[nsp-sec] ACK 224 Re: Stolen FTP credentials

[Morten Knutsen]

Thomas Hungenberg wrote:
> Hi,
> 
> please find below a list of stolen FTP login credentials found in several lists
> on a server used for malicious activity. Unfortunately, I don't have information
> on when and how the credentials were stolen, but the filenames and timestamps
> of the lists indicate that they were harvested earlier this month.
> 
> Format: ASN | IP | CC | hostname | username | sanitized password | AS desc
> 
> 224   | 129.241.112.43  | EU | inis2.ivt.ntnu.no         | andreaev         | Ti****** | UNINETT UNINETT, The Norwegian University & Research Network
> 224   | 129.241.112.52  | EU | petra.ivt.ntnu.no         | andreaev         | Ti****** | UNINETT UNINETT, The Norwegian University & Research Network
> 224   | 129.241.112.53  | EU | seis.ivt.ntnu.no          | andreaev         | Ti****** | UNINETT UNINETT, The Norwegian University & Research Network
> 224   | 129.241.112.55  | EU | pets.ivt.ntnu.no          | andreaev         | Ti****** | UNINETT UNINETT, The Norwegian University & Research Network
> 224   | 129.241.14.20   | EU | sftp.stud.ntnu.no         | andreaev         | Ti****** | UNINETT UNINETT, The Norwegian University & Research Network
> 224   | 129.241.14.21   | EU | sftp.stud.ntnu.no         | andreaev         | Ti****** | UNINETT UNINETT, The Norwegian University & Research Network
> 224   | 129.241.21.140  | EU | kongull.hpc.ntnu.no       | andreaev         | Ti****** | UNINETT UNINETT, The Norwegian University & Research Network
> 224   | 129.241.27.108  | EU | 129.241.27.108            | Kristian         | ob****** | UNINETT UNINETT, The Norwegian University & Research Network
> 224   | 129.241.27.19   | EU | iptibm1.ipt.ntnu.no       | olvesund         | Kh****** | UNINETT UNINETT, The Norwegian University & Research Network
> 224   | 129.241.27.80   | EU | promax.ipt.ntnu.no        | andreaev         | Rt****** | UNINETT UNINETT, The Norwegian University & Research Network

ACK for 224, thanks!

-- 
Morten Knutsen
UNINETT AS 224