OSSEC HIDS Notification.
2008 Feb 11 14:57:00
Received From: (franklin) xxx.xxx.xxx.100->/var/log/mail.log
Rule: 3156 fired (level 10) -> "Multiple rejected e-mails from same source ip."
Portion of the log(s):
Feb 11 14:57:02 franklin sm-mta[25047]: m1BJtV2s025047: ruleset=check_rcpt,
arg1=<stawney@mail>, relay=dsl88-229-63699.ttnet.net.tr [88.229.248.211] (may be
forged), reject=554 5.7.1 Rejected 88.229.248.211> BLACKLISTED found in zen.spamhaus.org
Feb 11 14:56:56 franklin sm-mta[25047]: m1BJtV2s025047: ruleset=check_rcpt,
arg1=<skelley@mail>, relay=dsl88-229-63699.ttnet.net.tr [88.229.248.211] (may be
forged), reject=554 5.7.1 Rejected 88.229.248.211> BLACKLISTED found in zen.spamhaus.org
Feb 11 14:56:50 franklin sm-mta[25047]: m1BJtV2s025047: ruleset=check_rcpt,