[nsp-sec] ACK: Stolen FTP credentials

[Gabriel Iovino]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 2/15/2011 8:35 AM, Dirk Stander wrote:
> Hi Teams,
> 
> please find attached a list of stolen FTP-credentials,

ACK:

> 3 | 18.38.0.77
> 8 | 168.7.50.16
> 17 | 128.210.161.178
> 27 | 128.8.10.152
> 27 | 128.8.10.68
> 27 | 128.8.127.4
> 29 | 130.132.188.14
> 32 | 171.67.216.69
> 38 | 130.126.126.162
> 46 | 128.6.236.16
> 46 | 128.6.68.10
> 55 | 158.130.67.216
> 55 | 158.130.69.89
> 55 | 165.123.11.193
> 81 | 152.46.7.122
> 88 | 128.112.15.133
> 92 | 128.153.5.140
> 103 | 129.105.119.94
> 131 | 128.111.36.238
> 131 | 128.111.41.54
> 131 | 128.111.5.6
> 156 | 129.10.115.141
> 156 | 129.10.118.73
> 156 | 129.10.118.82
> 156 | 129.10.119.72
> 159 | 164.107.61.77
> 210 | 161.28.117.183
> 225 | 128.143.12.93
> 237 | 141.215.10.31
> 237 | 164.76.250.124
> 1249 | 128.119.10.188
> 1249 | 131.229.64.58
> 1657 | 136.165.66.193
> 1742 | 140.247.109.16
> 1742 | 140.247.34.98
> 1790 | 198.178.132.10
> 2025 | 131.183.236.38
> 2152 | 130.65.14.33
> 2553 | 146.201.28.5
> 2553 | 146.201.28.6
> 2637 | 130.207.127.233
> 2698 | 129.186.1.205
> 3354 | 198.213.80.39
> 3356 | 155.42.16.93
> 3452 | 164.111.193.134
> 3794 | 128.194.216.61
> 4130 | 136.142.181.160
> 4130 | 136.142.186.17
> 4130 | 136.142.55.128
> 4385 | 129.21.148.58
> 5661 | 131.247.236.119
> 6059 | 131.118.52.153
> 6360 | 128.171.80.169
> 7029 | 205.166.231.162
> 7029 | 205.166.231.7
> 7029 | 205.166.231.80
> 7939 | 132.170.214.205
> 11039 | 128.164.136.179
> 11131 | 130.85.16.218
> 11131 | 130.85.95.28
> 11351 | 64.30.240.18
> 11351 | 64.30.240.7
> 11442 | 152.14.86.242
> 11442 | 152.1.9.157
> 11442 | 152.7.16.246
> 11442 | 152.7.16.96
> 17055 | 155.97.156.9
> 18791 | 138.237.38.242
> 19956 | 151.141.90.51
> 20452 | 147.226.7.18
> 22845 | 164.106.130.90
> 22990 | 169.226.2.96
> 23329 | 128.238.246.61
> 23329 | 128.238.251.11
> 23329 | 128.238.251.43
> 23329 | 128.238.49.28
> 26046 | 129.123.1.117
> 26783 | 140.198.200.13
> 31822 | 199.219.135.30
> 31886 | 131.104.122.13
> 36850 | 152.19.232.20
> 53568 | 199.30.211.12

We will generate some sanitized notifications.

Thank you!

Gabe

- --
Gabriel Iovino
Principal Security Engineer, REN-ISAC
http://www.ren-isac.net
24x7 Watch Desk +1(317)278-6630
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk1ako8ACgkQwqygxIz+pTuuDwCfbEOU1RfzUb6LXWq/pLagF4Js
r5AAoLmIcTIGkvujhW4a8EHX9uBwDDsF
=pbcr
-----END PGP SIGNATURE-----