Hi,
I think they are furious about this POST to (probably) an admin interface.
But it could also be the fact that somebody crawled their site over your relay.
~Josef
Am 20.05.2016 um 17:12 schrieb Dr Gerard Bulger:
5.77.47.142 - - [16/May/2016:15:19:56 -0400] "POST /admin/ HTTP/1.1" 302 1079 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0"