[nsp-sec] 2914 ack'd Re: 6k probably compromised FTP accounts

[Tino Steward]

ACK'd 2914 

 2914 | 140.174.70.21   | romeoproductions.com  | romeo%004f8c5
 2914 | 198.106.21.66   | freestylewriter.com   | protemus%004704e
 2914 | 198.106.21.66   | freestylewriter.com   | pubupload%004704e
 2914 | 198.170.104.138 | ansijournals.com      | sarwarm%0035954
 2914 | 199.73.36.136   | waterislife.net       | water%0053a54
 2914 | 207.56.166.43   | cellp.com     | tsc38910%003f25b
 2914 | 207.56.92.159   | agiliance.com | pkothari%00499ef
 2914 | 207.57.30.7     | ppiworldwide.com      | ppiwor
 2914 | 207.57.68.235   | glenrosa.com.au       | ouupnnvt
 2914 | 207.57.81.168   | tto.com.au    | tto
 2914 | 61.58.41.104    | swftp.gigabyte.com.tw | software

-- 

Tino T. Steward SNA1 - Security & Abuse	                                     tsteward at us.ntt.net
NTT Communications Global IP Network Operations Center                       
214-853-7344 (Ph.)                                                           214.800.7771 (Fax) 

AUP online: http://www.nttamerica.com/legal/internet/acceptable_policy.html 
AUP online: http://www.ntt.net/library/pdf/AUP.pdf 

Check http://www.cert.org for some of the latest documented exploits and your OS manufacturer for the latest security patches.

Intruder detection: http://www.cert.org/tech_tips/intruder_detection_checklist.html

Latest viruses: http://www.cert.org

Recovering from a compromised host: http://www.cert.org/tech_tips/win-UNIX-system_compromise.html