I got another notification email from my Firewall, that someone is trying to do a hacking attempt to my web server.
If you come from the searching engine looking for this IP, then add it to your blocked lists.
Time:    Sun May 1 02:53:15 2011 +0700
IP:Â Â Â Â Â 82.223.192.134 (FR/France/vrtl12525.serveursdns.net)
Failures: 10 (pop3d)
Interval: 300 seconds
Blocked:Â Permanent Block
Log entries:
May 1 02:53:02 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<%null%>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May 1 02:53:02 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<%null%>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May 1 02:53:04 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<%username%>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May 1 02:53:04 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<%username%>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May 1 02:53:06 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<123456>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May 1 02:53:06 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<123456>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May 1 02:53:09 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<12345678>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May 1 02:53:09 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<12345678>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May 1 02:53:11 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<123456789>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx
May 1 02:53:11 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<123456789>, method=PLAIN, rip=82.223.192.134, lip=174.138.xxx.xxx