[nsp-sec] *new* 09/22/2009 - Potentially compromised email credentials

Peter Moody pmoody at google.com
Tue Sep 22 16:50:55 EDT 2009 

ack 15169.

thanks.

On Tue, Sep 22, 2009 at 12:53 PM, Gabriel Iovino <giovino at ren-isac.net> wrote:
> ----------- nsp-security Confidential --------
>
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Greetings,
>
> The REN-ISAC has obtained a list <see attached> of email addresses,
> usernames, and passwords from a machine hosting a Phishing HTML form.
>
>> hxxp://www.airwaveselectronic.com/phpFormGenerator/use/strongwaves/admin/data.dat
>> hxxp://www.airwaveselectronic.com/phpFormGenerator/use/vasccuc/admin/data.dat
>> hxxp://www.airwaveselectronic.com/phpFormGenerator/use/dontdewaves/admin/data.dat
>> hxxp://www.airwaveselectronic.com/phpFormGenerator/use/checkonetow/admin/data.dat
>> hxxp://www.airwaveselectronic.com/phpFormGenerator/use/airwavescon/admin/data.dat
>> hxxp://www.airwaveselectronic.com/phpFormGenerator/use/airwaaves/admin/data.dat
>
>    [ip] 216.65.1.252
>    [as] 11388
> [status] partially offline
>
> I have reached out to airwaveselectronic.com; the data.dat files are
> offline as of writing this email but the phpFormGenerator directory is
> online. It is not clear if airwaves.. or the miscreants took the data
> files offline.
>
> The form was observed to be online as recent as 09/22/2009.
>
> If the email address is a valid email address and the password meets
> your password policy it might be a good idea to have the user reset
> their password.
>
> The ASN resolution is best effort as an MX is not always owned by the
> same organization.
>
> Please take whatever actions you deem appropriate and please let me know
> if you have any questions or comments.
>
> Regards.
>
> Gabe
>
> - --
> Gabriel Iovino
> Principal Security Engineer, REN-ISAC
> http://www.ren-isac.net
> 24x7 Watch Desk +1(317)278-6630
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkq5K0UACgkQwqygxIz+pTtKfACgw6OGovQKkHsmUZjh9+sIB91j
> ncoAn0sTq0aldk+TW97+LusFNkheBFQN
> =EggJ
> -----END PGP SIGNATURE-----
>
> 10796|US|SCRR-10796 - Road Runner HoldCo LLC|208.68.190.220|mail.LMHEALTH.ORG|LMHEALTH.ORG|JJONES at LMHEALTH.ORG|jjones|lknjjj|lknjjj
> 11047|US|HHCC-ASN1 - Hartford Hospital|199.231.29.52|gwmail5.harthosp.org|harthosp.org|cvergar at harthosp.org|cvergar|mail|mail
> 11197|US|DART-HITCH - Dartmouth-Hitchcock Medical Center|130.189.128.60|mailgate2.hitchcock.org|hitchcock.org|john.valentine at hitchcock.org|john valentine|mmnnbb1|mmnnbb1
> 11550|US|SDL-20-AS - Smithville Digital, LLC|66.244.65.155|mail2.bloomingtonhospital.org|bloomingtonhospital.org|mmunroe at bloomingtonhospital.org|3073|Amem599094|Amem599094
> 11687|US|CITY-OF-HOPE - City of Hope Medical Center|151.152.101.110|mms1.coh.org|coh.org|kkernstine at coh.org|kkernstine|cass01|cass01
> 11687|US|CITY-OF-HOPE - City of Hope Medical Center|151.152.101.111|mms2.coh.org|coh.org|lcrocitto at coh.org|lcrocitto|megnkc2|megnkc2
> 12231|US|CONWAYCORP - Conway Corporation|24.144.0.174|postoffice.conwayregional.org|conwayregional.org|kmurphy at conwayregional.org|kmurphy|1mothball|1mothball
> 13385|US|COMCAST-TELECOMM - Comcast Telecommunications, Inc.|199.253.176.100|mail1.lifebridgehealth.org|lifebridgehealth.org|alevine at lifebridgehealth.org|alevine|levine*|levine*
> 13385|US|COMCAST-TELECOMM - Comcast Telecommunications, Inc.|199.253.176.100|mail1.lifebridgehealth.org|lifebridgehealth.org|kchu at lifebridgehealth.org|kchu|2006junne|2006junne
> 13407|US|CTC-BGP2 - Computer Telephone Corp|66.152.205.123|spam1.mmc.org|mmc.org|anderlar at mmc.org|anderlar|goforit4$|goforit4$
> 13407|US|CTC-BGP2 - Computer Telephone Corp|66.152.205.123|spam1.mmc.org|mmc.org|jorgej at mmc.org|jorgej|jj0000__|jj0000__
> 13407|US|CTC-BGP2 - Computer Telephone Corp|66.152.205.123|spam1.mmc.org|mmc.org|smalll at mmc.org|smalll|alex1julia+|alex1julia+
> 13407|US|CTC-BGP2 - Computer Telephone Corp|66.152.205.123|spam1.mmc.org|mmc.org|zuckej at mmc.org|zuckej|shalom4!|shalom4!
> 13407|US|CTC-BGP2 - Computer Telephone Corp|66.152.205.124|spam2.mmc.org|mccm.org|weisbt at mccm.org|weisbt2|Mccm2005!|Mccm2005!
> 13407|US|CTC-BGP2 - Computer Telephone Corp|66.152.205.124|spam2.mmc.org|mmc.org|curcim at mmc.org|curcim|bigbirds4$|bigbirds4$
> 13407|US|CTC-BGP2 - Computer Telephone Corp|66.152.205.124|spam2.mmc.org|mmc.org|parkem at mmc.org|parkem|beanmd=0|beanmd=0
> 13407|US|CTC-BGP2 - Computer Telephone Corp|66.152.205.124|spam2.mmc.org|mmc.org|spratd at mmc.org|spratd|ds51tn59^|ds51tn59^
> 1348|US|CA-DOTNET-AS - California Department of Transportation|149.136.28.1|oakspam01.dot.ca.gov|dot.ca.gov|george_crosby at dot.ca.gov|George Crosby|izzydog6|izzydog6
> 14677|US|CLICK-NETWORK - Click! Network|199.79.119.1|mailext1.multicare.org|multicare.org|min-chun.chen at multicare.org|mchen|Evan2260|Evan2260
> 14677|US|CLICK-NETWORK - Click! Network|199.79.119.3|mailext3.multicare.org|multicare.org|robert.johnston at multicare.org|rjohnston|Bob2205|Bob2205
> 14779|US|INKTOMI-LAWSON - Inktomi Corporation|216.39.53.3|c.mx.mail.yahoo.com|yahoo.com|mmoney at yahoo.com|mm|mmmmm|mmmmm
> 14780|US|INKTOMI-LAWSON - Inktomi Corporation|209.191.88.247|d.mx.mail.yahoo.com|yahoo.com|artfeinberg at yahoo.com|art feinberg|ALmj0627|ALmj0627
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.204|mskpegateway2.mskcc.org|mskcc.org|casazzaa at mskcc.org|casazzaa|jenny11|jenny11
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.204|mskpegateway2.mskcc.org|mskcc.org|easthamj at mskcc.org|easthamj|trojan|trojan
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.204|mskpegateway2.mskcc.org|mskcc.org|kelly3 at mskcc.org|kellyj2|6Nora1|6Nora1
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.204|mskpegateway2.mskcc.org|mskcc.org|Kolkera at mskcc.org|Kolkera|pierpont|pierpont
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.204|mskpegateway2.mskcc.org|mskcc.org|lamannan at mskcc.org|antonick|antonick|antonick
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.204|mskpegateway2.mskcc.org|mskcc.org|larsons at mskcc.org|Steve Larson|artist|artist
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.204|mskpegateway2.mskcc.org|mskcc.org|mccormib at mskcc.org|mccormib|woolybea|woolybea
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.204|mskpegateway2.mskcc.org|mskcc.org|moskowic at mskcc.org|moskowic|seymour|seymour
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.204|mskpegateway2.mskcc.org|mskcc.org|posnerj at mskcc.org|posnerj|Rosjpj99|Rosjpj99
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.204|mskpegateway2.mskcc.org|mskcc.org|saltzl at mskcc.org|saltzl|sdffds|sdffds
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.204|mskpegateway2.mskcc.org|mskcc.org|singers at mskcc.org|singers|beachh|beachh
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.204|mskpegateway2.mskcc.org|mskcc.org|woldens at mskcc.org|woldens|1049park|1049park
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.222|mskpegateway3.mskcc.org|mskcc.org|desiderd at mskcc.org|desiderd|samantss|samantss
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.222|mskpegateway3.mskcc.org|mskcc.org|jarnagiw at mskcc.org|jarnagiw|cephron|cephron
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.222|mskpegateway3.mskcc.org|mskcc.org|laked at mskcc.org|laked|henry214|henry214
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.222|mskpegateway3.mskcc.org|mskcc.org|landauh at mskcc.org|landauh|harleyjp|harleyjp
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.222|mskpegateway3.mskcc.org|mskcc.org|leen2 at mskcc.org|leen1|edward6|edward6
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.222|mskpegateway3.mskcc.org|mskcc.org|millsn at mskcc.org|millsn|cruise|cruise
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.222|mskpegateway3.mskcc.org|mskcc.org|oreillye at mskcc.org|oreillye|ayman04|ayman04
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.222|mskpegateway3.mskcc.org|mskcc.org|russop at mskcc.org|russop|paul33|paul33
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.222|mskpegateway3.mskcc.org|mskcc.org|sclafanl at mskcc.org|sclafanl|breast5|breast5
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.222|mskpegateway3.mskcc.org|mskcc.org|Soganip at mskcc.org|soganip|lalita|lalita
> 14822|US|MSKCC - Memorial Sloan-Kettering Cancer Center|140.163.1.222|mskpegateway3.mskcc.org|mskcc.org|wilsonr at mskcc.org|wilsonr|donnaj5|donnaj5
> 15169|US|GOOGLE - Google Inc.|209.85.210.4|aspmx5.googlemail.com|wn.com|seeme at wn.com|gata|feelme|fel\\elme
> 15169|US|GOOGLE - Google Inc.|209.85.223.70|alt4.gmail-smtp-in.l.google.com|gmail.com|cgregHamilton at gmail.com|cgreghAmilton at gmail.com|boney4485|bOney4485
> 15169|US|GOOGLE - Google Inc.|209.85.223.70|alt4.gmail-smtp-in.l.google.com|gmail.com|joanfaro at gmail.com|j faro|1911lola|1911lola
> 16608|US|KENTEC - Kentec Communications, Inc.|64.187.64.31|st.kci.net|kci.net|bartelsjane at kci.net|jane bartels|Elizabeth|Elizabeth
> 16966|US|SBCIDC-LSAN03 - AT&T Internet Services|216.65.212.69|mailhostrdc.aptiumoncology.com|aptiumoncology.com|skempin at aptiumoncology.com|skempin|1234dope|1234dope
> 1698|US|PRODIGY - AT&T Internet Services|207.115.36.22|sbcmx8.prodigy.net|sbcglobal.net|osmith1930 at sbcglobal.net|owen smith|smith30|smith30
> 1698|US|PRODIGY - AT&T Internet Services|207.115.37.23|sbcmx9.prodigy.net|sbcglobal.net|jrdhigh at sbcglobal.net|j dixon|dixo8n|dixo8n
> 17054|US|AS17054 - CONTINENTAL BROADBAND PENNSYLVANIA, INC.|209.221.31.106|backup1.mx.expedient.net|hvhs.org|sperry at hvhs.org|s4p4|PennState09|PennState09
> 17193|US|NETLINC-SERVICES - Superior Consultant Company|12.164.102.205|spc-00sv0y08t9.supc.com|thocc.org|tlane at thocc.org|tlane|Icepops0|Icepops0
> 174|US|COGENT Cogent/PSI|38.96.154.98|smtp.svcmcny.org|svcmcny.org|lbrisson at svcmcny.org|lbrisson|csly53|csly53
> 174|US|COGENT Cogent/PSI|38.96.154.98|smtp.svcmcny.org|svcmcny.org|tskarbek at svcmcny.org|tskarbek|october|october
> 174|US|COGENT Cogent/PSI|38.96.154.98|smtp.svcmcny.org|svcmcny.org|wharrington at svcmcny.org|wharrington|royandbobo|royandbobo
> 18495|US|NOVANT-AS1 - Novant Health Inc.|170.98.106.47|cltgw2.novanthealth.org|novanthealth.org|gdmusa at novanthealth.org|gregmusa|8burbank|8burbank
> 18495|US|NOVANT-AS1 - Novant Health Inc.|170.98.106.47|cltgw2.novanthealth.org|novanthealth.org|jwadcock at novanthealth.org|jwa001|ssssssss|ssssssss
> 18832|US|INFLOW18832 - Inflow Inc.|66.45.14.220|spam.everestusa.com|mbhs.org|sdonelson at mbhs.org|sd15892|matthew1|matthew1
> 18980|US|PEACEHEALTH - Peace Health|67.133.62.38|mail1.peacehealth.org|peacehealth.org|ptelfer at peacehealth.org|pettel|alison8|alison8
> 18980|US|PEACEHEALTH - Peace Health|67.133.62.39|mail2.peacehealth.org|peacehealth.org|cvanderbiltmd at peacehealth.org|carvan2|pianos|pianos
> 18980|US|PEACEHEALTH - Peace Health|67.133.62.39|mail2.peacehealth.org|peacehealth.org|rlari at peacehealth.org|riclar1|Sugarmag3|sugarmag3
> 18990|US|AIRBAND-DALLAS - Airband Communications, Inc|65.111.72.31|email.gbmc.org|gbmc.org|ddixon at gbmc.org|ddixon|gavincaleb|gavincaleb
> 18990|US|AIRBAND-DALLAS - Airband Communications, Inc|65.111.72.31|email.gbmc.org|gbmc.org|rhirata at gbmc.org|rhirata|kamiii49|kamiii49
> 19124|US|WHEATON-FRANCISCAN-SERVICES-INC - Covenant Healthcare Systems, Inc.|199.250.68.165|wfcuda02.wfhc.org|wfhc.org|Robert.Koebert at wfhc.org|P03430|0654|0654
> 20046|US|MICROSOFT-BOS - Microsoft Corp|216.32.180.22|mail.global.sprint.com|jhha.org|jrodriguez at jhha.org|jrodriguez at jhha.org|kmunoz|kmunoz
> 20046|US|MICROSOFT-BOS - Microsoft Corp|216.32.180.22|mail.global.sprint.com|jhha.org|kboerner at jhha.org|kboerner|123lost|123lost
> 20046|US|MICROSOFT-BOS - Microsoft Corp|65.55.88.22|mail.global.frontbridge.com|childrensoncologygroup.org|greaman at childrensoncologygroup.org|greaman|Curesearch08|Curesearch08
> 20046|US|MICROSOFT-BOS - Microsoft Corp|65.55.88.22|mail.global.frontbridge.com|christianacare.org|jlenhard at christianacare.org|801004111|10moresox|10moresox
> 20046|US|MICROSOFT-BOS - Microsoft Corp|65.55.88.22|mail.global.frontbridge.com|mvh.org|mfbrown at mvh.org|marion brown|Miffie07|Miffie07
> 20046|US|MICROSOFT-BOS - Microsoft Corp|65.55.88.22|mail.global.frontbridge.com|mvh.org|mfbrown at mvh.org|Marion brown|Miffie07|Miffie07
> 20046|US|MICROSOFT-BOS - Microsoft Corp|65.55.88.22|mail.global.sprint.com|jhha.org|gpoole-dayan at jhha.org|gpooleda|elinor|elinor
> 20046|US|MICROSOFT-BOS - Microsoft Corp|65.55.88.22|mail.global.sprint.com|jhha.org|jpailet at jhha.org|jpailet|mrmagoo|mrmagoo
> 20046|US|MICROSOFT-BOS - Microsoft Corp|65.55.88.22|mail.global.sprint.com|JHHA.org|MDELisser at JHHA.org|mdelisser|Lucinda2|Lucinda2
> 20115|US|CHARTER-NET-HKY-NC - Charter Communications|71.84.249.173|mail2.memorialcare.org|memorialcare.org|mstrauss at memorialcare.org|mstrauss|MBS at HBO0109|MBS at HBO0109
> 20455|US|NRTC-ORG - National Rural Telecommunication Cooperative|207.171.255.132|smarthost1.trueband.net|3riversdbs.net|bethann at 3riversdbs.net|bethann|bichon|bichon
> 21821|US|MONTEFIORE - Montefiore Medical Center|216.255.101.243|mx1.montefiore.org|montefiore.org|rfreeman at montefiore.org|rfreeman|ruth5136|ruth5136
> 21821|US|MONTEFIORE - Montefiore Medical Center|216.255.101.243|mx1.montefiore.org|montefiore.org|vtellis at montefiore.org|vtellis|oioi|oioi
> 21821|US|MONTEFIORE - Montefiore Medical Center|216.255.101.244|mx2.montefiore.org|montefiore.org|sforeman at montefiore.org|sforeman|jello1|jello1
> 22093|US|CCF-NETWORK - Cleveland Clinic Foundation|192.35.79.64|relaya.ccf.org|ccf.org|davisa1 at ccf.org|davisa1|davisa11|davisa11
> 22093|US|CCF-NETWORK - Cleveland Clinic Foundation|192.35.79.64|relaya.ccf.org|ccf.org|farag at ccf.org|farage|faithandhope|faithandhope
> 22093|US|CCF-NETWORK - Cleveland Clinic Foundation|192.35.79.64|relaya.ccf.org|ccf.org|kovacij at ccf.org|KOVACIJ|DETROIT|DETROIT
> 22093|US|CCF-NETWORK - Cleveland Clinic Foundation|192.35.79.64|relaya.ccf.org|ccf.org|lewandK at ccf.org|lewandk|Summer09|Summer09
> 22093|US|CCF-NETWORK - Cleveland Clinic Foundation|192.35.79.64|relaya.ccf.org|ccf.org|mayersd at ccf.org|,ayersd|douglas8|douglas8
> 22093|US|CCF-NETWORK - Cleveland Clinic Foundation|192.35.79.64|relaya.ccf.org|ccf.org|sobeckr at ccf.org|sobeckr|Jesus|Jesus
> 22773|US|ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc.|70.164.96.150|mailfrontier.rchsd.org|rchsd.org|mnespeca at rchsd.org|mnespeca|swish123|swish123
> 23129|US|SUTTERHEALTH - Sutter Health|65.213.63.37|smtpmail1.sutterhealth.org|sutterhealth.org|adamssa at sutterhealth.org|adamssa|Qwer556|Qwer556
> 23129|US|SUTTERHEALTH - Sutter Health|65.213.63.37|smtpmail1.sutterhealth.org|sutterhealth.org|rozancc at sutterhealth.org|rozancc at sutterhealth.org|#1chairman|#1chairman
> 23129|US|SUTTERHEALTH - Sutter Health|65.213.63.38|mail.sutterhealth.org|sutterhealth.org|patzmk at sutterhealth.org|Jennygrace7|sutter8|sutter8
> 23431|US|AHSW-ROSEVILLE - Adventist Health|206.210.162.83|ahemlmx02.ah.org|sonora.ah.org|austinla at sonora.ah.org|austinla|bbblue4|bbblue4
> 23458|US|DHH-AUTHORITY - Denver Health and Hospital Authority|205.170.235.125|0.mx.dhha.org|dhha.org|james.duke at dhha.org|jduke|Duke1111|Duke1111
> 2576|US|DOT-AS - U. S. Department of Transportation|204.68.194.50|SMTP04.dot.gov|dot.gov|craig.larson at dot.gov|craig.larson|RoubaixSD##57759|RoubaixSD##57759
> 2576|US|DOT-AS - U. S. Department of Transportation|204.68.194.50|SMTP04.dot.gov|dot.gov|joe.toole at dot.gov|joe.toole|!3GLADwording|!3GLADwording
> 2576|US|DOT-AS - U. S. Department of Transportation|204.68.194.50|SMTP04.dot.gov|dot.gov|yehuda.gross at dot.gov|yehuda.gross|2252Mitichedva!|2252Mitichedva!
> 2576|US|DOT-AS - U. S. Department of Transportation|204.68.194.52|SMTP06.dot.gov|dot.gov|hassan.raza at dot.gov|hassan raza|Ph11bday1234|Ph11bday1234
> 2576|US|DOT-AS - U. S. Department of Transportation|204.68.194.52|SMTP06.dot.gov|dot.gov|walter.kulyk at dot.gov|walter.kulyk|$ummerTime14|$ummerTime14
> 2576|US|DOT-AS - U. S. Department of Transportation|204.68.194.52|SMTP06.dot.gov|fhwa.dot.gov|matthew.hake at fhwa.dot.gov|*|*|*
> 2576|US|DOT-AS - U. S. Department of Transportation|204.68.195.141|SMTP05.dot.gov|dot.gov|gordon.delcambre at dot.gov|gordon.delcambre|CajunBoy5%1!|CajunBoy5%1!
> 2576|US|DOT-AS - U. S. Department of Transportation|204.68.195.141|SMTP05.dot.gov|dot.gov|susan.liss at dot.gov|susanliss|Summertime09|Summertime09
> 26282|US|MESSAGELABSINC - MessageLabs Inc.|216.82.254.227|cluster9a.us.messagelabs.com|maimonidesmed.org|edrexler at maimonidesmed.org|edrexler|hana1|hana1
> 26385|US|FLETCHER-ALLEN-HEALTH-CARE-1 - Fletcher Allen Health Care|192.240.41.15|edge2.fahc.fletcherallen.org|vtmednet.org|evakristensen at vtmednet.org|p112714|kirak911|kirak911
> 26910|US|POSTINI-NET1 - Postini, Inc.|64.18.5.14|burke.org.s6b2.psmtp.com|burke.org|egitler at burke.org|egitler at burke.org|yyyyy|yyyyy
> 26910|US|POSTINI-NET1 - Postini, Inc.|64.18.7.14|cmc-nh.org.s8b2.psmtp.com|cmc-nh.org|pdelgiudice at cmc-nh.org|pdelgiudi|eeeeee|eeeeee
> 26910|US|POSTINI-NET1 - Postini, Inc.|64.18.7.14|hfhs.org.s8b2.psmtp.com|hfhs.org|dburks1 at hfhs.org|dburks1|aallen44|aallen44
> 26910|US|POSTINI-NET1 - Postini, Inc.|64.18.7.14|hfhs.org.s8b2.psmtp.com|hfhs.org|gbalakr1 at hfhs.org|gbalakrw|jayanthi9|jayanthi9
> 26910|US|POSTINI-NET1 - Postini, Inc.|64.18.7.14|hfhs.org.s8b2.psmtp.com|hfhs.org|jlin1 at hfhs.org|jlin1|3cookies|3cookies
> 26910|US|POSTINI-NET1 - Postini, Inc.|64.18.7.14|hfhs.org.s8b2.psmtp.com|hfhs.org|mzachar1 at hfhs.org|mzachar1|nicky1234567|nicky1234567
> 26910|US|POSTINI-NET1 - Postini, Inc.|64.18.7.14|hfhs.org.s8b2.psmtp.com|hfhs.org|pkolowi1 at hfhs.org|pkolowi1|woodcreek4|woodcreek4
> 26910|US|POSTINI-NET1 - Postini, Inc.|64.18.7.14|hfhs.org.s8b2.psmtp.com|hfhs.org|rfarah1 at hfhs.org|rfarah1|afafnaim|afafnaim
> 26910|US|POSTINI-NET1 - Postini, Inc.|64.18.7.14|hfhs.org.s8b2.psmtp.com|hfhs.org|rfarah1 at hfhs.org|rfarah|afafnaim|afafnaim
> 26910|US|POSTINI-NET1 - Postini, Inc.|64.18.7.14|hfhs.org.s8b2.psmtp.com|hfhs.org|slirof1 at hfhs.org|sliroff1|detroyt4|detroyt4
> 26910|US|POSTINI-NET1 - Postini, Inc.|64.18.7.14|hfhs.org.s8b2.psmtp.com|hfhs.org|tnypave1 at hfhs.org|tnypave1|ndmd2011|ndmd2011
> 26910|US|POSTINI-NET1 - Postini, Inc.|64.18.7.14|hfhs.org.s8b2.psmtp.com|hfhs.org|vvelano1 at hfhs.org|vvelano1|lynda0003|lynda0003
> 26910|US|POSTINI-NET1 - Postini, Inc.|64.18.7.14|hfhs.org.s8b2.psmtp.com|hfhs.org|wkim1 at hfhs.org|wkim1|kyungnam41|kyungnam41
> 26910|US|POSTINI-NET1 - Postini, Inc.|64.18.7.14|hfhs.org.s8b2.psmtp.com|hfhs.org|wkim1 at hfhs.org|wkim|kyungnam41|kyungnam41
> 26910|US|POSTINI-NET1 - Postini, Inc.|64.18.7.14|tufts-nemc.org.s8b2.psmtp.com|tuftsmedicalcenter.org|jrothschild at tuftsmedicalcenter.org|jrothschild|woogie22|woogie22
> 27016|US|NRC-NET - United States Nuclear Regulatory Commission|148.184.176.41|mail1.nrc.gov|nrc.gov|tracy.scott at nrc.gov|tws2|Password1234$|Password1234$
> 2705|US|CARENET - Barnes/Jewish Information Systems|159.251.6.8|mail02.bjc.org|bjc.org|mbolger at bjc.org||b0345|b0345
> 2705|US|CARENET - Barnes/Jewish Information Systems|159.251.88.1|mail01.bjc.org|bjc.org|daw1776 at bjc.org|daw1776|anna|anna
> 27562|US|RHC-INT - Ressurrection Health Care|65.89.141.87|smtp.reshealthcare.org|reshealthcare.org|hfriedman at reshealthcare.org|hfriedman|Mitchell1|Mitchell1
> 30331|US|ST-VINCENT - St. Vincent Hospital|206.228.123.253|mail2.stvin.org|stvin.org|irw.hoffman at stvin.org|hoffman1|calypso29|calypso29
> 3136|US|STATE-OF-WISCONSIN-AS1 - State of WI Dept. of Administration|165.189.56.61|smtp.state.wi.us|dot.wi.gov|cynthia.bilke at dot.wi.gov|dotcqb|mandy|mandy
> 3136|US|STATE-OF-WISCONSIN-AS1 - State of WI Dept. of Administration|165.189.56.61|smtp.state.wi.us|dot.wi.gov|george.silverwood at dot.wi.gov|silvegxjot|f2666234|f2666234
> 3356|US|LEVEL3 Level 3 Communications|147.206.10.17|mail2.ochsner.org|ochsner.org|eyoung at ochsner.org|eyoung|poker5|poker5
> 3356|US|LEVEL3 Level 3 Communications|147.206.10.17|mail2.ochsner.org|ochsner.org|jfuloria at ochsner.org|jfuloria|address|address
> 3356|US|LEVEL3 Level 3 Communications|147.206.10.17|mail2.ochsner.org|ochsner.org|nepstein at ochsner.org|nepstein|email|email
> 3356|US|LEVEL3 Level 3 Communications|147.206.15.14|mail1.ochsner.org|ochsner.org|jbernal at ochsner.org|jbernal|heart|heart
> 3356|US|LEVEL3 Level 3 Communications|147.206.15.14|mail1.ochsner.org|ochsner.org|jgarces at ochsner.org|jgarces|felisa|felisa
> 3356|US|LEVEL3 Level 3 Communications|147.206.15.14|mail1.ochsner.org|ochsner.org|Kcosby at ochsner.org|Kcosby|address|address
> 3356|US|LEVEL3 Level 3 Communications|192.104.254.179|ironmail2.mlhs.org|mlhs.org|badosaf at mlhs.org|badosf|Kid4406|Kid4406
> 3356|US|LEVEL3 Level 3 Communications|192.104.254.179|ironmail2.mlhs.org|mlhs.org|badosaf at mlhs.org|badosf|Kid4411|Kid4411
> 3356|US|LEVEL3 Level 3 Communications|192.104.254.179|ironmail2.mlhs.org|mlhs.org|trevid at mlhs.org|trevid|122348|122348
> 3549|US|GBLX Global Crossing Ltd.|64.208.183.139|gateway.gogstats.org|gogstats.org|blessing at gogstats.org|blessing|laurab|laurab
> 36733|US|DNEO-OSP7 - Comcast Cable Communications, Inc.|76.96.62.116|mx1a.comcast.net|comcast.net|harveyedelman at comcast.net|harveyedelman|Surfpla8|Surfpla8
> 4193|US|WA-STATE-GOV - Department of Information Services|165.151.24.61|ecymxlcy00.ecy.wa.gov|ecy.wa.gov|dden461 at ecy.wa.gov|Diane Dent|#1GodzGr805|#1GodzGr805
> 4323|US|TWTC - tw telecom holdings, inc.|64.129.67.74|mx1.mail.twtelecom.net|northeastmedical.org|rmitchell at northeastmedical.org|RMITCH09|wednesday|wednesday
> 46991|US|SWEDISH-MEDICAL-CENTER-SHS - SWEDISH MEDICAL CENTER|207.225.232.132|mail.swedish.org|swedish.org|kaj.johansen at swedish.org|johakh1|dansk65|dansk65
> 53269|US|NMH - Northwestern Memorial Hospital|165.20.110.51|mailhost2.nmh.org|nmh.org|kmarks at nmh.org|kmarks|goodbye2$|goodbye2$
> 53269|US|NMH - Northwestern Memorial Hospital|165.20.110.51|mailhost2.nmh.org|nmh.org|lfreedma at nmh.org|lfreedma|friday5|friday5
> 5738|US|SOVER-ASN - SoVerNet, Inc.|209.198.86.45|exgate.nchcvt.org|nchcvt.org|timt at nchcvt.org|timt|17ajm4|17ajm4
> 6128|US|CABLE-NET-1 - Cablevision Systems Corp.|206.221.128.31|mailhost2.ehs.org|ehs.org|tpeter at ehs.org|tpeter|password4|password4
> 6348|US|BETTYPLATFORMS - Prodigy Services|207.115.20.21|sbcmx2.prodigy.net|sbcglobal.net|haroldgraves at sbcglobal.net|Harold Graves|ocs66|0cs66
> 6348|US|BETTYPLATFORMS - Prodigy Services|207.115.21.20|sbcmx1.prodigy.net|sbcglobal.net|joseph2273 at sbcglobal.net|Joe Johnson|AQh420|AQh420
> 6348|US|BETTYPLATFORMS - Prodigy Services|207.115.21.22|sbcmx3.prodigy.net|sbcglobal.net|cwcreserve at sbcglobal.net|Linda Kinnison|flalady60|flalady60
> 6389|US|BELLSOUTH-NET-BLK - BellSouth.net Inc.|198.245.254.4|mailgate.chsys.org|chsys.org|juan.gutierrez at chsys.org|Juan Gutierrez|jfgm at 1969|jfgm at 1969
> 6389|US|BELLSOUTH-NET-BLK - BellSouth.net Inc.|209.149.142.113|spsf01.samaritan.org|samaritan.org|dfurman at samaritan.org|rwfurman at samaritan.org|rwfurman|rwfurman
> 7018|US|ATT-INTERNET4 - AT&T WorldNet Services|12.233.36.12|mail12.chsnj.org|chsnj.org|shasan at chsnj.org|shasan|sahasan2|sahasan2
> 701|US|UUNET - MCI Communications Services, Inc. d/b/a Verizon Business|170.188.5.119|relay.exempla.org|exempla.org|calderona at exempla.org|calderoa|picipici6|picipici6
> 701|US|UUNET - MCI Communications Services, Inc. d/b/a Verizon Business|206.193.126.76|mx2.camc.org|camc.org|daniel.foster at camc.org|dfoster|orhs64|orhs64
> 701|US|UUNET - MCI Communications Services, Inc. d/b/a Verizon Business|206.193.126.76|mx2.camc.org|camc.org|fred.kerns at camc.org|fkerns|luckone|luckyone
> 701|US|UUNET - MCI Communications Services, Inc. d/b/a Verizon Business|206.193.126.76|mx2.camc.org|camc.org|fred.kerns at camc.org|fkerns|luckyone|luckyone
> 701|US|UUNET - MCI Communications Services, Inc. d/b/a Verizon Business|206.193.126.76|mx2.camc.org|camc.org|lawrence.wyner at camc.org|lmwyner|aurelian|aurelian
> 701|US|UUNET - MCI Communications Services, Inc. d/b/a Verizon Business|208.236.221.3|mail.tsrh.org|tsrh.org|tony.herring at tsrh.org|tonyh|ortho1|ortho1
> 7132|US|SBIS-AS - AT&T Internet Services|69.150.14.136|mail.dchstx.org|dchstx.org|carol.deline at dchstx.org|delinec|dana84|dana84
> 7341|US|VELOCITY - The Velocity Network|66.211.226.2|internetfw.srhs-pa.org|srhs-pa.org|csile at srhs-pa.org|cynthia sile|royola|royola
> 7381|US|SASUSA SunGard Availability Services USA|199.125.17.19|wdlcmhop4.childrensmemorial.org|childrensmemorial.org|pvoronov at childrensmemorial.org|pvoronov|diandda3|diandda3
> 7385|US|INTEGRATELECOM - Integra Telecom, Inc.|64.122.96.206|mail.lakehaven.org|lakehaven.org|cmccalib at lakehaven.org|cmccalib|bailey06|bailey06
> 7902|US|PINS - Public Interest Networks Services|209.212.66.146|smtp2.pins.net|isabella.org|alennon at isabella.org|Arthur Lennon|lennoar1|lennoar1
> 8047|US|GCI - GENERAL COMMUNICATION, INC.|209.165.154.144|mail.anthc.org|anthc.org|fwilson at anthc.org|fwilson|Boooooo4$|Boooooo4$
> NA||NA|0.0.0.0|    |cvmcny.org|mbrito at cvmcny.org|mbrito|colasa1829|colasa1829
> NA||NA|0.0.0.0|    |dot.govr|dick.schaffe at dot.govr|Ricardobike|Schaffo1969|Schaffo1969
> NA||NA|0.0.0.0|    |svcmcy.org|edithluciano at svcmcy.org|edith luciano|121855|121855
> NA|US|NA|24.39.62.62|smtp2.emh.org|emh.org|aandreescu at emh.org|aandreescu at emh.org|F21lorin|F21lorin
>
>
>
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
>
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security counter-measures.
> _______________________________________________
>



-- 
Peter Moody      Google    1.650.253.7306
Network Security Engineer  pgp:0xC3410038

More information about the nsp-security mailing list