Logs

[vb2cans]

Hi guys,
If I have a user getting blocked with an ip address say 203.57.138.20 (Not real IP address)
I now want to find in the logs why he was blocked. This IP address is currently unblocked so looking at csf.deny does not help

Kind Regards

Steve

[Sergio]

Hi, Steve.
The first thing I always check is on MailScanner for the subject containing the IP, something like this:

subjec contains tblocked 203.57.138.20

then just check the body of the email and you will have the info that you need.

Sergio

[vb2cans]

Hi Sergio,
I am not running Mailscanner

[Sergio]

You should
the one that is installed by ConfigServer is a great tool.

Ok, then in CSF under the "Search System Logs", try to find the IP.
Also, you can search for the IP on the ModSecurity area of your server.