ACZoom

Hello everybody,

currently i am getting slammed with POP3-Requests via Dovecot.

The Lines look like this:

May 12 00:16:36 pop10 dovecot: pop3-login: Disconnected: user=, method=PLAIN, rip=118.129.167.99, lip=188.40.105.124

The IP behind rip is the ip, which should get banned..

Is there anyone with an idea how to set up the regexp?

Thanks in advance..

Marcel