[nsp-sec] More compromised ftp accounts

[Gabriel Iovino]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Thomas Hungenberg wrote:
> Please find attached a sanitized list (pw removed) of 8169 compromised ftp accounts that are new.
> Format: ASN | IP | CC | ftp username | AS name

Sanitized notifications have been sent to the following:

> 239     | 128.100.132.23   | CA | isaacdan        | UTORONTO-AS - University of Toronto
> 4190    | 128.226.119.60   | US | rajdeep         | BINGHAMTON-U - Binghamton University
> 6325    | 209.7.255.2      | US | tricityschools  | ILLINOIS-CENTURY - Illinois Century Network


Thanks for passing along the iframe that might have been injected as well.

Gabe

- --
Gabriel Iovino
Principal Security Engineer, REN-ISAC
http://www.ren-isac.net
24x7 Watch Desk +1(317)278-6630
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkqhOBEACgkQwqygxIz+pTsBEACeNv+jwAyLYLtVMkd9agqtM2IJ
7fkAoImg/jEqvHXPMi93GRM60WKAcLI+
=Xx0K
-----END PGP SIGNATURE-----