[nsp-sec] Heads up AKAMI --> RE: compromised ftp accounts 20090804

[Smith, Donald]

All but the first IP of the listed Qwest ips are really akami's.
The first one is one of those free photo sites.

Dirk, what does it mean when the username has a slash in it? Is the second element the password for the account?


209     | 63.146.183.88    | US | ftp.swapdrive.com vaau/iamuser




(coffee != sleep) & (!coffee == sleep)
Donald.Smith at qwest.com gcia   

> -----Original Message-----
> From: nsp-security-bounces at puck.nether.net 
> [mailto:nsp-security-bounces at puck.nether.net] On Behalf Of 
> Dirk Stander
> Sent: Tuesday, August 04, 2009 11:36 AM
> To: nsp-security at puck.nether.net
> Subject: [nsp-sec] compromised ftp accounts 20090804
> 
> ----------- nsp-security Confidential --------
> 
>