Dovecot Hacking attempt from Netherland

This morning I got another notification emails from my Firewall. Another Hacking Attempt to the dovecot, but this time, they are using proxy.

If you come from the search engine looking for this IP, please add it to your blocked lists

Time:     Sun May  1 09:14:55 2011 +0700
IP:       109.235.50.204 (NL/Netherlands/-)
Failures: 5 (smtpauth)
Interval: 300 seconds
Blocked:  Permanent Block

Log entries:

2011-05-01 09:14:53 dovecot_login authenticator failed for (windows) [109.235.50.204]: 535 Incorrect authentication data (set_id=account)
2011-05-01 09:14:53 dovecot_login authenticator failed for (windows) [109.235.50.204]: 535 Incorrect authentication data (set_id=account)
2011-05-01 09:14:53 dovecot_login authenticator failed for (windows) [109.235.50.204]: 535 Incorrect authentication data (set_id=account)
2011-05-01 09:14:54 dovecot_login authenticator failed for (windows) [109.235.50.204]: 535 Incorrect authentication data (set_id=account)
2011-05-01 09:14:54 dovecot_login authenticator failed for (windows) [109.235.50.204]: 535 Incorrect authentication data (set_id=account)

Leave a Reply

Your email address will not be published. Required fields are marked *


*

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code class="" title="" data-url=""> <del datetime=""> <em> <i> <q cite=""> <strike> <strong> <pre class="" title="" data-url=""> <span class="" title="" data-url="">

Post Navigation