## LiteSpeed Web Server
Users' Manual

### Version 6.3 — Rev. 4

- License Enterprise
- Introduction
- Installation
- Administration
- Security
- Configuration
  - Server General
  - Server Log
  - Server Tuning
  - Server Security
  - Page Cache
  - PageSpeed Config
  - External Apps
  - Fast CGI App
  - Fast CGI Authorizer
  - LSAPI App
  - Servlet Engine
  - Web Server
  - Piped logger
  - Load Balancer
  - Script Handler
  - PHP
  - App Server Settings
  - Listener General
  - Listener SSL
  - Virtual Host Templates
  - Virtual Host Basic
  - Virtual Host General
  - Virtual Host Security
  - Virtual Host SSL
  - Virtual Host PageSpeed Config
  - Rewrite
  - Context
  - Static Context
  - Java Web App Context
  - Servlet Context
  - Fast CGI Context
  - LSAPI Context
  - Proxy Context
  - CGI Context
  - Load Balancer Context
  - Redirect Context
  - App Server Context
  - Rack/Rails Context
  - Add-ons
- Web Console
  - Admin Console General
  - Admin Console Security
  - Admin Listener General
  - Admin Listener SSL

# Real-Time Statistics

## Table of Contents

### Anti-DDoS Blocked IP⇑

#### Description

A comma-separated list of IP addresses blocked by Anti-DDoS protection, each ending with a semi-colon and reason code indicating why the IP address was blocked.
Potential Reason Codes:

- A: BOT_UNKNOWN
- B: BOT_OVER_SOFT
- C: BOT_OVER_HARD
- D: BOT_TOO_MANY_BAD_REQ
- E: BOT_TOO_MANY_DOS_URL
- F: BOT_CAPTCHA
- G: BOT_FLOOD
- H: BOT_REWRITE_RULE
- I: BOT_TOO_MANY_BAD_STATUS
- J: BOT_WAF_DETECTED
- K: BOT_BRUTE_FORCE

The full list of blocked IPs is also available in the Real-Time Stats report file /tmp/lshttpd/.rtreport.

#### Syntax

<blocked_ip_address>;<reason_code>

#### Example

1.0.100.50;E, 1.0.100.60;D, 1.0.100.70;F