[nsp-sec] Stolen FTP credentials - ACKs for CAT and Proxy-ACKs for ES

[Carles Fragoso]

Thomas ... thanks a lot!

Proxified ACK for ...

>   14 3352   TELEFONICA-DATA-ESPANA Internet Access Network of TDE
>   13 20718  AS_ARSYS-EURO-1 arsys.es
>    6 39020  COMVIVE-AS Comvive Servidores S.L.
>    6 16371  ACENS_AS acens technologies
>    5 4589   EASYNET Easynet Global Services
>    4 6739   ONO-AS Cableuropa - ONO
>    4 42612  DINAHOSTING-AS ASN de Dinahosting SL
>    4 15699  AS_ADAM Network ADAM DATACENTER - www.adamdatacenter.es
>    4 12715  JAZZNET Jazz Telecom S.A.
>    3 6813   FLEXNET Autonomous System
>    3 16338  ONO-AS2 Cableuropa - ONO
>    2 766    REDIRIS RedIRIS Autonomous System
>    2 30846  MAPFRE-AS MAPFRE Seguros
>    2 196929 GESTIONCLIENTES-NETWORK PEREZ ARNAIZ JOSE LUIS 002479762A, SLNE
>    2 16206  ABRARED NEO-SKY 2002 Autonomous System 1
>    2 12479  UNI2-AS France Telecom Espana SA
>    1 702    AS702 Verizon Business EMEA - Commercial IP service provider in Europe
>    1 41721  CARTAGON Cartagon AS41721
>    1 35368  DATAHOUSE ============================================
>    1 3262   SARENET SAREnet, Spain
>    1 25487  DIGITALVALUE-AS Digital Value Autonomous System, Valencia (Spain)
>    1 23148  TERREMARK Terremark
>    1 12860  AXARNET-NETWORK Red_Axarnet_Madrid
>    1 12334  AS R Cable y Telecomunicaciones Galicia S.A.

ACK for ...

>    2 15633  UOC is a virtual University based in Barcelona (ES).
>    1 20815  GRN-AS GRN Network
>    1 39263  ILIMIT Ilimit Comunicacions, S.L. Barcelona Spain

--
Carles Fragoso (CESICAT-CERT)

On Mar 16, 2011, at 11:53 AM, Thomas Hungenberg wrote:

> ----------- nsp-security Confidential --------
> 
> Hi,
> 
> please find below a list of stolen FTP credentials found in recent dropzone data.
> 
> Format: ASN | IP | CC | hostname | username | sanitized password
> 
> 
>     - Thomas