Author: James W. Brinkerhoff Date: To: exim-users Subject: Re: [Exim] Bug in MySQL/SMTP Authentication config code
On Thursday 22 April 2004 05:05 am, The Computer Geek wrote: > We started to look through the logfiles and didn't at first see anything
> strange until yesterday when we noticed that SMTP authentications were
> being accepted by any username with no password.
>
> Users should look for "webmaster" in their logfiles as the authenticated
> username as the spammers have chosen this to look slightly
> inconspicuous.
2004-03-27 03:24:51 login_mysql authenticator failed for (microsof-9dlveu)
[219.153.153.244]:1791: 535 Incorrect authentication data (set_id=webmaster)
2004-03-27 03:24:53 login_mysql authenticator failed for (microsof-9dlveu)
[219.153.153.244]:1791: 535 Incorrect authentication data (set_id=webmaster)
2004-03-27 03:24:54 login_mysql authenticator failed for (microsof-9dlveu)
[219.153.153.244]:1791: 535 Incorrect authentication data (set_id=webmaster)
2004-03-27 03:24:57 login_mysql authenticator failed for (microsof-9dlveu)
[219.153.153.244]:1791: 535 Incorrect authentication data (set_id=webmaster)
2004-03-27 03:24:58 login_mysql authenticator failed for (microsof-9dlveu)
[219.153.153.244]:1791: 535 Incorrect authentication data (set_id=webmaster)
2004-03-27 03:24:59 login_mysql authenticator failed for (microsof-9dlveu)
[219.153.153.244]:1791: 535 Incorrect authentication data (set_id=webmaster)
2004-03-27 03:25:00 login_mysql authenticator failed for (microsof-9dlveu)
[219.153.153.244]:1791: 535 Incorrect authentication data (set_id=webmaster)
2004-03-27 03:25:01 login_mysql authenticator failed for (microsof-9dlveu)
[219.153.153.244]:1791: 535 Incorrect authentication data (set_id=webmaster)
