ConfigServer Community Forum

Hi guys,
If I have a user getting blocked with an ip address say 203.57.138.20 (Not real IP address)
I now want to find in the logs why he was blocked. This IP address is currently unblocked so looking at csf.deny does not help

Kind Regards

Steve

Hi, Steve.
The first thing I always check is on MailScanner for the subject containing the IP, something like this:

subjec contains tblocked 203.57.138.20

then just check the body of the email and you will have the info that you need.

Sergio

Hi Sergio,
I am not running Mailscanner

You should
the one that is installed by ConfigServer is a great tool.

Ok, then in CSF under the "Search System Logs", try to find the IP.
Also, you can search for the IP on the ModSecurity area of your server.