I'm currently trying to ban ip's that reach the hard-limit through fail2ban. But fail2ban tells me that the timestamp used by litespeed in the error.log isn't supported.
Is there any way to change the timestamp format in the error.log?
Could either of you please share your Fail2Ban jail config?
F2B was imperative in protecting our old Apache based web server and I'd really like to have it work well with Litespeed too. Especially vulnerability probes which were dealt with easily with the NoScript jail. I'm hoping LSWS logs those attempts to access known bad scripts that don't exist on our server too so Fail2Ban can block them.