OSSEC HIDS Notification. 2008 Feb 11 14:57:00 Received From: (franklin) xxx.xxx.xxx.100->/var/log/mail.log Rule: 3156 fired (level 10) -> "Multiple rejected e-mails from same source ip." Portion of the log(s):