[nsp-sec] Heads up AKAMAI --> compromised ftp accounts 20090804

[Patrick W. Gilmore]

On Aug 4, 2009, at 2:07 PM, Smith, Donald wrote:

> ----------- nsp-security Confidential --------
>
> All but the first IP of the listed Qwest ips are really akami's.
> The first one is one of those free photo sites.

Thanx.  ACK for Akamai.  (And spelling it right so my filters work. :)

--  
TTFN,
patrick


> Dirk, what does it mean when the username has a slash in it? Is the  
> second element the password for the account?
>
>
> 209     | 63.146.183.88    | US | ftp.swapdrive.com vaau/iamuser
>
>
>
>
> (coffee != sleep) & (!coffee == sleep)
> Donald.Smith at qwest.com gcia
>
>> -----Original Message-----
>> From: nsp-security-bounces at puck.nether.net
>> [mailto:nsp-security-bounces at puck.nether.net] On Behalf Of
>> Dirk Stander
>> Sent: Tuesday, August 04, 2009 11:36 AM
>> To: nsp-security at puck.nether.net
>> Subject: [nsp-sec] compromised ftp accounts 20090804
>>
>> ----------- nsp-security Confidential --------
>>
>>
>
>
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
>
> Please do not Forward, CC, or BCC this E-mail outside of the nsp- 
> security
> community. Confidentiality is essential for effective Internet  
> security counter-measures.
> _______________________________________________