You get an email every time CSF / lfd blocks an IP address from your web server which may look similar to this.
IP: xxx.xxx.xxx.xxx (Country Code/Country/hostname)
Failures: 5 ( sshd, smtpauth, etc)
Interval: 3600 seconds
Blocked: Permanent Block
[Date] refused connect from [IP address]
As the documentation states:
Send an email alert if an IP address is blocked by one of the [*] triggers
This setting needs to be disabled.
- Open the CSF config file in your web admin panel (if you have one) or by manually editing the file that is usually located here:
- Change the “LF_EMAIL_ALERT” setting to 0.
- Save changes.
- Restart the csf and lfd processes.