[nsp-sec] DDoS: Compromised web servers / malicious scripts still active

[Serge Droz]

Hi Thomas

thanks for the heads up and ACK for AS21069. I think these guys win a
price for "slowest abuse handling".

Cheers
Serge

On 06.11.2012 17:02, Thomas Hungenberg wrote:
> ----------- nsp-security Confidential --------
> 
> 
> 
> Hi teams,
> 
> I've just checked all 9183 URLs for the malicious scripts on compromised webservers
> Nick provided so far.
> 
> Please find attached a list of 458 URLs that are still active.
> 


-- 
SWITCH
Serving Swiss Universities
--------------------------
Serge Droz, SWITCH-CERT
Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
phone +41 44 268 15 63, fax +41 44 268 15 78
serge.droz at switch.ch, http://www.switch.ch