One thing to note - ODEX has their own servers.
Why?
Pacnet, their web hoster, uses IIS servers (aka Microsoft
products)
ODEX - Apache server on a Unix OS
So obviously the attacker was gunning directly for ODEX server, not
Pacnet, so he/she doesn't have to go through Pacnet at all. If
he/she has done so... Pacnet would know, would have records and I
tell you, ODEX would be making a lot of noise, to tell Pacnet to
hurry up and release the details or they will threaten legal
action. Double blow to Pacnet.
Obviously someone who likes Unix, otherwise the box wouldn't have
been cracked so easily. And given that he/she promotes open-sourced
products, it shows something.
