.: Mike Tancsa (Mon, Apr 13, 2009 at 11:27:32AM -0400)
> Also part of this customer compromise seems to be the IP 212.227.114.144. The attacker tried
> to login from that location using the customers old credentials on 12-04-09 23:00:17 UTC.
replied off-list.
Regards, Dirk Stander (1&1 Internet AG) :.