[nsp-sec] Some compromised machines and IDs

[Gabriel Iovino]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 5/26/2010 7:27 PM, Joel Rosenblatt wrote:
> As a result of reporting a machine that was scanning our campus, we
> received some intel on some compromised systems and IDs

ACK:

> 2       | 128.4.134.91     | User: dark1     | DCN-AS - University of Delaware
> 46      | 128.6.231.84     | User: 6052      | RUTGERS - Rutgers University
> 27      | 128.8.91.240     | User: fenris    | UMDNET - University of Maryland at College Park
> 3       | 128.30.65.255    | User: bill      | MIT-GATEWAYS - Massachusetts Institute of Technology
> 3       | 128.30.67.30     | User: debbie    | MIT-GATEWAYS - Massachusetts Institute of Technology
> 2637    | 128.61.158.21    | User: angel     | GEORGIA-TECH - Georgia Institute of Technology

We will generate some sanitized notifications.

Thank you!

Gabe

- --
Gabriel Iovino
Principal Security Engineer, REN-ISAC
http://www.ren-isac.net
24x7 Watch Desk +1(317)278-6630
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkv+jKsACgkQwqygxIz+pTunJACggjan8Slrg6CiE2NOOkM/Lpyh
q0sAnjHl933gZwAOtrVb6Pdv6yMqVHC6
=yszB
-----END PGP SIGNATURE-----