Hi All I am getting a lot of entries like these in my logs over the last few days:
2007-09-23 05:00:08 fixed_login authenticator failed for (windows) [64.62.22.218]:8204 I=[84.40.17.13]:25: 535 Incorrect authentication data (set_id=maxwell) 2007-09-23 05:00:08 fixed_login authenticator failed for (windows) [64.62.22.218]:8164 I=[84.40.17.12]:25: 535 Incorrect authentication data (set_id=smiles) 2007-09-23 05:00:09 fixed_login authenticator failed for (windows) [64.62.22.218]:8250 I=[84.40.17.12]:25: 535 Incorrect authentication data (set_id=smokey) 2007-09-23 05:00:11 fixed_login authenticator failed for (windows) [64.62.22.218]:8301 I=[84.40.17.13]:25: 535 Incorrect authentication data (set_id=nancy) 2007-09-23 05:00:12 fixed_login authenticator failed for (windows) [64.62.22.218]:8341 I=[84.40.17.12]:25: 535 Incorrect authentication data (set_id=snickers) 2007-09-23 05:00:13 fixed_login authenticator failed for (windows) [64.62.22.218]:8395 I=[84.40.17.13]:25: 535 Incorrect authentication data (set_id=nascar) 2007-09-23 05:00:14 fixed_login authenticator failed for (windows) [64.62.22.218]:8437 I=[84.40.17.12]:25: 535 Incorrect authentication data (set_id=speedy) 2007-09-23 05:00:15 fixed_login authenticator failed for (windows) [64.62.22.218]:8488 I=[84.40.17.13]:25: 535 Incorrect authentication data (set_id=nelson) 2007-09-23 05:00:15 fixed_login authenticator failed for (windows) [64.62.22.218]:8535 I=[84.40.17.12]:25: 535 Incorrect authentication data (set_id=spooky) 2007-09-23 05:00:15 fixed_login authenticator failed for (windows) [64.62.22.218]:8609 I=[84.40.17.13]:25: 535 Incorrect authentication data (set_id=network) 2007-09-23 05:00:16 fixed_login authenticator failed for (windows) [64.62.22.218]:8634 I=[84.40.17.12]:25: 535 Incorrect authentication data (set_id=stephani) Am I right in thinking this is a spam dictionary attack from "cr4p sp4mm3r s0ftw4re" or hack attempts to send via my server ? I tried searching for info, and plenty of examples but no explanations ! Many thanks Phil _____________________________________________ Website Hosting from only £5.00 per month. www.medwayhosting.com - +44 (0)1634 856965 _____________________________________________ Digital & Traditional Printing, and much more www.medwayprint.com - +44 (0)1634 281199 _____________________________________________ -- ## List details at http://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
