[nsp-sec] More stolen FTP credentials (ACK 1103)

[SURFcert - Peter]

Thomas Hungenberg wrote on 17-03-2011 15:01:
> ----------- nsp-security Confidential --------
>
> Hi,
>
> please find below another list of stolen FTP credentials found on a malware C&C.
> Unfortunately, I don't have information on when these credentials have been stolen,
> so this could be recent data or maybe also an older collection.
>
>      - Thomas
>
> CERT-Bund Incident Response & Anti-Malware Team
>
>
> Format: ASN | IP | CC | hostname | username | sanitized password | AS name
> 1103  | 145.24.129.221  | EU | ftp.hro.nl                | 0812446.eas | 60****** | SURFNET-NL SURFnet, The Netherlands
> 1103  | 192.87.127.8    | EU | ftp1.wkap.nl              | Newgen     | KA****** | SURFNET-NL SURFnet, The Netherlands
> 1103  | 192.87.219.67   | EU | 192.87.219.67             | jeffrey0   | ac****** | SURFNET-NL SURFnet, The Netherlands
> 1103  | 194.171.206.2   | NL | 194.171.206.2             | wieger     | te****** | SURFNET-NL SURFnet, The Netherlands
Sanitized and forwarded.

-- 
Peter Peters                     /------\           SURFnet bv
SURFcert                         | SURF |           cert.surfnet.nl
cert at surfnet.nl                  \-----\ \-----\    Postbus 19035
PGP Key ID 0x5A52C966                   | CERT |    NL-3501 DA  Utrecht
+31 30 2305 305                         \------/    fax: +31 30 2305 329


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 543 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20110322/e7900836/attachment-0001.sig>