Creating spammer IP report based on exim_rejectlog

[patrique]

Hello everyone,

I'm trying to find a way that I can create some type of report that would read /var/log/exim_rejectlog for IPs that are currently hitting my server and show how many times each source IP is used as well as which emails are under the most attacks.

I'm thinking of using that info and then creating a deny rule for that IP...

Is such a thing possible?

thanks.

 

[dynaweb]

Merry Christmas

tail -90000 /var/log/exim_rejectlog | awk -F "[" '{ print $3 }' | awk -F "]" '{ print $1 }' | sort | uniq -c | sort -g

I made this myself and it really helped me.