[nsp-sec] ACK 174 RE: Stolen FTP credentials

[Shelton, Steve]

 Thanks!  ACK for 174.

Steve Shelton
Sec Engineer
Cogent Communications

-----Original Message-----
From: nsp-security-bounces at puck.nether.net
[mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Thomas
Hungenberg
Sent: Wednesday, March 16, 2011 6:53 AM
To: nsp-sec
Subject: [nsp-sec] Stolen FTP credentials

----------- nsp-security Confidential --------

Hi,

please find below a list of stolen FTP credentials found in recent
dropzone data.

Format: ASN | IP | CC | hostname | username | sanitized password


     - Thomas

CERT-Bund Incident Response & Anti-Malware Team


174 | 194.36.22.21 | EU | lucien.w3net.fr | sterne | qs******
174 | 200.80.13.67 | CO | www.caribeantropicalin.com | caribeant |
ca******
174 | 38.114.71.101 | US | ftp.psaexhibition.com | dennis | no******
174 | 38.126.149.187 | US | ftp.biokinc.com | FWAmgen | B1******
174 | 38.98.196.41 | US | ftp.bostonmagazine.com | Bosftp | ft******
174 | 38.98.196.41 | US | ftp.bostonmagazine.com | Bosftp | FT******
174 | 82.138.70.252 | EU | 82.138.70.252 | hpendo | vi******



_______________________________________________
nsp-security mailing list
nsp-security at puck.nether.net
https://puck.nether.net/mailman/listinfo/nsp-security

Please do not Forward, CC, or BCC this E-mail outside of the
nsp-security
community. Confidentiality is essential for effective Internet security
counter-measures.
_______________________________________________