[nsp-sec] ACK AS3356 Re: Some more compromised ftp accounts
David Rossbach
david at rossbachs.com
Thu Sep 10 11:00:56 EDT 2009
ACK3356
Thanks for the heads up..
Dave Rossbach
Level3 Communications
AS3356
--------------------------------------------------
From: "Thomas Hungenberg" <th.lab at hungenberg.net>
Sent: Thursday, September 10, 2009 9:51 AM
To: "nsp-sec" <nsp-security at puck.nether.net>
Subject: [nsp-sec] Some more compromised ftp accounts
> ----------- nsp-security Confidential --------
>
>
> Hi teams,
>
> Roman from abuse.ch came across another list of stolen ftp credentials
> on a server hosting a Zeus controller.
>
> Please find attached a sanitized list (pw removed) of 391 ftp accounts
> that were not included in the lists I recently posted here.
>
> Format: ASN | IP | CC | ftp username | AS name
>
> Top 10 country codes:
>
> 139 US
> 29 RU
> 29 DE
> 25 FR
> 22 TR
> 20 NL
> 17 PL
> 13 HU
> 12 KR
> 11 TH
> 10 GB
>
>
> - Thomas
>
> CERT-Bund Incident Response & Anti-Malware Team
>
>
> 174 | 38.113.185.240 | US | pixalas | COGENT Cogent/PSI
> 174 | 38.99.9.133 | US | support55 | COGENT Cogent/PSI
> 1955 | 193.6.35.11 | HU | tcsaba | HBONE-AS HUNGARNET
> 2118 | 194.135.20.251 | RU | creditli | RELCOM-AS RELCOM
> Autonomous System
> 2819 | 62.168.26.84 | CZ | region | GTSCZ GTS NOVERA (GTS
> CZ)
> 2820 | 195.58.41.26 | RU | denis | ELVIS-AS
> Elvis-Telecom, Moscow, Russia
> 2852 | 195.113.57.17 | CZ | webmaster | CESNET2 CESNET,
> z.s.p.o.
> 2914 | 204.2.225.165 | US | cust-r2 |
> NTT-COMMUNICATIONS-2914 - NTT America, Inc.
> 3215 | 193.253.227.229 | FR | Administrateur | AS3215 France
> Telecom - Orange
> 3215 | 86.199.232.158 | FR | acsutoros | AS3215 France
> Telecom - Orange
> 3340 | 195.56.146.40 | HU | globdent | GTS-DATANET-AS DataNet
> Telecommunication Ltd.
> 3340 | 195.56.55.46 | HU | zelebau | GTS-DATANET-AS DataNet
> Telecommunication Ltd.
> 3356 | 62.140.23.189 | GB | u623278 | LEVEL3 Level 3
> Communications
> 3462 | 211.72.204.229 | TW | kisswater.com.tw | HINET Data
> Communication Business Group
> 3561 | 64.14.68.175 | US | titansupplies | SAVVIS - Savvis
> 3595 | 75.127.67.116 | US | peconsul | GNAXNET-AS - Global
> Net Access, LLC
> 3786 | 114.108.132.149 | KR | kcg4055 | LGDACOM LG DACOM
> Corporation
> 3786 | 211.170.249.10 | KR | administrator | LGDACOM LG DACOM
> Corporation
> 4250 | 216.177.137.175 | US | bremcca | ALENT-ASN-1 - Alentus
> Corporation
> 4250 | 216.185.52.42 | US | 7continents | ALENT-ASN-1 - Alentus
> Corporation
> 4750 | 203.146.127.213 | TH | ngosthai | CSLOXINFO-ISP-AS-AP
> CSLOXINFO Public Company Limited.
> 4750 | 203.146.129.181 | TH | hifm | CSLOXINFO-ISP-AS-AP
> CSLOXINFO Public Company Limited.
> 4750 | 203.146.140.17 | TH | musicza.com | CSLOXINFO-ISP-AS-AP
> CSLOXINFO Public Company Limited.
> 4750 | 210.1.31.18 | TH | bangyaic | CSLOXINFO-ISP-AS-AP
> CSLOXINFO Public Company Limited.
> 4755 | 115.112.246.21 | IN | subu | TATACOMM-AS TATA
> Communications formerly VSNL is Leading ISP
> 4755 | 202.54.119.162 | IN | sitemanage | TATACOMM-AS TATA
> Communications formerly VSNL is Leading ISP
> 4755 | 202.54.156.235 | IN | uvintern | TATACOMM-AS TATA
> Communications formerly VSNL is Leading ISP
> 4766 | 220.73.161.81 | KR | wz_cmmotors | KIXS-AS-KR Korea
> Telecom
> 4766 | 222.122.163.80 | KR | maecbak | KIXS-AS-KR Korea
> Telecom
> 4766 | 222.122.43.40 | KR | webper | KIXS-AS-KR Korea
> Telecom
> 5463 | 194.183.224.183 | BE | atv.be | PERCEVAL PERCEVAL NET
> 5483 | 84.0.26.44 | HU | cocktail | HTC-AS Hungarian
> Telecom
> 5578 | 195.168.33.226 | SK | bednarscom | GTS-SK-AS GTS Nextra
> a.s.
> 5578 | 62.168.117.208 | SK | buylo.eu | GTS-SK-AS GTS Nextra
> a.s.
> 6130 | 209.216.227.33 | US | johnx | AIS-WEST - American
> Internet Services, LLC.
> 6461 | 82.98.244.137 | DE | user3068 | MFNX MFN - Metromedia
> Fiber Network
> 6714 | 217.153.202.6 | PL | commons | ATOMNET ATOM SA
> 6724 | 85.214.103.211 | DE | akillievinizcom | STRATO Strato AG
> 7297 | 165.1.58.62 | US | globe7 | APPL-AS ASSOCIATED
> PRESS PROPERTY LIMITED
> 7303 | 190.139.105.22 | AR | archivos | Telecom Argentina S.A.
> 7643 | 123.30.50.96 | VN | internetma | VNN-AS-AP Vietnam
> Posts and Telecommunications (VNPT)
> 7654 | 202.57.162.16 | TH | design_ftp | SIAMGLOBE-AS-AP
> Internet Service Provider Co., Ltd.
> 7859 | 209.68.1.37 | US | betacyte_ci | PAIR-NETWORKS - pair
> Networks
> 8315 | 194.105.128.149 | NL | suitable | ARGEWEB-AS Argeweb
> B.V.
> 8342 | 81.176.69.170 | RU | 1gb_moskalenkov-ru | RTCOMM-AS RTComm.RU
> Autonomous System
> 8359 | 62.118.252.244 | RU | testisd | COMSTAR COMSTAR-Direct
> Moscow region network
> 8426 | 212.61.10.82 | NL | boesjerm | CLARANET-AS ClaraNET
> 8426 | 212.61.252.103 | NL | webcatchnl | CLARANET-AS ClaraNET
> 8486 | 217.117.28.243 | LT | idomu | BNK-AS Baltnetos
> Komunikacijos, UAB
> 8560 | 74.208.128.78 | US | u49644981 | ONEANDONE-AS 1&1
> Internet AG
> 8560 | 82.165.118.220 | DE | u41300584-romu | ONEANDONE-AS 1&1
> Internet AG
> 8560 | 82.165.217.32 | DE | u50008519 | ONEANDONE-AS 1&1
> Internet AG
> 8560 | 82.165.77.176 | DE | u42880867 | ONEANDONE-AS 1&1
> Internet AG
> 8560 | 82.165.93.51 | DE | u36334778 | ONEANDONE-AS 1&1
> Internet AG
> 8737 | 213.75.8.43 | NL | haas1517 | PT KPN Internet
> Solutions
> 8737 | 77.160.206.78 | NL | jeroen | PT KPN Internet
> Solutions
> 8741 | 212.223.164.34 | DE | kharkov | ECORE AS - ecore
> Kommunikations AG
> 8972 | 85.25.124.145 | DE | yenery | PLUSSERVER-AS
> PlusServer AG, Germany
> 8999 | 62.73.5.70 | FR | logistic | AXINET-COM AXINET
> COMMUNICATION Autonomous System
> 9070 | 87.118.140.4 | BG | lawyersbgorg | ITD ITD Network
> Bulgarian ISP
> 9121 | 212.174.187.100 | TR | bymetorg | TTNET TTnet Autonomous
> System
> 9121 | 212.174.187.113 | TR | ibrahimk | TTNET TTnet Autonomous
> System
> 9121 | 212.175.170.99 | TR | f2520_tonaUbHQOQ0C | TTNET TTnet
> Autonomous System
> 9121 | 78.111.96.74 | TR | kofulorg | TTNET TTnet Autonomous
> System
> 9121 | 80.93.215.104 | TR | bilginet | TTNET TTnet Autonomous
> System
> 9280 | 116.0.23.218 | AU | int49473 | CIA-AS connect
> infobahn australia (CIA)
> 9318 | 116.127.123.51 | KR | brkorea | HANARO-AS Hanaro
> Telecom Inc.
> 9318 | 118.217.216.132 | KR | monggol | HANARO-AS Hanaro
> Telecom Inc.
> 9318 | 218.237.66.166 | KR | makehome | HANARO-AS Hanaro
> Telecom Inc.
> 9318 | 221.141.1.242 | KR | design | HANARO-AS Hanaro
> Telecom Inc.
> 9318 | 221.141.1.242 | KR | site | HANARO-AS Hanaro
> Telecom Inc.
> 9318 | 222.234.2.88 | KR | photoinet | HANARO-AS Hanaro
> Telecom Inc.
> 9931 | 122.155.3.40 | TH | poo | CAT-AP The
> Communication Authoity of Thailand, CAT
> 9931 | 61.19.251.114 | TH | mobileme | CAT-AP The
> Communication Authoity of Thailand, CAT
> 9931 | 61.19.251.182 | TH | ftphongareon_com | CAT-AP The
> Communication Authoity of Thailand, CAT
> 10297 | 209.190.85.248 | US | b4_2615760 | COLUMBUSNAP - The
> Columbus Network Access Point, Inc.
> 10297 | 209.190.85.248 | US | b4_3225798 | COLUMBUSNAP - The
> Columbus Network Access Point, Inc.
> 10297 | 209.190.85.248 | US | b4_3675035 | COLUMBUSNAP - The
> Columbus Network Access Point, Inc.
> 10297 | 209.190.85.248 | US | im4h_3850735 | COLUMBUSNAP - The
> Columbus Network Access Point, Inc.
> 10316 | 66.226.64.27 | US | globalvideogames | CODERO-AS - Codero
> 10316 | 69.64.87.113 | US | guy | CODERO-AS - Codero
> 11388 | 216.65.20.216 | US | hardware | MAXIM - Peer 1
> Dedicated Hosting
> 11388 | 66.40.52.59 | US | anatat | MAXIM - Peer 1
> Dedicated Hosting
> 11388 | 66.40.52.59 | US | saamil | MAXIM - Peer 1
> Dedicated Hosting
> 11388 | 66.40.52.65 | US | eljluk | MAXIM - Peer 1
> Dedicated Hosting
> 11388 | 66.40.52.67 | US | adadaa8 | MAXIM - Peer 1
> Dedicated Hosting
> 11388 | 66.40.52.68 | US | banban47 | MAXIM - Peer 1
> Dedicated Hosting
> 11388 | 66.40.56.36 | US | ardenthr | MAXIM - Peer 1
> Dedicated Hosting
> 11664 | 190.3.127.204 | AR | publinmueble4 | Techtel LMDS
> Comunicaciones Interactivas S.A.
> 11798 | 74.220.215.60 | US | agilecar | BLUEHOST-AS - Bluehost
> Inc.
> 12188 | 216.220.44.81 | CA | kradford | Q9-AS - Q9 Networks
> Inc.
> 12310 | 80.86.106.231 | RO | admin.despreagenti.ro | INES iNES Group
> SRL
> 12322 | 212.27.63.3 | FR | dupont.claude | PROXAD AS for
> Proxad/Free ISP
> 12322 | 212.27.63.3 | FR | ixesos | PROXAD AS for
> Proxad/Free ISP
> 12322 | 212.27.63.3 | FR | maniixou | PROXAD AS for
> Proxad/Free ISP
> 12322 | 212.27.63.3 | FR | prettyandpolite | PROXAD AS for
> Proxad/Free ISP
> 12365 | 81.95.237.6 | UZ | jokersarkor | SARKOR-AS
> Sarkor-Telecom is an ISP in Uzbekistan,
> 12741 | 87.204.28.200 | PL | rronald | INTERNETIA-AS Netia SA
> 12742 | 212.9.224.20 | UA | saprsoft | UAIPT IP Telecom Ltd.
> 12824 | 62.129.221.99 | PL | anna.kertyczak | HOMEPL-AS home.pl
> autonomous system
> 12824 | 62.129.225.211 | PL | audioline_ftp | HOMEPL-AS home.pl
> autonomous system
> 12824 | 79.96.44.94 | PL | zapisyonline | HOMEPL-AS home.pl
> autonomous system
> 12990 | 213.180.128.80 | PL | sr2simson | ONET-PL-AS1 Onet.pl
> portal network
> 13227 | 213.156.192.5 | RU | news-print | KRAFT-S Kraft-S JSC
> autonomous system
> 13238 | 213.180.199.127 | RU | alexealexe | YANDEX Yandex LLC
> 13238 | 213.180.199.127 | RU | krajar-edu | YANDEX Yandex LLC
> 13249 | 213.133.160.39 | UA | aproall | ITS-UA IT Systems
> 13301 | 213.202.225.39 | DE | ahscrew1 | UNITEDCOLO-AS
> Autonomous System of unitedcolo.de
> 13618 | 76.76.22.93 | US | aartij.com | CARONET-ASN - Carolina
> Internet
> 13618 | 76.76.22.93 | US | kids | CARONET-ASN - Carolina
> Internet
> 13760 | 74.114.116.107 | US | 2alb-damar | SOUTHERN-LIGHT -
> Southern Light, LLC
> 13768 | 66.135.63.30 | US | wwwvitr | PEER1 - Peer 1 Network
> Inc.
> 14361 | 209.61.255.34 | US | shb8_102 | HOPONE-GLOBAL - HopOne
> Internet Corporation
> 15244 | 216.97.225.100 | US | green53 |
> ADDD2NET-COM-INC-DBA-LUNARPAGES - Lunar Pages
> 15244 | 216.97.232.215 | US | southe36 |
> ADDD2NET-COM-INC-DBA-LUNARPAGES - Lunar Pages
> 15258 | 204.90.13.37 | US | bhtrp | GBCO - Gilbane
> Building Company
> 15418 | 213.171.193.5 | GB | doctorsacademy.org | FASTHOSTS-INTERNET
> Fasthosts Internet Ltd. Gloucester, UK.
> 15418 | 213.171.193.5 | GB | wkcevents.co.uk | FASTHOSTS-INTERNET
> Fasthosts Internet Ltd. Gloucester, UK.
> 15435 | 217.23.4.84 | NL | netmavkum | KABELFOON CAIW
> Autonomous System
> 15456 | 85.236.50.165 | DE | web9 | INTERNETX-AS InterNetX
> GmbH
> 15555 | 80.249.173.80 | HU | wow79 | MT-DC-AS Magyar
> Telekom , DataCenter
> 15626 | 217.12.204.94 | UA | mcontent | ITLAS ITL Company
> (Kharkov, Ukraine)
> 15652 | 217.11.148.122 | PL | webmaster | AS_ZIGZAG ZIGZAG ISP
> 15685 | 77.78.110.153 | CZ | pletpa.uvadi.cz | AS15685 Casablanca INT
> Autonomous system
> 16138 | 217.74.66.5 | PL | admincopy-tech.pl | INTERIAPL INTERIA.PL
> Autonomous System
> 16245 | 195.47.247.190 | DK | uni-media.co.uk | NGDC NetGroup
> DataCenter A/S - ngdc.net
> 16245 | 195.47.247.47 | DK | tegmans.se | NGDC NetGroup
> DataCenter A/S - ngdc.net
> 16245 | 195.47.247.80 | DK | elevenevents.nl | NGDC NetGroup
> DataCenter A/S - ngdc.net
> 16245 | 195.47.247.83 | DK | klubbneat.se | NGDC NetGroup
> DataCenter A/S - ngdc.net
> 16265 | 85.17.137.2 | NL | sinealem | LEASEWEB LEASEWEB AS
> 16265 | 85.17.137.30 | NL | lapponia | LEASEWEB LEASEWEB AS
> 16265 | 85.17.220.103 | NL | swentibold | LEASEWEB LEASEWEB AS
> 16276 | 213.186.33.201 | FR | miragega | OVH OVH
> 16276 | 213.186.33.208 | FR | allardvo | OVH OVH
> 16276 | 213.186.33.209 | FR | contatto | OVH OVH
> 16276 | 87.98.235.189 | FR | demolitionboys36.w8w.pl | OVH OVH
> 16276 | 87.98.235.189 | FR | wyszukiwarka.w8w.pl | OVH OVH
> 16276 | 91.121.101.90 | FR | wp2009muca | OVH OVH
> 16276 | 91.121.1.218 | FR | karol1992 | OVH OVH
> 16276 | 91.121.126.69 | FR | japanparts | OVH OVH
> 16276 | 91.121.126.69 | FR | suwala | OVH OVH
> 16276 | 91.121.168.21 | FR | michalsto | OVH OVH
> 16276 | 91.121.175.20 | FR | pawlo | OVH OVH
> 16276 | 91.121.19.159 | FR | si167261hm | OVH OVH
> 16276 | 91.121.35.138 | FR | folk | OVH OVH
> 16276 | 91.121.75.174 | FR | annuairegourmand | OVH OVH
> 16276 | 91.121.97.29 | FR | nups | OVH OVH
> 16276 | 94.23.137.5 | FR | tim2008_site | OVH OVH
> 16276 | 94.23.95.204 | FR | nikatrade.za.pl | OVH OVH
> 16342 | 217.113.224.33 | PL | misiekv6 | Toya ,TV cable company
> located in PL( town Lodz).
> 16406 | 64.78.23.251 | US | biotechb | AS-INTERMEDIA -
> Intermedia.net, Inc.
> 16557 | 216.81.64.156 | US | pinoyex | COLOSOLUTIONS - Colo
> Solutions, Inc.
> 16557 | 216.81.64.2 | US | boina | COLOSOLUTIONS - Colo
> Solutions, Inc.
> 16557 | 216.81.77.2 | US | nishantd | COLOSOLUTIONS - Colo
> Solutions, Inc.
> 16557 | 216.81.77.64 | US | kalrajm | COLOSOLUTIONS - Colo
> Solutions, Inc.
> 16626 | 75.127.92.212 | US | ecommerc | GNAXNET-AS - Global
> Net Access, LLC
> 16626 | 75.127.92.212 | US | l4mscom | GNAXNET-AS - Global
> Net Access, LLC
> 16660 | 208.71.212.50 | US | weddingfairy | FEBOX - FeBox LLC
> 17447 | 202.71.129.176 | IN | fjjfjju2918FJ2132 | NET4INDIA Net4India
> Ltd.
> 17464 | 202.75.36.31 | MY | ezybscom | TMIDC-AP Hosting
> Services (MYLOCA),
> 17464 | 202.75.36.56 | MY | saudcnet | TMIDC-AP Hosting
> Services (MYLOCA),
> 17971 | 202.75.56.99 | MY | zbundle | EASTGATE-AP Datacenter
> Management
> 18231 | 202.63.160.38 | IN | santamaria | EXATT-AS-AP IOL NETCOM
> LTD
> 18403 | 118.69.206.153 | VN | cuchiwaterpark.net | FPT-AS-AP The
> Corporation for Financing & Promoting Technology
> 18403 | 210.245.120.163 | VN | kute360 | FPT-AS-AP The
> Corporation for Financing & Promoting Technology
> 18747 | 200.62.54.115 | US | uv3353 | IFX-NW - IFX
> Communication Ventures, Inc.
> 18847 | 69.12.127.17 | US | vip3000 | NETFIRE - Netfire.com
> 18866 | 69.50.192.240 | US | hitexcve | ATJEU - Atjeu
> Publishing LLC
> 19181 | 208.89.219.185 | US | belmin | CWIE - CWIE LLC
> 19190 | 216.7.221.49 | CA | tempftp | FASTWIRE-COM -
> Fastwire.com Inc
> 19194 | 63.223.110.224 | US | admin | JOVITA - Sentris
> Network LLC
> 19318 | 205.209.98.39 | US | shahinft | NJIIX-AS-1 - NEW
> JERSEY INTERNATIONAL INTERNET EXCHANGE LLC
> 19318 | 216.219.94.27 | US | ieastrea | NJIIX-AS-1 - NEW
> JERSEY INTERNATIONAL INTERNET EXCHANGE LLC
> 19318 | 66.45.237.221 | US | metin10.t35.com | NJIIX-AS-1 - NEW
> JERSEY INTERNATIONAL INTERNET EXCHANGE LLC
> 19318 | 66.45.249.11 | US | mscom | NJIIX-AS-1 - NEW
> JERSEY INTERNATIONAL INTERNET EXCHANGE LLC
> 19318 | 69.164.249.19 | US | ferdw | NJIIX-AS-1 - NEW
> JERSEY INTERNATIONAL INTERNET EXCHANGE LLC
> 20773 | 92.51.189.12 | DE | cudra2 | HOSTEUROPE-AS AS of
> Hosteurope Germany / Cologne
> 20860 | 62.233.80.203 | GB | kubenetworks | IOMART-AS Iomart
> Hosting Network Services
> 20969 | 80.79.40.75 | NL | ftpftv | NOB-AS Autonomous
> System of Technicolor NL (formerly NOB)
> 21048 | 62.16.112.74 | RU | rtsasuk | COUNTRYCOM-SPB
> Countrycom Autonomous System
> 21123 | 193.109.91.139 | PL | nomax02-esklep | INCENTIAS INCENTI
> Autonomus System Wroclaw, ul.Trugutta 1/7 POLAND
> 21155 | 83.172.140.26 | NL | marketconcern | ASN-PROSERVE ProServe
> B.V. Networks
> 21155 | 83.172.148.141 | NL | brederijn | ASN-PROSERVE ProServe
> B.V. Networks
> 21229 | 195.38.96.23 | HU | wagnerur | TVNETWORK-AS TVNETWORK
> 21404 | 80.85.224.4 | PL | michal | ZETOSA-AS ZETO S.A.
> Tarnow
> 21740 | 69.64.155.173 | US | tanganet | ENOMAS1 - eNom,
> Incorporated
> 21788 | 64.191.109.6 | US | tanujsahab | NOC - Network
> Operations Center Inc.
> 21788 | 66.197.152.53 | US | fatihsen | NOC - Network
> Operations Center Inc.
> 21788 | 66.197.235.149 | US | formommy | NOC - Network
> Operations Center Inc.
> 21844 | 174.120.0.34 | US | pjohnson | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 174.120.7.251 | US | victor | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 174.133.164.82 | US | hclrin | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 207.44.248.127 | US | goodnews | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 209.62.39.20 | US | moodest | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 67.15.19.165 | US | ksafe | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 67.15.251.77 | US | fokus | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 67.15.69.180 | US | aditonline | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 67.18.52.66 | US | rahpouya | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 67.19.124.215 | US | iloyolen | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 67.19.63.103 | US | shambha | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 69.93.199.2 | US | animatio | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 74.53.102.162 | US | speedtec | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 74.53.193.91 | US | goyolnet | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 74.53.194.194 | US | netmultimed | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 74.53.227.130 | US | myclient | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 74.53.38.226 | US | vihss | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 74.53.70.2 | US | jkwinns | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 74.53.81.146 | US | welding | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 74.54.111.226 | US | gestudi0 | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 74.55.202.194 | US | elportal | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 21844 | 74.55.99.50 | US | anemotion | THEPLANET-AS -
> ThePlanet.com Internet Services, Inc.
> 22576 | 72.233.112.34 | US | wwwinja | LAYER3-ASN - Layered
> Technologies, Inc.
> 22576 | 72.233.80.163 | US | yiwu-import | LAYER3-ASN - Layered
> Technologies, Inc.
> 23393 | 64.111.196.94 | US | catapultx_xhos01 | ISPRIME - ISPrime,
> Inc.
> 23974 | 203.172.221.170 | TH | webmaster | MOE-EDNET-AS-AP
> Ministry of education
> 24218 | 124.217.242.70 | MY | mfactor | GTC-MY-PIP-AS Global
> Transit Communications - Malaysia
> 24299 | 202.43.35.133 | TH | univers | ISSP-AS Internet
> Solution & Service Provider Co., Ltd
> 24940 | 188.40.32.147 | DE | radioboe | HETZNER-AS Hetzner
> Online AG RZ-Nuernberg
> 24940 | 188.40.53.86 | DE | waawdemo | HETZNER-AS Hetzner
> Online AG RZ-Nuernberg
> 24940 | 213.239.194.143 | DE | pele | HETZNER-AS Hetzner
> Online AG RZ-Nuernberg
> 24940 | 78.46.200.236 | DE | kamara | HETZNER-AS Hetzner
> Online AG RZ-Nuernberg
> 24940 | 78.46.71.205 | DE | termopro | HETZNER-AS Hetzner
> Online AG RZ-Nuernberg
> 24940 | 78.47.222.220 | DE | brylant.yoyo.pl | HETZNER-AS Hetzner
> Online AG RZ-Nuernberg
> 24940 | 78.47.227.162 | DE | profildesign | HETZNER-AS Hetzner
> Online AG RZ-Nuernberg
> 24940 | 88.198.122.250 | DE | orzel-lks.yoyo.pl | HETZNER-AS Hetzner
> Online AG RZ-Nuernberg
> 24940 | 88.198.157.98 | DE | etiur.yoyo.pl | HETZNER-AS Hetzner
> Online AG RZ-Nuernberg
> 24940 | 88.198.157.98 | DE | gallerywiertel.yoyo.pl | HETZNER-AS
> Hetzner Online AG RZ-Nuernberg
> 24940 | 88.198.157.98 | DE | hkz-zgorzelec.yoyo.pl | HETZNER-AS
> Hetzner Online AG RZ-Nuernberg
> 24989 | 88.84.151.35 | DE | gui |
> IXEUROPE-DE-FRANKFURT-ASN IX Europe Germany AS
> 25133 | 78.137.1.149 | UA | economiacom | MCLAUT McLaut ISP
> Cherkassy Ukraine
> 25137 | 81.92.219.135 | PT | ribabike | NFSI NFSi Telecom,
> Lda.
> 25151 | 217.170.3.212 | NL | meysters | CYSO-AS Cyso Hosting
> B.V., Alkmaar, The Netherlands
> 25369 | 81.19.223.140 | GB | keysor | ASN-KILLERCREATION
> Killercreation Networks Ltd - www.killercreation.co.uk
> 25525 | 85.92.140.36 | NL | rwin | REASONNET-AS Reasonnet
> IP Networks B.V. number
> 25525 | 85.92.144.51 | NL | voje | REASONNET-AS Reasonnet
> IP Networks B.V. number
> 25525 | 89.18.190.25 | NL | mes.fendeg.nl | REASONNET-AS Reasonnet
> IP Networks B.V. number
> 25525 | 89.18.190.25 | NL | root.leukefilmpjes.net | REASONNET-AS
> Reasonnet IP Networks B.V. number
> 25525 | 89.18.190.25 | NL | root.pcnerd.nl | REASONNET-AS Reasonnet
> IP Networks B.V. number
> 25532 | 90.156.153.186 | RU | u160634 | MASTERHOST-AS
> .masterhost autonomous system
> 25532 | 90.156.153.195 | RU | u65735 | MASTERHOST-AS
> .masterhost autonomous system
> 25535 | 212.193.235.253 | RU | rostov-on_ftp | ASN-RUCENTER-HOSTING
> Hosting AS
> 25535 | 212.193.236.240 | RU | aristo_ftp | ASN-RUCENTER-HOSTING
> Hosting AS
> 25588 | 62.149.36.18 | GB | fwssdcmn | ULTRASPEED
> Ultraspeed - Main UK Network
> 25761 | 72.20.51.251 | US | sihirlisohbet | STAMINUS-COMM -
> Staminus Communications
> 26277 | 216.108.235.203 | US | a2158978 | PREMIANET - A+Hosting,
> Inc.
> 26277 | 216.108.239.39 | US | a1537139 | PREMIANET - A+Hosting,
> Inc.
> 26347 | 208.113.195.26 | US | jubilo | DREAMHOST-AS - New
> Dream Network, LLC
> 26347 | 208.113.203.140 | US | dizitv88 | DREAMHOST-AS - New
> Dream Network, LLC
> 26347 | 208.97.159.221 | US | jwanderson | DREAMHOST-AS - New
> Dream Network, LLC
> 26347 | 208.97.166.121 | US | yolandac | DREAMHOST-AS - New
> Dream Network, LLC
> 26347 | 67.205.31.45 | US | crestlinehoa | DREAMHOST-AS - New
> Dream Network, LLC
> 26347 | 67.205.36.71 | US | srivishnu | DREAMHOST-AS - New
> Dream Network, LLC
> 26347 | 67.205.50.138 | US | yhocpt | DREAMHOST-AS - New
> Dream Network, LLC
> 26347 | 75.119.210.208 | US | esdev | DREAMHOST-AS - New
> Dream Network, LLC
> 26496 | 208.109.138.73 | US | ottercom | PAH-INC - GoDaddy.com,
> Inc.
> 26496 | 208.109.181.150 | US | leroywhiteams | PAH-INC - GoDaddy.com,
> Inc.
> 26496 | 208.109.181.199 | US | alphainc | PAH-INC - GoDaddy.com,
> Inc.
> 26496 | 208.109.181.80 | US | venessah | PAH-INC - GoDaddy.com,
> Inc.
> 26496 | 208.109.232.29 | US | aksatech.in | PAH-INC - GoDaddy.com,
> Inc.
> 26496 | 216.69.181.111 | US | annettapowell.com | PAH-INC -
> GoDaddy.com, Inc.
> 26496 | 68.178.254.3 | US | patronmit | PAH-INC - GoDaddy.com,
> Inc.
> 26496 | 72.167.131.197 | US | easternelement | PAH-INC - GoDaddy.com,
> Inc.
> 26496 | 72.167.183.53 | US | adminoobd1 | PAH-INC - GoDaddy.com,
> Inc.
> 26496 | 72.167.232.158 | US | ganoroz | PAH-INC - GoDaddy.com,
> Inc.
> 26496 | 97.74.144.119 | US | shaheerazam | PAH-INC - GoDaddy.com,
> Inc.
> 26496 | 97.74.144.14 | US | jportwood | PAH-INC - GoDaddy.com,
> Inc.
> 26496 | 97.74.144.17 | US | nochinomaftp | PAH-INC - GoDaddy.com,
> Inc.
> 26496 | 97.74.144.64 | US | sammam | PAH-INC - GoDaddy.com,
> Inc.
> 27715 | 200.234.200.160 | BR | jonathanbrito | LocaWeb Ltda
> 27823 | 200.58.112.72 | AR | ag000113 | Dattatec.com
> 27823 | 200.58.114.20 | AR | mihosdes | Dattatec.com
> 27823 | 200.58.114.7 | AR | sain | Dattatec.com
> 27823 | 200.58.115.18 | AR | nepvcp | Dattatec.com
> 27823 | 200.58.120.108 | AR | wi710564 | Dattatec.com
> 28232 | 189.127.32.20 | BR | bitwave |
> 28271 | 201.33.17.117 | BR | anicil.com | DataCorpore Serviços
> e Representações
> 28753 | 89.149.226.67 | DE | celikhan | NETDIRECT AS NETDIRECT
> Frankfurt, DE
> 28753 | 95.168.171.75 | DE | farukozturk | NETDIRECT AS NETDIRECT
> Frankfurt, DE
> 28753 | 95.168.176.46 | DE | dogukara | NETDIRECT AS NETDIRECT
> Frankfurt, DE
> 29076 | 89.188.104.100 | RU | MariaCar | CITYTELECOM-AS
> Citytelecom.ru
> 29208 | 217.67.31.26 | SK | patton | DIALTELECOM-AS Dial
> Telecom, a.s.
> 29208 | 82.119.226.156 | SK | hanelsk.sk | DIALTELECOM-AS Dial
> Telecom, a.s.
> 29491 | 194.187.110.72 | UA | www.snip.in.ua | TERABIT Kiev, Ukraine
> 29550 | 91.186.20.31 | GB | marhaen | EUROCONNEX-AS
> Blueconnex Networks Ltd
> 29550 | 94.76.248.38 | GB | halis | EUROCONNEX-AS
> Blueconnex Networks Ltd
> 29671 | 77.232.67.26 | DE | lpnr | SERVAGE Servage GmbH
> 29671 | 77.232.67.29 | DE | holy | SERVAGE Servage GmbH
> 29873 | 65.254.250.107 | US | flashwonders | BIZLAND-SD - The
> Endurance International Group, Inc.
> 29873 | 65.254.254.34 | US | Mattdylan | BIZLAND-SD - The
> Endurance International Group, Inc.
> 30058 | 66.90.68.163 | US | mytutorials | FDCSERVERS -
> FDCservers.net
> 30058 | 74.63.64.61 | US | seotexas | FDCSERVERS -
> FDCservers.net
> 30496 | 67.222.148.111 | US | wwwcare | COLO4 - Colo4Dallas LP
> 30496 | 67.222.30.9 | US | hostserv | COLO4 - Colo4Dallas LP
> 30496 | 72.9.144.141 | US | jlstcm | COLO4 - Colo4Dallas LP
> 30589 | 66.165.155.43 | US | emily1 | ACTIVEHOST-WASH-AVE -
> ActiveHost Corporation
> 30914 | 194.130.104.210 | GB | L20030 | IOKO-AS AS for ioko365
> Ltd
> 30968 | 77.221.130.20 | RU | z80200 | DATAP-AS Infobox
> company network, hosting service provider,
> 30968 | 92.243.76.137 | RU | alfasv | DATAP-AS Infobox
> company network, hosting service provider,
> 31034 | 62.149.173.144 | IT | andreap | ARUBA-ASN Aruba
> S.p.A. - Network
> 31165 | 81.168.254.100 | PL | klient | PGF-AS AS of Polska
> Grupa Farmaceutyczna S.A.
> 31673 | 83.143.190.64 | NL | jamavoparketnl | UNISERVER-AS Uniserver
> Internet B.V.
> 31731 | 195.8.208.114 | NL | gfc2.nl | ADIX-AS ADIX B.V.
> 32097 | 69.197.161.122 | US | northvac | WII-KC - WholeSale
> Internet, Inc.
> 32181 | 115.124.100.206 | IN | tejus | ASN-ECOMD-COLOQUEST -
> GigeNET
> 32244 | 67.225.202.105 | US | aapje06 | LIQUID-WEB-INC -
> Liquid Web, Inc.
> 32392 | 76.163.234.226 | US | wdcin |
> OPENTRANSFER-ECOMMERCE - Ecommerce Corporation
> 32392 | 98.130.2.10 | US | urbanjim |
> OPENTRANSFER-ECOMMERCE - Ecommerce Corporation
> 32613 | 64.15.138.134 | CA | catching | IWEB-AS - iWeb
> Technologies Inc.
> 32613 | 67.205.124.43 | CA | tmcatnco | IWEB-AS - iWeb
> Technologies Inc.
> 32748 | 208.100.34.141 | US | fets | STEADFAST - NoZone,
> Inc.
> 32748 | 208.100.34.156 | US | blondipics | STEADFAST - NoZone,
> Inc.
> 32748 | 72.44.88.37 | US | arab4ws | STEADFAST - NoZone,
> Inc.
> 32751 | 208.146.35.1 | US | superb | NUCLEARFALLOUT-SEA -
> Nuclearfallout Enterprises, Inc.
> 33182 | 66.7.199.235 | US | studiook | DIMENOC---HOSTDIME -
> HostDime.com, Inc.
> 33182 | 66.7.215.46 | US | kitchena | DIMENOC---HOSTDIME -
> HostDime.com, Inc.
> 33182 | 66.7.221.11 | US | tinypoke | DIMENOC---HOSTDIME -
> HostDime.com, Inc.
> 33251 | 207.154.22.150 | US | davit1 | HOSTED-SOLUTIONS-3 -
> Hosted Solutions Acquisition, LLC
> 33852 | 193.200.130.21 | AM | sona | ORG-CCJS1-RIPE
> Cornet-AM Closed Joint Stock Company
> 34104 | 84.51.21.38 | TR | nemrutmountain | GLOBAL-AS Global
> Iletisim Hizmetleri A.S.
> 34104 | 84.51.21.55 | TR | balikavim | GLOBAL-AS Global
> Iletisim Hizmetleri A.S.
> 34104 | 84.51.21.55 | TR | tarsusburada | GLOBAL-AS Global
> Iletisim Hizmetleri A.S.
> 34104 | 84.51.21.86 | TR | ozgur | GLOBAL-AS Global
> Iletisim Hizmetleri A.S.
> 34655 | 80.77.120.43 | HU | auria | DOCLER-AS Docler
> Networks Autonomus System
> 34655 | 80.77.120.43 | HU | callafduty2 | DOCLER-AS Docler
> Networks Autonomus System
> 34655 | 80.77.120.43 | HU | edems | DOCLER-AS Docler
> Networks Autonomus System
> 34655 | 80.77.120.43 | HU | gamfinfo | DOCLER-AS Docler
> Networks Autonomus System
> 34655 | 80.77.120.43 | HU | hlsdg | DOCLER-AS Docler
> Networks Autonomus System
> 34655 | 80.77.120.43 | HU | sophie-online | DOCLER-AS Docler
> Networks Autonomus System
> 34655 | 80.77.120.43 | HU | teamprivate | DOCLER-AS Docler
> Networks Autonomus System
> 34984 | 212.253.81.112 | TR | denemesayfasi | TELLCOM-AS Tellcom
> Iletisim Hizmetleri
> 35118 | 80.90.114.11 | RU | topbuxhd | SMARTLOGIC-AS
> SmartLogic Ltd
> 35239 | 78.155.172.8 | RU | zaic | BALTTELECOM-AS JSC
> Ltd. Balttelecom
> 35592 | 89.187.131.41 | CZ | wellweb.cz | COOLHOUSING-AS
> COOLHOUSING Autonomous System
> 36066 | 72.26.101.160 | US | bensof27 |
> UNI-MARKETING-ALLIANCE - Webhost4life.com
> 36351 | 174.36.113.114 | US | shella | SOFTLAYER - SoftLayer
> Technologies Inc.
> 36351 | 174.37.215.248 | US | dachenka | SOFTLAYER - SoftLayer
> Technologies Inc.
> 36351 | 208.43.107.187 | US | gil | SOFTLAYER - SoftLayer
> Technologies Inc.
> 36351 | 66.228.124.150 | US | joomla | SOFTLAYER - SoftLayer
> Technologies Inc.
> 36351 | 74.86.182.130 | US | defensiv | SOFTLAYER - SoftLayer
> Technologies Inc.
> 36666 | 67.215.13.90 | CA | offshori | GTCOMM - GloboTech
> Communications
> 36820 | 208.93.113.6 | US | absolute |
> TULIP-SYSTEMS-INC-HOSTING-55-MARIETTA-ATLANTA - TULIP SYSTEMS, INC.
> 38182 | 110.4.40.102 | MY | ismailsa | EXTREMEBB-AS-MY
> Extreme Broadband - Total Broadband Experience
> 38532 | 116.12.48.135 | JP | silentt | USONYX-NET USONYX
> Singapore Broadband Web Hosting Services
> 38661 | 124.217.216.43 | KR | flkorea1 | HCLC-AS-KR HCLC
> 38949 | 80.94.52.31 | SK | kevin.fotochudy.com | TRESTEL-SK Trestel
> SK, a.s.
> 39392 | 88.86.113.143 | CZ | beachparty.zaridi.to | SUPERNETWORK-AS
> SuperNetwork s.r.o.
> 39392 | 88.86.113.143 | CZ | dominic.czechian.net | SUPERNETWORK-AS
> SuperNetwork s.r.o.
> 39392 | 88.86.113.16 | CZ | xawaxsk | SUPERNETWORK-AS
> SuperNetwork s.r.o.
> 39451 | 77.240.6.228 | GB | dev_shsstat | MELBOURNE-AS Melbourne
> Network Solutions connectivity
> 39561 | 89.108.66.119 | RU | korolev7 | AGAVA Agava JSC AS
> number
> 39561 | 89.108.66.156 | RU | proektd7 | AGAVA Agava JSC AS
> number
> 39561 | 89.108.67.176 | RU | fotowin1 | AGAVA Agava JSC AS
> number
> 39561 | 89.108.68.60 | RU | galyame8 | AGAVA Agava JSC AS
> number
> 39561 | 89.108.68.60 | RU | myrybin8 | AGAVA Agava JSC AS
> number
> 39582 | 89.106.12.54 | TR | tbbd223ftp | GRID Grid Bilisim
> Teknolojileri A.S.
> 39582 | 89.106.12.59 | TR | newpageflip587ftp | GRID Grid Bilisim
> Teknolojileri A.S.
> 39582 | 89.106.12.59 | TR | sondakikaedr199ftp | GRID Grid Bilisim
> Teknolojileri A.S.
> 39700 | 193.93.174.80 | DE | biginsh | WEBSTEKKER Webstekker
> B.V.
> 39758 | 89.36.140.56 | RO | testjoomla | SIMPLIQ-AS SimpliQ SRL
> 41079 | 195.114.1.71 | PL | redips | SUPERHOST-PL-AS
> SuperHost.pl s.c.
> 41186 | 195.114.18.92 | FR | grazius | ISPFR-AS ISPFR
> 41406 | 194.9.24.157 | PL | testtomek | SABELA-NET SABELA
> MEDIA POLSKA
> 41665 | 213.155.5.10 | UA | goldnikbaa | HOSTING-AS National
> Hosting Provider, Hosting.UA
> 41828 | 91.185.193.38 | SI | external | TUSMOBIL TUSMOBIL -
> core network
> 42289 | 77.234.200.243 | RU | morshansk7 | VTC-ITMO-AS
> Saint-Petersburg State University of Information Technologies, Mechanics
> and Optics
> 42775 | 92.243.94.13 | RU | instrume | DSRT-NET Desart
> Limited
> 42910 | 94.102.3.13 | TR | ayvalik | SADECEHOSTING-COM
> Sadecehosting-Com
> 42910 | 94.102.6.14 | TR | cukurkuy | SADECEHOSTING-COM
> Sadecehosting-Com
> 42926 | 94.101.83.249 | TR | vectrateam.com | RADORETELEKOM Radore
> Autonomous System
> 43260 | 89.107.229.5 | TR | platynet | DGN DGN Teknoloji
> 43333 | 91.203.133.90 | PL | andrew | NEPHAX-AS CIS NEPHAX
> 43333 | 91.203.134.83 | PL | gwiazda | NEPHAX-AS CIS NEPHAX
> 43362 | 78.108.81.210 | RU | f16173 | MAJORDOMO MAJORDOMO
> LLC
> 43362 | 78.108.81.40 | RU | f37188 | MAJORDOMO MAJORDOMO
> LLC
> 43362 | 78.108.84.16 | RU | f45666 | MAJORDOMO MAJORDOMO
> LLC
> 43391 | 77.245.148.49 | TR | yukelastikcom | NETDIREKT-TR Netdirekt
> A.S. Internet Backbone AS
> 43391 | 91.191.175.50 | TR | gitarnet | NETDIREKT-TR Netdirekt
> A.S. Internet Backbone AS
> 44565 | 79.171.18.158 | TR | solalcom | VITAL VITAL TEKNOLOJI
> 44565 | 93.186.117.5 | TR | sogukcom | VITAL VITAL TEKNOLOJI
> 45441 | 115.178.62.40 | TH | maejo | SHEEPLINK-TH SheepLink
> Co.,Ltd.
> 46475 | 216.245.205.125 | US | priyan.orgfree.com | LIMESTONENETWORKS -
> Limestone Networks, Inc.
> 46475 | 216.245.208.166 | US | 3doyunlar.6te.net | LIMESTONENETWORKS -
> Limestone Networks, Inc.
> 46475 | 69.162.65.133 | US | djbox.freetzi.com | LIMESTONENETWORKS -
> Limestone Networks, Inc.
> 46475 | 69.162.65.133 | US | zarabotay.freetzi.com |
> LIMESTONENETWORKS - Limestone Networks, Inc.
> 46475 | 69.162.86.4 | US | myfriends | LIMESTONENETWORKS -
> Limestone Networks, Inc.
> 46475 | 69.162.86.4 | US | najd | LIMESTONENETWORKS -
> Limestone Networks, Inc.
> 46606 | 66.147.240.165 | US | bjacnet | BLUEHOST-AS-2 -
> Bluehost Inc.
> 47385 | 79.174.72.153 | RU | pbpradio-tvoisty | HOSTING-COMPANY-AS
> Hosting Company, RBC
> 48172 | 94.103.90.70 | RU | a5324_trade | MERCURIUS Mecuriuz Ltd
> 48559 | 195.248.226.12 | PL | strips | INFOMEX-AS Infomex Sp.
> z o.o.
> 49467 | 92.42.37.36 | TR | alcinarftp | INETMAR INETMAR
> Internet Hizmetleri Autonomous System (izmir)
>
>
>
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
>
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security
> counter-measures.
> _______________________________________________
More information about the nsp-security
mailing list