On Sat, Apr 09, 2011 at 12:55:12PM -0500, Gerald Waugh wrote: > Look in /var/log/maillog and/or /var/log/messages on or about > Apr 8 11:08:29 > > As it's probably email or ftp associated In no file in /var/log is more info to be found. That's why I am asking myself how to find the offending ip Thanks -- Maurice de Laat