[nsp-sec] DDoS: Compromised web servers: 20121016
Nick Ianelli
ni at allyourinfoarebelongto.us
Tue Oct 16 08:57:57 EDT 2012
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
163 new compromised web servers. ASN information below.
Nick
- -------- Original Message --------
> Latest list of compromised web servers. They are absolutely killing
> vulnerable Joomla hosts.
>
> Been busy updating some of their scripts.
>
> stp.hp stcurl.php stmdu.php
>
> They also modified indx.php a bit:
>
> if ($_GET['action']=="status") { print "That is good"; exit(); }
>
>
> ****
>
> It should be noted that if you try and "GET" the indx.php without
> any parameters it will generate an error.
>
> Take a closer look at the 404 you are getting back, if you see the
> typo, the sites are still infected:
>
> "a 404 Not Foun derror was encountered'
>
> ****
>
> Nick
>
> -------- Original Message -------- Subject: DDoS: Compromised web
> servers (part 1) Date: Tue, 09 Oct 2012 02:51:33 +0000
>
> For those that haven't seen, tomorrow will kick off the
> continuation of DDoS attacks targeting various financial
> organizations. Current schedule:
>
> Capital One 20121009 Suntrust 20121010 Regions 20121011
>
> Attached are 160 new compromised web servers the malicious actors
> have added in the past 24 hours.
>
> ****
>
> It should be noted that if you try and "GET" the indx.php without
> any parameters it will generate an error.
>
> Take a closer look at the 404 you are getting back, if you see the
> typo, the sites are still infected:
>
> "a 404 Not Foun derror was encountered'
>
> ****
>
> Prior to distribution please remove any list or personally
> identifiable information from it.
>
>
> In addition to indx.php, the following files may exist in the same
> directory:
>
> stcp.php stip.php stph.php classtyle.php classtyle2.php
>
> The following URL discusses some of the issues at play here, but I
> don't believe all are Joomla compromises:
>
> http://forum.joomla.org/viewtopic.php?t=737503
>
> In working with your constituency, if you were able to obtain the
> files listed above (and any other files in the same directory) as
> well as any web access logs specific to the files listed above, I
> would be extremely interested and eternally grateful.
>
> Any questions, let me know.
>
>
> Here is a list of ASNs (by count) of what's in the attached file:
9 47583
9 36351
9 21844
7 24940
6 32392
5 26496
3 8560
3 21788
3 13768
2 9123
2 6939
2 45538
2 32613
2 32475
2 30496
2 29671
2 29073
2 23535
2 17660
2 16276
2 16265
2 131353
2 10297
1 9931
1 9583
1 8758
1 8612
1 8536
1 8342
1 8220
1 786
1 7303
1 6677
1 6648
1 58495
1 57010
1 55660
1 55449
1 5483
1 54641
1 5408
1 51559
1 51167
1 50109
1 4837
1 4812
1 4765
1 47544
1 4750
1 4739
1 46636
1 4538
1 45324
1 44553
1 44128
1 43773
1 42926
1 42807
1 41406
1 4134
1 40034
1 39729
1 38895
1 37963
1 35622
1 34788
1 34619
1 34011
1 33182
1 3292
1 3243
1 32244
1 31309
1 30475
1 30408
1 30058
1 29802
1 29278
1 27175
1 2716
1 26347
1 25532
1 2529
1 25074
1 24262
1 2200
1 21949
1 20857
1 20545
1 1930
1 18403
1 16509
1 15756
1 15685
1 15497
1 13618
1 13354
1 13335
1 13237
1 132241
1 13193
1 12129
1 11388
1 11042
Nick
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
iEYEARECAAYFAlB9WdUACgkQi10dJIBjZIAA3ACdEb/gMs6JJem3pe3al7LY8tgV
74cAoPDORs7OmFCCPRExse9rUbIfSShQ
=aFqx
-----END PGP SIGNATURE-----
-------------- next part --------------
13354 | 108.60.202.151 | US | http://108.60.202.151/kernancalendar//includes/indx.php | ASN-EBLGLOBAL - EBL Global Networks, Inc.
786 | 131.251.176.4 | GB | http://131.251.176.4/dani//components/com_oziogallery2/imagin/indx.php | JANET The JNT Association
1930 | 193.136.66.103 | PT | http://193.136.66.103/efrontecsb/www//content/editor_templates/indx.php | RCCN Rede Ciencia Tecnologia e Sociedade (RCTS)
3243 | 194.65.238.76 | PT | http://194.65.238.76/webcalendar//includes/indx.php | TELEPAC PT Comunicacoes, S.A.
2716 | 200.132.208.55 | BR | http://200.132.208.55/goal/templates/beez/indx.php | Universidade Federal do Rio Grande do Sul / Rede Tche
4538 | 202.112.3.193 | CN | http://202.112.3.193/jmi/templates/beez/indx.php | ERX-CERNET-BKB China Education and Research Network Center
17660 | 202.144.155.189 | BT | http://202.144.155.189/moodle/indx.php | DRUKNET-AS DrukNet ISP
17660 | 202.144.155.189 | BT | http://202.144.155.189/procurement/indx.php | DRUKNET-AS DrukNet ISP
4739 | 203.55.203.116 | AU | http://203.55.203.116/templates/beez/indx.php | INTERNODE-AS Internode Pty Ltd
26496 | 72.167.232.211 | US | http://3d-essinteriors.com/templates/beez/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
21844 | 74.55.97.180 | US | http://74.55.97.180/calvinc3/calendar//includes/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
9123 | 92.53.113.71 | RU | http://7films.net/404/indx.php | TIMEWEB-AS OOO TimeWeb
13193 | 80.248.208.241 | FR | http://80.248.208.241/ccpa.com/ftp/www/templates/beez/indx.php | ASN-NERIM Nerim SAS
16276 | 94.23.31.86 | FR | http://94.23.31.86/webcalendar//includes/indx.php | OVH OVH Systems
34619 | 94.73.158.101 | TR | http://94.73.158.101/lms/www//content/editor_templates/indx.php | CIZGI Cizgi Telekomunikasyon Hizmetleri Sanayi Ve Ticaret Limited Sirketi
47583 | 31.170.162.203 | US | http://aaocontenidos.site40.net/templates/beez/indx.php | HOSTING-MEDIA Hostinger International Limited
131353 | 103.28.36.101 | VN | http://abel-vn.com/templates/beez/indx.php | NHANHOA-AS-VN NhanHoa Software company
32392 | 76.162.180.2 | US | http://aboabdalladecoration.com/indx.php | OPENTRANSFER-ECOMMERCE - Ecommerce Corporation
32392 | 69.49.249.202 | US | http://abushadifamily.com/templates/beez/indx.php | OPENTRANSFER-ECOMMERCE - Ecommerce Corporation
29278 | 87.229.73.98 | HU | http://acnhun.hu/webcal//includes/indx.php | DENINET-HU-AS Deninet KFT
21844 | 74.53.234.146 | US | http://acpservicesltd.co.uk/servicecalender//includes/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
39729 | 81.88.48.95 | IT | http://actionpreventionsport.fr/indx.php | REGISTER-AS Register.IT S.p.A.
5408 | 195.251.123.232 | GR | http://aetos.it.teithe.gr/antcha/joomla/administrator/templates/bluestork/indx.php | GR-NET Greek Research & Technology Network, http://www.grnet.gr
47583 | 31.170.162.223 | US | http://aion-bmw.site90.com//components/com_oziogallery2/imagin/indx.php | HOSTING-MEDIA Hostinger International Limited
21844 | 174.132.149.251 | US | http://aleissadhurma.net//indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
47583 | 31.170.161.16 | US | http://alvindorks.hostoi.com/aspx//components/com_oziogallery2/imagin/indx.php | HOSTING-MEDIA Hostinger International Limited
132241 | 103.8.25.90 | MY | http://amana2u.biz/webstore//addons/lightbox/indx.php | SKSATECH1-MY SKSA TECHNOLOGY SDN BHD
13237 | 83.125.22.151 | EU | http://amigosdotennis.awardspace.com//indx.php | LAMBDANET-AS Lambdanet Communications Deutschland GmbH
29671 | 92.61.148.24 | EU | http://anathom.com//indx.php | SERVAGE Servage GmbH
15497 | 91.236.118.192 | UA | http://angeea.com/templates/atomic/indx.php | COLOCALL Internet Data Center _ColoCALL_
8342 | 81.177.139.72 | RU | http://anime-download.ru/indx.php | RTCOMM-AS OJSC RTComm.RU
8758 | 194.246.119.141 | CH | http://archiv.trisuisse.ch/indx.php | IWAY Iway AG
16265 | 85.17.227.34 | NL | http://arianweb.ir/_borders/indx.php | LEASEWEB LeaseWeb B.V.
15756 | 88.214.230.30 | GB | http://art-menu.by/administrator/templates/bluestork/indx.php | CARAVAN CJSC Caravan-Telecom
47583 | 31.170.163.10 | US | http://asgard.site90.net//addons/lightbox/indx.php | HOSTING-MEDIA Hostinger International Limited
24940 | 78.46.94.11 | DE | http://aspalluto.altervista.org//components/com_oziogallery2/imagin/indx.php | HETZNER-AS Hetzner Online AG RZ
8560 | 82.165.222.194 | DE | http://assoc.mygoodeal.com//components/com_oziogallery2/imagin/indx.php | ONEANDONE-AS 1&1 Internet AG
5483 | 84.2.39.142 | HU | http://autostation.ru/autosecret.ru/indx.php | HTC-AS Magyar Telekom plc.
55449 | 175.41.43.8 | AU | http://ayateppanyaki.com/templates/beez/indx.php | AUSWEBCOMAU-AS-AP AUSWEB.com.au Pty Ltd
54641 | 70.39.233.229 | US | http://azdtec.com/phpmyfaq/lang/indx.php | INMOTI-1 - InMotion Hosting, Inc.
51559 | 95.173.189.44 | TR | http://azerbaycanevi.com/indx.php | NETINTERNET Netinternet Bilgisayar ve Telekomunikasyon San. ve Tic. Ltd. Sti.
8612 | 82.85.124.130 | IT | http://aziendaagricolazuccarella.com//components/com_oziogallery2/imagin/indx.php | TISCALI-IT Tiscali Italia S.P.A.
30496 | 207.7.84.32 | US | http://b2bcolombia.com/lang/indx.php | COLO4 - Colo4, LLC
16265 | 217.19.1.14 | RO | http://bacauserbanesti.adventist.ro/administrator/templates/bluestork/indx.php | LEASEWEB LeaseWeb B.V.
42807 | 94.199.200.177 | TR | http://baliktutkunlari.net/indx.php | AEROTEK-AS Aerotek Bilisim Taahhut Sanayi ve Ticaret Limited Sirketi
4765 | 221.128.105.77 | TH | http://bankhaowong.com/templates/beez/indx.php | WORLDNET-AS World Net & Services Co., Ltd.
25074 | 87.119.194.135 | DE | http://barepeds.com//addons/lightbox/indx.php | MESH-AS MESH GmbH
4134 | 122.224.9.154 | CN | http://bbs.zjgsport.com/images/indx.php | CHINANET-BACKBONE No.31,Jin-rong Street
21949 | 206.223.176.51 | CA | http://beest10.ir/templates/pishkhan/indx.php | BEANFIELD - Beanfield Technologies Inc.
45538 | 112.78.2.11 | VN | http://benny.com.vn/images/indx.php | ODS-AS-VN Online data services
36351 | 67.228.248.34 | US | http://bequel.net/templates/beez/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
34788 | 85.13.146.139 | DE | http://beratungforcher.at/administrator/templates/bluestork/indx.php | NMM-AS Neue Medien Muennich GmbH
32475 | 184.154.217.250 | US | http://bikeandscooter.in/index/administrator/templates/bluestork/indx.php | SINGLEHOP-INC - SingleHop
21788 | 184.82.244.150 | US | http://blackpanther.co.in/installation/indx.php | NOC - Network Operations Center Inc.
13768 | 72.51.41.86 | US | http://blinesecurity.skillspark.net//content/editor_templates/indx.php | PEER1 - Peer 1 Network Inc.
13768 | 72.51.41.86 | US | http://blinetp.skillspark.net//content/editor_templates/indx.php | PEER1 - Peer 1 Network Inc.
30058 | 208.53.158.25 | US | http://blog.porntubehunters.com//wp-content/plugins/P_music_player/indx.php | FDCSERVERS - FDCservers.net
27175 | 74.219.100.128 | US | http://bluepencilsales.com/albrecht.com/templates/beez/indx.php | ATNETHOST-AS02 - AtNetHost LLC
32392 | 98.130.194.204 | US | http://demozonline.com/trailersweek/templates/beez/indx.php | OPENTRANSFER-ECOMMERCE - Ecommerce Corporation
12129 | 216.119.134.194 | US | http://descansojunction.com/WebCalendar//includes/indx.php | 123NET - 123.Net, Inc.
34011 | 80.67.17.252 | DE | http://dev.tus-ffb-handball.de/calendar//includes/indx.php | DOMAINFACTORY domainfactory GmbH
2529 | 195.11.220.185 | GB | http://ding.chemdry.co.uk/efront/www//content/editor_templates/indx.php | DEMON-INTERNET Now maintained by Cable & Wireless Worldwide
44553 | 87.239.158.52 | BG | http://display.electroninvest.com/templates/beez/indx.php | SNS-BG-AS Smart Network Solutions Ltd.
21844 | 174.120.148.157 | US | http://distnc.com//components/com_oziogallery2/imagin/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
46636 | 91.223.216.68 | UA | http://dotalike.yomu.ru/indx.php | NATCOWEB - NatCoWeb Corp.
10297 | 209.190.85.145 | US | http://duckster.phpnet.us//addons/lightbox/indx.php | ENET-2 - eNET Inc.
9931 | 61.19.251.181 | TH | http://easetrack.com/cache/indx.php | CAT-AP The Communication Authoity of Thailand, CAT
21844 | 174.121.47.75 | US | http://eatsrice.com/forums/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
38895 | 122.248.251.230 | SG | http://ec2-122-248-251-230.ap-southeast-1.compute.amazonaws.com/www//content/editor_templates/indx.php | AMAZON-AS-AP Amazon.com Tech Telecom
6939 | 173.255.223.209 | US | http://edgeta.com/indx.php | HURRICANE - Hurricane Electric, Inc.
6939 | 173.255.223.209 | US | http://edgeta.com/machform/data/form_2/indx.php | HURRICANE - Hurricane Electric, Inc.
25532 | 90.156.201.104 | RU | http://edu.nlp-ufa.ru/www//content/editor_templates/indx.php | MASTERHOST-AS .masterhost autonomous system
21844 | 74.52.179.82 | US | http://edu.zmajsoft.com/www//content/editor_templates/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
36351 | 216.172.167.44 | US | http://eeonm.com/calendar//includes/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
26496 | 97.74.215.186 | US | http://efront.mybandisthebest.com//content/editor_templates/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
44128 | 91.201.52.17 | RU | http://ekbles.ru/templates/beez/indx.php | INTERNET-PRO-AS Internet-Pro Ltd
6648 | 202.78.84.61 | PH | http://elearning.jblfmu.edu.ph/www//content/editor_templates/indx.php | BAYAN-TELECOMMUNICATIONS Bayan Telecommunications, Inc.
32392 | 76.162.180.2 | US | http://elkafrawygroup.com/indx.php | OPENTRANSFER-ECOMMERCE - Ecommerce Corporation
9123 | 176.57.216.2 | RU | http://emotion.fortunna.ru/administrator/templates/bluestork/indx.php | TIMEWEB-AS OOO TimeWeb
47583 | 31.170.162.103 | US | http://enchenu.net78.net/templates/beez/indx.php | HOSTING-MEDIA Hostinger International Limited
47583 | 31.170.161.36 | US | http://enex.hostzi.com//addons/lightbox/indx.php | HOSTING-MEDIA Hostinger International Limited
11042 | 69.73.140.238 | US | http://envapacksrl.com//components/com_oziogallery2/imagin/indx.php | LANDIS-HOLDINGS-INC - Landis Holdings Inc
36351 | 208.43.79.203 | US | http://environicsindia.in/administrator/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
29073 | 80.82.70.124 | NL | http://envyclan.com/forums/indx.php | ECATEL-AS AS29073, Ecatel Network
26347 | 64.90.44.18 | US | http://espacoorganicograodavida.com.br/cache/indx.php | DREAMHOST-AS - New Dream Network, LLC
3292 | 195.41.131.88 | DK | http://euro-conclave.fffd.dk/administrator/templates/bluestork/indx.php | TDC TDC Data Networks
4837 | 60.29.57.53 | CN | http://e.u-training.com/www//content/editor_templates/indx.php | CHINA169-BACKBONE CNCGROUP China169 Backbone
21788 | 108.175.157.3 | US | http://evans-web.net/orear//indx.php | NOC - Network Operations Center Inc.
47583 | 31.170.161.196 | US | http://eveshop.vacau.com//addons/lightbox/indx.php | HOSTING-MEDIA Hostinger International Limited
50109 | 195.16.88.141 | UA | http://exclusive-realgold.com/plugins/system/indx.php | HOSTLIFE-AS WIBO PROJECT LLC
32613 | 67.205.103.140 | CA | http://fad-sy.com/templates/beez/indx.php | IWEB-AS - iWeb Technologies Inc.
26496 | 72.167.2.1 | US | http://famdamily.me//indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
20857 | 95.170.72.175 | NL | http://familie-winsser.nl/agenda//includes/indx.php | TRANSIP-AS TransIP B.V.
24262 | 202.122.143.70 | JP | http://faq.iliics.com/admin/editor/plugins/ajaxfilemanager/inc/indx.php | HICOM HAMANASU INFORMATION Co., Ltd.
36351 | 50.22.37.201 | US | http://fiskbarretos.com.br/calen//includes/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
8560 | 82.165.58.188 | DE | http://fokus-bad-aibling.de/plugins/system/indx.php | ONEANDONE-AS 1&1 Internet AG
24940 | 46.4.108.38 | DE | http://foodbaran.com/admin/includes/indx.php | HETZNER-AS Hetzner Online AG RZ
2200 | 195.98.240.57 | FR | http://formation-balzac.scola.ac-paris.fr/www//content/editor_templates/indx.php | FR-RENATER Reseau National de telecommunications pour la Technologie
32613 | 70.38.123.168 | CA | http://formationnorbord.com/www//content/editor_templates/indx.php | IWEB-AS - iWeb Technologies Inc.
7303 | 200.43.192.39 | AR | http://foros.riverplate.com/indx.php | Telecom Argentina S.A.
24940 | 88.198.134.118 | DE | http://forum.asianwiki.ir/indx.php | HETZNER-AS Hetzner Online AG RZ
8536 | 212.52.166.119 | HU | http://forum.bikemag.hu/indx.php | ASN-QWERTYNET QwertyNet - Public Internet Access Provider
35622 | 89.38.207.234 | RO | http://forum.danstomatologie.ro/indx.php | XPLOR-AS Xplor Network SRL
31309 | 91.193.43.12 | BE | http://forum.demotorsite.be/indx.php | NMV-AS New Media Ventures BVBA
26496 | 173.201.0.1 | US | http://forum.desitag.com/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
42926 | 46.45.187.220 | TR | http://forum.kfy96.com/indx.php | RADORE Radore Hosting Telekomunikasyon Hizmetleri San. ve Tic. Ltd. Sti.
47544 | 86.111.241.39 | PL | http://forum.przygodowki.pl/indx.php | IQPL-AS IQ PL Sp. z o.o.
36351 | 184.173.206.193 | US | http://forum.psoul.net/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
36351 | 184.173.2.149 | US | http://forums.blurbpoint.com/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
13618 | 174.34.227.220 | US | http://forums.cloobit.ir/indx.php | CARONET-ASN - Carolina Internet, Ltd.
29073 | 80.82.70.124 | NL | http://forums.envyclan.com/indx.php | ECATEL-AS AS29073, Ecatel Network
8220 | 62.85.169.194 | IT | http://forum.slidetomac.com/indx.php | COLT COLT Technology Services Group Limited
21844 | 174.120.128.99 | US | http://forums.shayarihindi.com/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
11388 | 216.65.3.78 | US | http://fototecasanagustindelascuevas.com//components/com_oziogallery2/imagin/indx.php | MAXIM - Peer 1 Dedicated Hosting
32392 | 50.118.57.208 | US | http://freci.com/libraries/phpmailer/language/indx.php | OPENTRANSFER-ECOMMERCE - Ecommerce Corporation
6677 | 157.157.173.73 | IS | http://galdrasyning.is/administrator/indx.php | ICENET-AS1 Siminn hf
47583 | 31.170.160.129 | US | http://game-shop.netau.net//addons/lightbox/indx.php | HOSTING-MEDIA Hostinger International Limited
57010 | 62.76.184.169 | RU | http://gazautomatic.ru/templates/beez/indx.php | CLODO-AS IT House Ltd.
55660 | 49.50.8.91 | ID | http://gbiholyspirit.com//components/com_oziogallery2/imagin/indx.php | MWN-AS-ID PT Master Web Network
58495 | 103.9.126.163 | ID | http://ghazaliakbar.bitnet.web.id/administrator/templates/bluestork/indx.php | HSPNET-AS-ID PT Parsaoran Global Datatrans
23535 | 216.120.237.40 | US | http://ghbcakron.org/calendar//includes/indx.php | HOSTROCKET - HostRocket
24940 | 176.9.52.231 | DE | http://gigan.bplaced.net/WebCalendar//includes/indx.php | HETZNER-AS Hetzner Online AG RZ
131353 | 103.28.36.11 | VN | http://goldenwave.vn/templates/beez/indx.php | NHANHOA-AS-VN NhanHoa Software company
37963 | 112.127.135.187 | CN | http://goocomm.com/templates/beez/indx.php | CNNIC-ALIBABA-CN-NET-AP Alibaba (China) Technology Co., Ltd.
16509 | 50.18.115.44 | US | http://granddaddypurp.com/forum/indx.php | AMAZON-02 - Amazon.com, Inc.
32392 | 173.83.167.2 | US | http://grandelve.com/templates/beez/indx.php | OPENTRANSFER-ECOMMERCE - Ecommerce Corporation
21844 | 74.52.116.163 | US | http://grapevinecc.com/events//includes/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
32475 | 184.154.49.74 | US | http://grenique.com//wp-content/plugins/P_music_player/indx.php | SINGLEHOP-INC - SingleHop
51167 | 177.85.96.95 | BR | http://grupedh.com.br//components/com_oziogallery2/imagin/indx.php | GIGA-HOSTING Giga-Hosting GmbH
33182 | 199.168.185.13 | US | http://hadikhoshdel.com/templates/beez/indx.php | DIMENOC - HostDime.com, Inc.
23535 | 66.147.230.20 | US | http://halterfamily.com/familyconnection//indx.php | HOSTROCKET - HostRocket
24940 | 5.9.22.233 | DE | http://hazermakina.com.tr/wp-content/themes/twentyten/indx.php | HETZNER-AS Hetzner Online AG RZ
15685 | 109.123.209.236 | CZ | http://hbkuzelky.cz/kalendar//includes/indx.php | CASABLANCA-AS Casablanca INT Autonomous system
36351 | 5.10.65.244 | NL | http://hdarsivi.com/admincp/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
13335 | 108.162.192.67 | US | http://highlandtravels.com/templates/beez/indx.php | CLOUDFLARENET - CloudFlare, Inc.
18403 | 210.245.121.70 | VN | http://hi-mobile.buyer.vn/templates/beez/indx.php | FPT-AS-AP The Corporation for Financing & Promoting Technology
24940 | 176.9.247.82 | DE | http://hi.rs/administrator/templates/bluestork/indx.php | HETZNER-AS Hetzner Online AG RZ
9583 | 210.18.113.115 | IN | http://hlogos.com/www//content/editor_templates/indx.php | SIFY-AS-IN Sify Limited
47583 | 31.170.162.243 | US | http://hmonglaos.site50.net/templates/beez/indx.php | HOSTING-MEDIA Hostinger International Limited
24940 | 46.4.105.172 | DE | http://hotel-bialka.enoclegi-koscielisko.pl/administrator/templates/bluestork/indx.php | HETZNER-AS Hetzner Online AG RZ
36351 | 50.22.197.72 | US | http://houseofbooks.ly/images/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
20545 | 217.147.232.66 | GE | http://hps.hpep.ge/administrator/indx.php | GRENA-AS GRENA Autonomous System
30475 | 72.18.142.18 | US | http://html5codeexample.com/plugins/system/indx.php | WEHOSTSITESCOM - WeHostWebSites.com
45538 | 112.78.2.180 | VN | http://hunglcd.com/administrator/indx.php | ODS-AS-VN Online data services
41406 | 194.9.24.158 | PL | http://hurt-pol.prv.pl/addons/tinymce/jscripts/tiny_mce/plugins/ajaxfilemanager/inc/indx.php | CRMEDIA-AS CR Media S.A.
4812 | 114.80.209.195 | CN | http://hztaoche.com/10-20/indx.php | CHINANET-SH-AP China Telecom (Group)
21788 | 64.120.183.245 | US | http://ibiapabapc.co.cc/administrator/templates/bluestork/indx.php | NOC - Network Operations Center Inc.
16276 | 91.121.36.187 | FR | http://ichaa-aglou.com//components/com_oziogallery2/imagin/indx.php | OVH OVH Systems
29802 | 66.232.112.188 | US | http://iforum.com.br/indx.php | HVC-AS - HIVELOCITY VENTURES CORP
40034 | 208.91.199.18 | VG | http://ijppronline.com/templates/beez/indx.php | CONFLUENCE-NETWORK-INC - Confluence Networks Inc
13768 | 76.74.128.50 | US | http://ikdmanitoba.com/calendar//includes/indx.php | PEER1 - Peer 1 Network Inc.
10297 | 209.190.85.9 | US | http://imperiogamers.zobyhost.com/indx.php | ENET-2 - eNET Inc.
43773 | 91.200.40.3 | UA | http://import-brand.com.ua/images/indx.php | HVOSTING-AS PE Konstantin Vladimirovich Kravchenko
36351 | 50.22.198.37 | US | http://india4wheelers.com/templates/beez/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
45324 | 202.52.146.37 | ID | http://indosport.co.id/administrator/templates/bluestork/indx.php | GMEDIA-AS-ID Global Media Teknologi, PT
21844 | 69.93.206.75 | US | http://infobotique.com/WebCalendar//includes/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
4750 | 58.137.42.5 | TH | http://intranet.kbs.co.th/efront/www//content/editor_templates/indx.php | CSLOXINFO-AS-AP CS LOXINFO PUBLIC COMPANY LIMITED
26496 | 118.139.170.1 | SG | http://ipointenergy.com/templates/beez5/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
30496 | 199.26.84.23 | US | http://irankaryab.com/indx.php | COLO4 - Colo4, LLC
8560 | 74.208.204.156 | US | http://issuefreedom.co/administrator/templates/bluestork/indx.php | ONEANDONE-AS 1&1 Internet AG
29671 | 92.61.148.84 | EU | http://itopart.com/saleh/templates/beez/indx.php | SERVAGE Servage GmbH
30408 | 147.97.50.67 | US | http://ittc-web.astate.edu/faq/admin/editor/plugins/ajaxfilemanager/inc/indx.php | ASUNET - Arkansas State University
32244 | 50.28.57.65 | US | http://jackieevanchos.org/indx.php | LIQUID-WEB-INC - Liquid Web, Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 20121016_1225UTC_new_tier1_asn.txt.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20121016/2cbeb21d/attachment-0001.sig>
More information about the nsp-security
mailing list