[nsp-sec] Stolen FTP credentials

[Gabriel Iovino]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 4/19/2011 4:08 AM, Thomas Hungenberg wrote:
> please find below a list of stolen FTP login credentials

ACK:

> 3|18.4.12.1
> 3|18.93.1.231
> 3|18.9.64.24
> 17|128.210.48.12
> 17|128.210.48.81
> 17|128.211.136.17
> 17|128.211.137.14
> 25|128.32.135.72
> 26|128.253.3.178
> 27|129.2.168.163
> 55|158.130.67.216
> 55|158.130.69.89
> 59|144.92.4.152
> 59|144.92.4.178
> 59|144.92.4.180
> 59|146.151.118.167
> 73|140.142.13.107
> 73|140.142.14.50
> 73|140.142.15.16
> 81|152.16.49.54
> 81|152.8.240.10
> 81|192.154.41.113
> 87|134.68.31.146
> 131|128.111.43.14
> 217|128.101.179.215
> 217|160.94.51.210
> 237|141.218.1.78
> 237|164.76.250.124
> 237|198.110.216.157
> 239|128.100.100.158
> 239|128.100.100.163
> 239|128.100.180.121
> 299|128.195.204.35
> 589|129.120.117.60
> 802|130.63.63.86
> 1312|128.173.240.42
> 1312|128.173.240.43
> 1432|147.124.249.130
> 1767|157.91.66.118
> 1785|66.255.16.54
> 2637|130.207.192.44
> 2637|130.207.192.45
> 2939|167.7.184.129
> 3593|74.43.48.117
> 3685|128.205.200.1
> 3685|128.205.200.2
> 3701|163.41.136.132
> 4385|129.21.15.156
> 4385|129.21.16.29
> 4385|129.21.208.62
> 1312|128.173.240.43
> 1432|147.124.249.130
> 1767|157.91.66.118
> 1785|66.255.16.54
> 2637|130.207.192.44
> 2637|130.207.192.45
> 2939|167.7.184.129
> 3593|74.43.48.117
> 3685|128.205.200.1
> 3685|128.205.200.2
> 3701|163.41.136.132
> 4385|129.21.15.156
> 4385|129.21.16.29
> 4385|129.21.208.62
> 4385|129.21.254.195
> 5661|131.247.136.94
> 5661|131.247.139.231
> 6325|66.99.13.70
> 6360|128.171.242.240
> 6389|199.46.10.22
> 7132|216.63.140.120
> 7276|129.7.138.25
> 7377|137.110.244.26
> 7939|132.170.239.203
> 7968|147.126.200.215
> 8359|62.118.194.203
> 10421|129.118.152.115
> 10421|129.118.154.92
> 10546|130.18.80.10
> 10631|131.96.242.209
> 11442|152.1.226.116
> 11442|152.1.37.136
> 11442|152.14.92.69
> 13371|152.16.49.54
> 18553|143.88.64.51
> 18553|143.88.65.115
> 18553|143.88.65.53
> 22159|141.254.1.60
> 22845|164.106.73.12
> 22877|131.171.11.11
> 22990|169.226.1.110
> 22990|169.226.65.36
> 23484|198.105.44.135
> 25977|67.226.65.16
> 25977|67.226.65.68
> 26934|128.206.9.212
> 32432|134.140.202.10
> 33091|136.159.5.22
> 46290|140.144.46.144
> 46543|134.192.136.51

We will generate some sanitized notifications.

Thank you!

Gabe

- --
Gabriel Iovino
Principal Security Engineer, REN-ISAC
http://www.ren-isac.net
24x7 Watch Desk +1(317)278-6630
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk2tj4EACgkQwqygxIz+pTsk4QCg4BhIIOw7UJhKR+gQr5lZakAs
n+8An09z94ex2v21UZ43SpjnNqv7cAl2
=+kAI
-----END PGP SIGNATURE-----