Large Hacking Attempt from serveursdns.net

I got another notification email from my Firewall, that someone is trying to do a hacking attempt to my web server.

If you come from the searching engine looking for this IP, then add it to your blocked lists.

Time:     Sun May  1 02:53:15 2011 +0700
IP:       82.223.192.134 (FR/France/vrtl12525.serveursdns.net)
Failures: 10 (pop3d)
Interval: 300 seconds
Blocked:  Permanent Block

Log entries:

May  1 02:53:02 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<%null%>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May  1 02:53:02 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<%null%>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May  1 02:53:04 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<%username%>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May  1 02:53:04 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<%username%>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May  1 02:53:06 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<123456>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May  1 02:53:06 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<123456>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May  1 02:53:09 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<12345678>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May  1 02:53:09 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<12345678>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May  1 02:53:11 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<123456789>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May  1 02:53:11 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<123456789>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx

Leave a Reply

Your email address will not be published. Required fields are marked *