Hi, I see these logs on pop3: @400000004e32be9f2581381c tcpserver: ok 19434 ns.mozdesigners.com:196.46.2.236:110 :203.200.117.65::3912 @400000004e32bea00e2281e4 tcpserver: end 19433 status 256 @400000004e32bea00e22f32c tcpserver: status: 3/200 @400000004e32bea020c630ac tcpserver: end 19434 status 256 @400000004e32bea020c63c64 tcpserver: status: 2/200 @400000004e32bea11ed14264 tcpserver: status: 3/200 @400000004e32bea11ed15204 tcpserver: pid 19449 from 203.200.117.65 @400000004e32bea11edeb7b4 tcpserver: ok 19449 ns.mozdesigners.com:196.46.2.236:110 :203.200.117.65::3970 @400000004e32bea21499cfb4 tcpserver: end 19449 status 256 @400000004e32bea21499df54 tcpserver: status: 2/200 @400000004e32bea312f84ce4 tcpserver: status: 3/200 @400000004e32bea312f8589c tcpserver: pid 19456 from 203.200.117.65 @400000004e32bea312f86454 tcpserver: ok 19456 ns.mozdesigners.com:196.46.2.236:110 :203.200.117.65::4024 @400000004e32bea409545fd4 tcpserver: end 19456 status 256 @400000004e32bea409546f74 tcpserver: status: 2/200 @400000004e32bea5084443ac tcpserver: status: 3/200 @400000004e32bea50844534c tcpserver: pid 19462 from 203.200.117.65 @400000004e32bea508445f04 tcpserver: ok 19462 ns.mozdesigners.com:196.46.2.236:110 :203.200.117.65::4092
It seams to be a dos. For smtp I use fail2ban. Anyone knows how to block these IP using by creating a rule on fail2ban? Regards
