[nsp-sec] compromised websites again (crew.abnc-portal.com)

[Dirk Stander]

> A reference to this URL has been injected into thousands of compromised websites

ACK 8560 15418

suspicious FTP sessions (timestamps are UTC):
213.155.10.176  31/Mar/2009:04:04:05
213.155.10.176  01/Apr/2009:09:05:19
213.155.10.176  20/Apr/2009:12:53:20
[..]

    kind regards, Dirk Stander (1&1) :.