[gargravarr]

One of the more amusing patterns I spotted in the URLs is where an alarming amount of the filesystem appears to be exposed, e.g.:

www.dulceswilly.com/mysql/BHP_sym/root/usr/local/etc/apache22/server.key

If I was on a non-company IP, I'd be tempted to poke around and see what else is visible...

[ryanlol]

These are already hacked systems where someone has been trying to perform a "symlink attack" to access other users files with the httpds permissions.

[edward]

mysql root password: http://www.dulceswilly.com/mysql/BHP_sym/root/root/.my.cnf

[ndury]

Too late, "professional" hackers from indonesia already done the job.

Front page reads:

PELITABANGSA .CA [ INDONESIA CYBER ATTACK AND MALWARE ANALYST ]