[nsp-sec] DDoS: Compromised web servers (part 1)
Nick Ianelli
ni at allyourinfoarebelongto.us
Mon Oct 8 22:51:33 EDT 2012
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
For those that haven't seen, tomorrow will kick off the continuation
of DDoS attacks targeting various financial organizations. Current
schedule:
Capital One 20121009
Suntrust 20121010
Regions 20121011
Attached are 160 new compromised web servers the malicious actors have
added in the past 24 hours.
****
It should be noted that if you try and "GET" the indx.php without any
parameters it will generate an error.
Take a closer look at the 404 you are getting back, if you see the
typo, the sites are still infected:
"a 404 Not Foun derror was encountered'
****
Prior to distribution please remove any list or personally identifiable
information from it.
In addition to indx.php, the following files may exist in the same
directory:
stcp.php
stip.php
stph.php
classtyle.php
classtyle2.php
The following URL discusses some of the issues at play here, but I
don't believe all are Joomla compromises:
http://forum.joomla.org/viewtopic.php?t=737503
In working with your constituency, if you were able to obtain the
files listed above (and any other files in the same directory) as well
as any web access logs specific to the files listed above, I would be
extremely interested and eternally grateful.
Any questions, let me know.
Here is a list of ASNs (by count) of what's in the attached file:
8 8560
7 24940
4 46606
4 36351
3 6697
3 44112
3 43146
3 33182
3 32475
3 31727
3 25535
3 25532
3 21788
3 16276
3 14259
2 7162
2 6724
2 5606
2 5408
2 47583
2 36647
2 33070
2 31034
2 23352
2 19318
2 12824
2 12637
2 10474
1 9891
1 8972
1 8675
1 8358
1 8342
1 8315
1 7643
1 6471
1 6128
1 56740
1 56582
1 55298
1 51740
1 51468
1 50673
1 49699
1 49635
1 48707
1 4837
1 48287
1 45538
1 42244
1 41947
1 41550
1 4134
1 41186
1 40285
1 39756
1 38544
1 38197
1 37153
1 36024
1 3595
1 35908
1 34989
1 3447
1 34358
1 34087
1 34011
1 32613
1 32244
1 3215
1 31646
1 30943
1 29944
1 29802
1 29671
1 28753
1 28299
1 27823
1 25563
1 24994
1 23148
1 23136
1 21844
1 21155
1 20875
1 20718
1 20597
1 20545
1 19969
1 17393
1 16814
1 16626
1 16371
1 16265
1 15982
1 15083
1 13213
1 13147
1 12880
1 12301
1 12129
1 11388
1 11042
Cheers,
Nick
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
iEYEARECAAYFAlBzkTQACgkQi10dJIBjZICZgwCbBsl5qk0WRGgXaKhNUMDrNfBa
wKAAoMOvw9AVs5N/T+LKA3OT6fLAO4k8
=s5ix
-----END PGP SIGNATURE-----
-------------- next part --------------
14259 | 201.238.248.76 | CL | http://www.propiedadesamaro.cl/administrator/indx.php | Gtd Internet S.A.
5408 | 195.251.123.232 | GR | http://aetos.it.teithe.gr/antcha/joomla/administrator/templates/bluestork/indx.php | GR-NET Greek Research & Technology Network, http://www.grnet.gr
36351 | 174.36.75.35 | US | http://www.alexandris-pastry.gr/administrator/templates/bluestork/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
12129 | 66.103.238.98 | US | http://analysis-india.com/xmlrpc/indx.php | 123NET - 123.Net, Inc.
6128 | 75.127.248.141 | US | http://bascombe.info/administrator/templates/bluestork/indx.php | CABLE-NET-1 - Cablevision Systems Corp.
21788 | 184.82.244.150 | US | http://blackpanther.co.in/installation/indx.php | NOC - Network Operations Center Inc.
38544 | 203.98.84.205 | AU | http://cashloans-nsw.com.au/administrator/templates/bluestork/indx.php | CRUCIALX-AS-AP Crucial Paradigm Pty Ltd
14259 | 190.98.227.141 | CL | http://celtasoftware.cl/administrator/templates/bluestork/indx.php | Gtd Internet S.A.
8972 | 62.75.229.237 | DE | http://chimpsolutions.co.uk/pm/indx.php | PLUSSERVER-AS intergenia AG
11042 | 209.217.252.217 | US | http://creativeconsortium.co.in/administrator/templates/bluestork/indx.php | LANDIS-HOLDINGS-INC - Landis Holdings Inc
20597 | 81.222.215.79 | RU | http://crystalstork.ru/images/indx.php | ELTEL-AS ELTEL.NET Autonomous System
47583 | 31.170.160.209 | US | http://cursojoomla.comxa.com/images/indx.php | HOSTING-MEDIA Aurimas Rapalis trading as _II Hosting Media_
34358 | 89.45.193.188 | RO | http://dancing-queens.ro/administrator/templates/bluestork/indx.php | CLAXTELECOM CLAX TELECOM SRL
34087 | 178.164.11.103 | NO | http://design.sircon.no/components/indx.php | NTE-BREDBAND NTE Bredband, Norway
33070 | 72.32.27.183 | US | http://dev.nmaonline.org/nma/indx.php | RMH-14 - Rackspace Hosting
24940 | 176.9.92.88 | DE | http://dezuni.ir/GoogleTap/indx.php | HETZNER-AS Hetzner Online AG RZ
48707 | 212.91.6.51 | PL | http://diety.in/administrator/templates/bluestork/indx.php | GREENER-AS Greener, Marcin Waligorski
34011 | 46.252.18.186 | DE | http://dirk.foremny.de/administrator/templates/bluestork/indx.php | DOMAINFACTORY domainfactory GmbH
6697 | 93.125.99.13 | BY | http://dveririch.by/administrator/templates/bluestork/indx.php | BELPAK-AS Republican Association BELTELECOM
21788 | 173.212.253.36 | US | http://echolima.com/.fontconfig/indx.php | NOC - Network Operations Center Inc.
31727 | 79.170.44.127 | GB | http://echo-location.org.uk/administrator/templates/bluestork/indx.php | NODE4-AS Node4 Ltd, UK
34989 | 91.189.178.154 | NO | http://eci.no/administrator/templates/bluestork/indx.php | SERVETHEWORLD-AS ServeTheWorld AS
12824 | 212.85.106.133 | PL | http://edal.com.pl/administrator/templates/bluestork/indx.php | HOMEPL-AS home.pl sp. z o.o.
33182 | 66.7.198.7 | US | http://elcardal.com.ar/plugins/system/indx.php | DIMENOC - HostDime.com, Inc.
12824 | 89.161.169.166 | PL | http://elektroinstalator.com.pl/plugins/system/indx.php | HOMEPL-AS home.pl sp. z o.o.
56740 | 31.130.201.140 | BY | http://elt.vgpl1.by/administrator/templates/bluestork/indx.php | DATAHATA-AS DataHata Ltd
29944 | 74.209.215.120 | US | http://empower11.com/Membership/wp-content/plugins/akismet/indx.php | LATISYS-ASHBURN - Latisys-Ashburn, LLC
32475 | 184.154.229.13 | US | http://enchong.us/administrator/templates/bluestork/indx.php | SINGLEHOP-INC - SingleHop
29802 | 96.31.75.220 | US | http://enfocate.com.mx/administrator/templates/bluestork/indx.php | HVC-AS - HIVELOCITY VENTURES CORP
8675 | 212.12.30.30 | RU | http://eor.ipk-tula.su/administrator/templates/bluestork/indx.php | AS_TULATEL OJSC Rostelecom
27823 | 200.58.111.31 | AR | http://ercasprueba2.com.ar/libraries/indx.php | Dattatec.com
40285 | 24.49.187.161 | US | http://evilapple.net/.gconf/indx.php | NORTHLAND-CABLE - NORTHLAND CABLE TELEVISION INC.
8560 | 74.208.129.205 | US | http://exoticautospa.ca/libraries/phpmailer/language/indx.php | ONEANDONE-AS 1&1 Internet AG
6471 | 200.11.75.71 | CL | http://factel.cl/administrator/templates/bluestork/indx.php | ENTEL CHILE S.A.
6724 | 81.169.145.167 | DE | http://faq.bk-shopping.de/cgi-bin/indx.php | STRATO STRATO AG
23148 | 85.112.20.172 | ES | http://faq.euroface.nl/config/indx.php | TERREMARK Terremark
24940 | 5.9.73.20 | DE | http://ffh.szakalyek.hu/ffh/administrator/templates/bluestork/indx.php | HETZNER-AS Hetzner Online AG RZ
13147 | 193.107.36.80 | BG | http://food.ceole.bg/administrator/templates/bluestork/indx.php | NETINFO NetInfo Ltd.
33070 | 98.129.229.46 | US | http://forum.askmrcreditcard.com/indx.php | RMH-14 - Rackspace Hosting
29671 | 77.232.84.64 | EU | http://frudu.com/images/indx.php | SERVAGE Servage GmbH
32244 | 50.28.1.14 | US | http://gamenet.shopics.net/images/indx.php | LIQUID-WEB-INC - Liquid Web, Inc.
43146 | 89.108.66.200 | RU | http://game-point.ru/feedback/indx.php | AGAVA3 Agava Ltd.
8342 | 81.177.140.108 | RU | http://gorodavto.ru/administrator/indx.php | RTCOMM-AS OJSC RTComm.RU
7643 | 123.30.174.12 | VN | http://govanep.com/plugins/system/indx.php | VNPT-AS-VN Vietnam Posts and Telecommunications (VNPT)
5408 | 194.177.200.146 | GR | http://grsa.prd.uth.gr/administrator/templates/bluestork/indx.php | GR-NET Greek Research & Technology Network, http://www.grnet.gr
41947 | 92.241.187.92 | RU | http://hd-sat.ru/products_files/indx.php | WEBALTA-AS OAO Webalta
42244 | 178.218.218.21 | RU | http://himmag.ru/products_files/indx.php | ESERVER eServer.ru - hosting operator
20545 | 217.147.232.66 | GE | http://hps.hpep.ge/indx.php | GRENA-AS GRENA Autonomous System
8560 | 50.21.179.185 | US | http://inmogalvis.com/administrator/indx.php | ONEANDONE-AS 1&1 Internet AG
36024 | 173.237.190.111 | US | http://its-computer.net/administrator/templates/khepri/indx.php | COLO4-CO - Colo4, LLC
16265 | 95.211.71.171 | NL | http://jynxdesign.nl/administrator/templates/bluestork/indx.php | LEASEWEB LeaseWeb B.V.
3215 | 83.203.182.189 | FR | http://magma57.ftpaccess.cc/phpmyadmin/indx.php | AS3215 France Telecom - Orange
5606 | 212.146.84.201 | RO | http://masajelahotel.ro/cluj-napoca/administrator/templates/bluestork/indx.php | KQRO GTS Telecom SRL
15083 | 65.111.174.48 | US | http://maximilian-jewellery.com/setup/indx.php | INFOLINK-MIA-US - Infolink
23352 | 205.234.234.6 | US | http://michaelsplint.com/templates/beez/indx.php | SERVERCENTRAL - Server Central Network
25535 | 178.210.81.48 | RU | http://mitelecom.ru/wp-content/plugins/vo/indx.php | ASN-RUCENTER-HOSTING Autonomous Non-commercial Organization _Regional Network Information Center_
49635 | 93.189.95.5 | ES | http://morfeo.spidersoft.es/administrator/templates/bluestork/indx.php | SILICON SILICONTOWER, S.L.
16276 | 94.23.246.96 | FR | http://netplusint.com/images/indx.php | OVH OVH Systems
36351 | 50.116.65.195 | US | http://nextstepcoaching.com/wp-content/themes/toolbox/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
51740 | 91.226.12.15 | RU | http://optiscop.tomsk.ru/products_files/indx.php | ASZZZING Zing Ltd.
49699 | 91.215.216.36 | BG | http://phytocode.net/krastev.in/indx.php | ICN-BG Internet Corporated Networks Ltd.
44112 | 77.222.40.21 | RU | http://piokal.ru/products_files/indx.php | SWEB-AS SpaceWeb JSC
24940 | 188.40.103.151 | DE | http://pokazowka.almo.net.pl/cache/indx.php | HETZNER-AS Hetzner Online AG RZ
36351 | 100.42.49.206 | US | http://princesscharlina.com/_vti_bin/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
4837 | 119.188.10.167 | CN | http://r.bjguang.com/users/00/indx.php | CHINA169-BACKBONE CNCGROUP China169 Backbone
50673 | 178.21.16.88 | NL | http://redlum.pro/administrator/templates/bluestork/indx.php | SERVERIUS-AS Serverius Holding B.V.
20875 | 92.240.51.6 | BA | http://ruhama-bih.org/plugins/system/indx.php | HPTNET-AS HT d.o.o. Mostar
14259 | 190.96.85.48 | CL | http://sanjoseangol.cl/plugins/system/indx.php | Gtd Internet S.A.
33182 | 72.29.90.67 | US | http://segurixltda.com/administrator/indx.php | DIMENOC - HostDime.com, Inc.
24940 | 178.63.77.229 | DE | http://shahiry-safety.com/plugins/system/indx.php | HETZNER-AS Hetzner Online AG RZ
51468 | 193.202.110.139 | DK | http://shop.fcca.be/addons/tinymce/jscripts/tiny_mce/plugins/ajaxfilemanager/inc/indx.php | ONECOM One.com A/S
56582 | 46.235.15.25 | TR | http://silifkemiz.net/plugins/system/indx.php | NETFACTOR-ASN NETFACTOR TELEKOMINIKASYON VE TEKNOLOJI HIZMETLERI SANAYI VE JSC
6697 | 93.84.112.155 | BY | http://speeddating-club.by/administrator/templates/bluestork/indx.php | BELPAK-AS Republican Association BELTELECOM
33182 | 67.23.249.15 | US | http://sunrise.jetsolutions.co.in/wp-content/themes/toolbox/indx.php | DIMENOC - HostDime.com, Inc.
6697 | 178.124.138.61 | BY | http://svoedelo.by/images/indx.php | BELPAK-AS Republican Association BELTELECOM
6724 | 85.214.84.75 | DE | http://teamplexus.de/administrator/templates/bluestork/indx.php | STRATO STRATO AG
13213 | 37.130.225.130 | GB | http://titanthegame.org/forums/indx.php | UK2NET-AS UK-2 Ltd Autonomous System
11388 | 209.25.195.86 | US | http://tourism-walger-dz.org/plugins/system/indx.php | MAXIM - Peer 1 Dedicated Hosting
16276 | 213.186.33.87 | FR | http://transportdepersonnes.pro/administrator/templates/bluestork/indx.php | OVH OVH Systems
8560 | 74.208.11.191 | US | http://videogrid.648group.org/wp-content/themes/videogrid/library/indx.php | ONEANDONE-AS 1&1 Internet AG
47583 | 31.170.166.106 | US | http://web.buali2.com/indx.php | HOSTING-MEDIA Aurimas Rapalis trading as _II Hosting Media_
3447 | 204.49.254.66 | US | http://webgis.co.okaloosa.fl.us/gis/administrator/templates/bluestork/indx.php | EMBARQ-CMDS - Embarq Corporation
46606 | 173.254.28.81 | US | http://wirksworthcarnival.co.uk/administrator/templates/bluestork/indx.php | BLUEHOST-AS-2 - Bluehost Inc.
31646 | 194.42.116.110 | PL | http://wrotalodzi.tomorrow.org.pl/www/content/indx.php | ASN-WSHE Wyzsza Szkola Humanistyczno-Ekonomiczna w Lodzi
32475 | 198.91.81.2 | US | http://www.1stmerimbula.x10.mx/administrator/templates/bluestork/indx.php | SINGLEHOP-INC - SingleHop
24940 | 176.9.121.246 | DE | http://www.2aj.ir/classes/indx.php | HETZNER-AS Hetzner Online AG RZ
19969 | 69.195.149.26 | US | http://www2.allstarradio.com/machform/data/indx.php | JOESDATACENTER - Joe_s Datacenter, LLC
4134 | 218.95.38.49 | CN | http://www.99tcdj.cn/Upload/indx.php | CHINANET-BACKBONE No.31,Jin-rong Street
36647 | 67.195.61.65 | US | http://www.african-americanchamber.org/templates/beez/indx.php | YAHOO-GQ1 - Yahoo
16276 | 94.23.56.46 | FR | http://www.alsacekientz.com/IMG/indx.php | OVH OVH Systems
12637 | 217.64.195.226 | IT | http://www.amicidelgargano.com/indx.php | SEEWEB Seeweb s.r.l.
28299 | 187.1.141.34 | BR | http://www.araguarigospel.com.br/w/administrator/templates/bluestork/indx.php | NO_NAME
8560 | 82.165.74.179 | DE | http://www.baerenbrueder.net/administrator/templates/bluestork/indx.php | ONEANDONE-AS 1&1 Internet AG
19318 | 64.20.39.210 | US | http://www.bagerhatpbs.org.bd/ba/administrator/templates/bluestork/indx.php | NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC
31727 | 79.170.44.87 | GB | http://www.balooga.co.uk/administrator/templates/bluestork/indx.php | NODE4-AS Node4 Ltd, UK
19318 | 64.20.39.210 | US | http://www.barisalpbs1.org.bd/ba/administrator/templates/bluestork/indx.php | NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC
12637 | 217.64.195.226 | IT | http://www.bbanticaprofumeria.it/indx.php | SEEWEB Seeweb s.r.l.
32613 | 184.107.154.146 | CA | http://www.beaumesnil.ca/administrator/templates/bluestork/indx.php | IWEB-AS - iWeb Technologies Inc.
16371 | 217.116.9.132 | ES | http://www.bellvitgehospital.cat/memoria10/administrator/templates/bluestork/indx.php | ACENS_AS acens Technologies, S.L.
23136 | 66.240.175.66 | US | http://www.bigfish.org.za/administrator/templates/bluestork/indx.php | ONX - OnX Enterprise Solutions Inc.
32475 | 184.154.14.61 | US | http://www.bimeka.com.gr/administrator/templates/bluestork/indx.php | SINGLEHOP-INC - SingleHop
31727 | 79.170.40.175 | GB | http://www.bissone.ch/administrator/templates/bluestork/indx.php | NODE4-AS Node4 Ltd, UK
8560 | 87.106.112.218 | DE | http://www.blackpool-hotel.org/administrator/templates/bluestork/indx.php | ONEANDONE-AS 1&1 Internet AG
24940 | 78.46.116.107 | DE | http://www.browsergames2.de/administrator/templates/bluestork/indx.php | HETZNER-AS Hetzner Online AG RZ
10474 | 197.85.190.85 | ZA | http://www.buywithus.co.za/administrator/templates/bluestork/indx.php | MWEB-10474
45538 | 112.78.2.34 | VN | http://www.capnuoccholon.com.vn/fckeditor/indx.php | ODS-AS-VN Online data services
16814 | 190.210.161.188 | AR | http://www.cavamistica.com.ar/administrator/templates/bluestork/indx.php | NSS S.A.
9891 | 203.146.102.217 | TH | http://www.central.co.th/backend/indx.php | CSLOX-IDC-AS-AP CS LOXINFO Public Company Limited.
25532 | 90.156.201.114 | RU | http://www.cezon-shop.ru/products_files/indx.php | MASTERHOST-AS .masterhost autonomous system
38197 | 210.56.49.50 | HK | http://www.dearmoo.com/aspnet_client/indx.php | SUNHK-DATA-AS-AP Sun Network (Hong Kong) Limited
44112 | 77.222.40.63 | RU | http://www.detkishop.ru/products_files/indx.php | SWEB-AS SpaceWeb JSC
43146 | 80.78.247.4 | RU | http://www.dvertorg.ru/products_files/indx.php | AGAVA3 Agava Ltd.
7162 | 200.98.246.241 | BR | http://www.e1telecomunicacoes.com.br/administrator/templates/bluestork/indx.php | Itanet - Itamarati On-Line Ltda.
8560 | 74.208.138.23 | US | http://www.gygaxmemorialfund.org/administrator/templates/bluestork/indx.php | ONEANDONE-AS 1&1 Internet AG
25532 | 90.156.201.55 | RU | http://www.hairpro.ru/products_files/indx.php | MASTERHOST-AS .masterhost autonomous system
12301 | 81.0.69.163 | HU | http://www.hazitermeszetgyogyasz.hu/administrator/templates/bluestork/indx.php | INVITEL Invitel Tavkozlesi Zrt.
5606 | 89.42.216.154 | RO | http://www.hiline.ro/administrator/templates/bluestork/indx.php | KQRO GTS Telecom SRL
24940 | 78.46.183.50 | DE | http://www.ichwilleinehomepage.at/administrator/templates/bluestork/indx.php | HETZNER-AS Hetzner Online AG RZ
30943 | 217.112.35.32 | GB | http://www.igrakom.ru/products_files/indx.php | UTRANSIT-AS Utransit International Carrier Limited
7162 | 200.98.246.169 | BR | http://www.jcestetica.com.br/plugins/system/indx.php | Itanet - Itamarati On-Line Ltda.
25535 | 195.208.0.126 | RU | http://www.kancler-kmv.ru/products_files/indx.php | ASN-RUCENTER-HOSTING Autonomous Non-commercial Organization _Regional Network Information Center_
25532 | 90.156.201.118 | RU | http://www.med-tehnica.ru/products_files/indx.php | MASTERHOST-AS .masterhost autonomous system
37153 | 197.221.14.12 | ZA | http://www.mrandmrs.co.za/administrator/templates/bluestork/indx.php | HETZNER
43146 | 89.108.66.219 | RU | http://www.ndtesting.ru/products_files/indx.php | AGAVA3 Agava Ltd.
31034 | 62.149.140.176 | IT | http://www.niuteam.it/administrator/templates/bluestork/indx.php | ARUBA-ASN Aruba S.p.A.
46606 | 173.254.75.174 | US | http://www.normitq.am/administrator/templates/bluestork/indx.php | BLUEHOST-AS-2 - Bluehost Inc.
41186 | 195.114.18.165 | FR | http://www.onemillionsolarcells.com/indx.php | ISPFR-AS NUXIT s.a.r.l.
39756 | 89.36.25.168 | RO | http://www.online4movie.ro/administrator/templates/bluestork/indx.php | ROHOSTWAY-AS HOSTWAY ROMANIA SRL
48287 | 109.70.26.36 | RU | http://www.orange-zebra.org/tmp//indx.php | RU-SERVICE-AS RU-SERVICE Ltd
44112 | 77.222.40.33 | RU | http://www.otrshina.ru/products_files/indx.php | SWEB-AS SpaceWeb JSC
36351 | 184.173.70.8 | US | http://www.paleo-unpsjb.com.ar/sitio/administrator/templates/bluestork/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
8315 | 176.62.198.6 | NL | http://www.parkeerbewust.nl/administrator/templates/bluestork/indx.php | ARGEWEB-AS Amsio B.V.
15982 | 217.26.70.76 | RS | http://www.pepa-divcibare.co.rs/administrator/indx.php | VERAT-AS-1 Drustvo za telekomunikacije Verat d.o.o, Bulevar Vojvode Misica 37
46606 | 66.147.240.194 | US | http://www.perfectairecorporate.co.za/administrator/templates/bluestork/indx.php | BLUEHOST-AS-2 - Bluehost Inc.
21788 | 184.82.136.52 | US | http://www.polsk.com.ar/administrator/templates/bluestork/indx.php | NOC - Network Operations Center Inc.
8560 | 74.208.120.230 | US | http://www.presenciaanimal.org.mx/administrator/templates/bluestork/indx.php | ONEANDONE-AS 1&1 Internet AG
23352 | 64.202.120.73 | US | http://www.privateschools.co.ke/.smileys/indx.php | SERVERCENTRAL - Server Central Network
20718 | 217.76.142.70 | ES | http://www.psoecalvia.com/indx.php | AS_ARSYS-EURO-1 arsys.es
24994 | 89.31.74.94 | IT | http://www.quisiena.corrierenazionale.it/administrator/templates/bluestork/indx.php | GENESYS-AS genesys informatica srl
25563 | 92.43.216.135 | CH | http://www.roessli-wasen.ch/administrator/templates/bluestork/indx.php | WEBLAND-AS Webland AG, Autonomous System
16626 | 75.127.126.152 | US | http://www.savinggraves.net/administrator/templates/bluestork/indx.php | GNAXNET-AS - Global Net Access, LLC
21844 | 74.53.60.234 | US | http://www.setho-isintu.co.za/administrator/templates/bluestork/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
28753 | 89.149.209.146 | DE | http://www.sg-kundl.at/indx.php | LEASEWEB-DE Leaseweb Germany GmbH
12880 | 217.219.78.131 | IR | http://www.shohada-sq.ir/pnTemp/indx.php | DCI-AS Information Technology Company (ITC)
21155 | 77.94.249.186 | NL | http://www.smartsimplesites.nl/tandarts/administrator/templates/bluestork/indx.php | ASN-PROSERVE ProServe B.V.
41550 | 91.207.44.25 | UA | http://www.sportfood.com.ua/classes/indx.php | HBUA-AS HostBizUa network
46606 | 173.254.28.36 | US | http://www.srpskakruna.no/administrator/templates/bluestork/indx.php | BLUEHOST-AS-2 - Bluehost Inc.
31034 | 62.149.193.128 | IT | http://www.staminsrl.it/administrator/templates/bluestork/indx.php | ARUBA-ASN Aruba S.p.A.
36647 | 67.195.61.65 | US | http://www.steelcityrumble.com/wp-content/themes/toolbox/indx.php | YAHOO-GQ1 - Yahoo
10474 | 41.86.104.250 | ZA | http://www.student.copesa.org.za/administrator/templates/bluestork/indx.php | MWEB-10474
3595 | 65.254.54.218 | US | http://www.supsalud.gov.py/_vti_bin/indx.php | GNAXNET-AS - Global Net Access, LLC
25535 | 195.208.0.130 | RU | http://www.tabletka24.ru/products_files/indx.php | ASN-RUCENTER-HOSTING Autonomous Non-commercial Organization _Regional Network Information Center_
8560 | 212.227.193.85 | DE | http://www.test.skroblin.info/administrator/templates/bluestork/indx.php | ONEANDONE-AS 1&1 Internet AG
17393 | 64.8.122.50 | US | http://www.timothyemeryfitness.com/templates/beez/indx.php | TRIPNET-HOU - Trip.net, Inc.
8358 | 195.70.48.68 | HU | http://www.trusttronics.hu/administrator/templates/bluestork/indx.php | INTERWARE-AS GTS Hungary Tavkozlesi Ktf.
35908 | 174.139.132.100 | US | http://www.yh-jx.cn/images/indx.php | VPLSNET - Krypt Technologies
55298 | 183.90.187.238 | HK | http://www.ziaia.com/wp-content/themes/toolbox/indx.php | SPARK-3-NET-AS-AP Asia Data (Hong kong) Inc. Limited
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 20121008_1003UTC_new_tier1_asn.txt.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20121009/3f4bface/attachment-0001.sig>
More information about the nsp-security
mailing list