are responsible for the security of any regex
# expressions you use. Remember that log file spoofing can exploit poorly
# constructed regex's
###############################################################################
# Do not edit beyond this point

return 0;
}