[nsp-sec] Compromised ftp accounts

[Thomas Hungenberg]

Chris Calvert schrieb:
> Is the IP in the format the IP of the host of the ftp accounts in question, or something else?
> 
> Format: ASN | IP | CC | ftp username | AS name
> 
> I'm assuming it is the FTP server, but not far enough into my coffee to accept that as the only option.

Yes, it's the IP of the ftp server for account 'ftp username'.


     - Thomas

CERT-Bund Incident Response & Anti-Malware Team