Facebook
Twitter- Server operating system version
- Ubuntu 24.04 x86_64
- Plesk version and microupdate number
- Plesk Obsidian 18.0.70.1
hello,
at may 15 this year apache2 error.log have a new log Format
at my Server (may be psa changed it) .
before:
[Wed May 14 22:56:43.538952 2025] [security2:error] [pid 230680:tid 126620308326080] [client xx.138.yy.24:0] [client xx.138.yy.24] ModSecurity: Access denied with ... .. .
(two times 'client')
and now:
[Thu May 15 02:48:54.818669 2
(only 1 times 'client')
the fileregex is:
i have changed the failregex several times, also:
but nothing helps ;-(
the problem is the format of the ip adress .. after the address is ':0' .
how i can change the failregex, that it is working again ??
regards
millerbln
at may 15 this year apache2 error.log have a new log Format
at my Server (may be psa changed it) .
before:
[Wed May 14 22:56:43.538952 2025] [security2:error] [pid 230680:tid 126620308326080] [client xx.138.yy.24:0] [client xx.138.yy.24] ModSecurity: Access denied with ... .. .
(two times 'client')
and now:
[Thu May 15 02:48:54.818669 2
025] [security2:error] [pid 324623:tid 127982140110528] [client 64.xxx.249.yyy:0] ModSecurity: Access denied with .. .. .(only 1 times 'client')
the fileregex is:
failregex = ^.*\[client <HOST>\] ModSecurity: Access denied with code(.*) i have changed the failregex several times, also:
failregex = ^.*\[client (?::::0f{5,7}:)?(?P<host>\:\0\S+)\] ModSecurity: Access denied with code(.*)but nothing helps ;-(
the problem is the format of the ip adress .. after the address is ':0' .
how i can change the failregex, that it is working again ??
regards
millerbln
