OSSEC HIDS Notification. 2008 Feb 11 14:57:00 Received From: (franklin) xxx.xxx.xxx.100->/var/log/mail.log Rule: 3156 fired (level 10) -> "Multiple rejected e-mails from same source ip." Portion of the log(s): Feb 11 14:57:02 franklin sm-mta[25047]: m1BJtV2s025047: ruleset=check_rcpt, arg1=, relay=dsl88-229-63699.ttnet.net.tr [88.229.248.211] (may be forged), reject=554 5.7.1 Rejected 88.229.248.211> BLACKLISTED found in zen.spamhaus.org Feb 11 14:56:56 franklin sm-mta[25047]: m1BJtV2s025047: ruleset=check_rcpt, arg1=, relay=dsl88-229-63699.ttnet.net.tr [88.229.248.211] (may be forged), reject=554 5.7.1 Rejected 88.229.248.211> BLACKLISTED found in zen.spamhaus.org Feb 11 14:56:50 franklin sm-mta[25047]: m1BJtV2s025047: ruleset=check_rcpt,