Today I got another hacking attempt to my webserver using an IP from China.
If you come to this blog from the searching engine, searching for this IP (113.240.67.223), then add then to your blocked lists.
Time:Â Â Â Â Wed Apr 13 18:52:10 2011 +0700
IP:Â Â Â Â Â 113.240.67.223 (CN/China/-)
Failures: 5 (smtpauth)
Interval: 300 seconds
Blocked:Â Permanent Block
Log entries:
2011-04-13 18:51:41 dovecot_login authenticator failed for (ylmf-pc) [113.240.67.223]: 535 Incorrect authentication data (set_id=info)
2011-04-13 18:51:45 dovecot_login authenticator failed for (ylmf-pc) [113.240.67.223]: 535 Incorrect authentication data (set_id=info)
2011-04-13 18:51:57 dovecot_login authenticator failed for (ylmf-pc) [113.240.67.223]: 535 Incorrect authentication data (set_id=info)
2011-04-13 18:52:01 dovecot_login authenticator failed for (ylmf-pc) [113.240.67.223]: 535 Incorrect authentication data (set_id=info)
2011-04-13 18:52:05 dovecot_login authenticator failed for (ylmf-pc) [113.240.67.223]: 535 Incorrect authentication data (set_id=info)