[nsp-sec] ACK: Re: 12k probably compromised FTP accounts

Matsuzaki Yoshinobu maz at iij.ad.jp
Thu Apr 3 05:19:23 EDT 2008


Tom Fischer <tfischer at bfk.de> wrote
> attached (the first part) of a list of probably compromised 
> FTP accounts. The data is based on an iframer toolkit 
> (a toolkit which uses stolen FTP credentials to add iframes/JavaScript/...).

Thanks and ACK for the following Japanese ASs.

 2514 | 210.136.109.17  | okamotojp.com         |kay%003aacc
 2516 | 125.53.25.6     | eyezine.net           |blueblue%004e3a0
 4725 | 210.237.140.6   | report1.apu.ac.jp             |kiwookw3
 4725 | 210.237.140.6   | report1.apu.ac.jp             |mutinu04
17676 | 221.75.233.15   | radiourso.com         |Adautofx%0040285
17676 | 221.75.233.15   | radiourso.com         |Adautofx%0041d8e
23816 | 202.93.75.222   | ftp.geocities.jp              |j0715jp
23820 | 203.190.60.131  | ftp.isweb.infoseek.ne.jp              |braten-fisch
-----
Matsuzaki Yoshinobu <maz at iij.ad.jp>
 - as nsp-security-jp-owner



More information about the nsp-security mailing list