Logs

Post Reply
vb2cans
Junior Member
Posts: 1
Joined: 17 May 2021, 08:40

Logs

Post by vb2cans »

Hi guys,
If I have a user getting blocked with an ip address say 203.57.138.20 (Not real IP address)
I now want to find in the logs why he was blocked. This IP address is currently unblocked so looking at csf.deny does not help

Kind Regards

Steve
Sergio
Junior Member
Posts: 1685
Joined: 12 Dec 2006, 14:56

Re: Logs

Post by Sergio »

Hi, Steve.
The first thing I always check is on MailScanner for the subject containing the IP, something like this:
subjec contains tblocked 203.57.138.20
then just check the body of the email and you will have the info that you need.

Sergio
vb2cans
Junior Member
Posts: 1
Joined: 17 May 2021, 08:40

Re: Logs

Post by vb2cans »

Hi Sergio,
I am not running Mailscanner
Sergio
Junior Member
Posts: 1685
Joined: 12 Dec 2006, 14:56

Re: Logs

Post by Sergio »

You should :)
the one that is installed by ConfigServer is a great tool.

Ok, then in CSF under the "Search System Logs", try to find the IP.
Also, you can search for the IP on the ModSecurity area of your server.
Post Reply