[nsp-sec] DDoS: Compromised web servers: 20121016 - Round #2
Nick Ianelli
ni at allyourinfoarebelongto.us
Tue Oct 16 14:50:32 EDT 2012
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
143 new compromised web servers for today.
Nick
On 10/16/2012 12:57 PM, Nick Ianelli wrote:
> ----------- nsp-security Confidential -------- 163 new compromised
> web servers. ASN information below.
>
> Nick
>
>
> -------- Original Message --------
>
>> Latest list of compromised web servers. They are absolutely
>> killing vulnerable Joomla hosts.
>
>> Been busy updating some of their scripts.
>
>> stp.hp stcurl.php stmdu.php
>
>> They also modified indx.php a bit:
>
>> if ($_GET['action']=="status") { print "That is good"; exit(); }
>
>
>> ****
>
>> It should be noted that if you try and "GET" the indx.php without
>> any parameters it will generate an error.
>
>> Take a closer look at the 404 you are getting back, if you see
>> the typo, the sites are still infected:
>
>> "a 404 Not Foun derror was encountered'
>
>> ****
>
>> Nick
>
>> -------- Original Message -------- Subject: DDoS: Compromised web
>> servers (part 1) Date: Tue, 09 Oct 2012 02:51:33 +0000
>
>> For those that haven't seen, tomorrow will kick off the
>> continuation of DDoS attacks targeting various financial
>> organizations. Current schedule:
>
>> Capital One 20121009 Suntrust 20121010 Regions 20121011
>
>> Attached are 160 new compromised web servers the malicious actors
>> have added in the past 24 hours.
>
>> ****
>
>> It should be noted that if you try and "GET" the indx.php without
>> any parameters it will generate an error.
>
>> Take a closer look at the 404 you are getting back, if you see
>> the typo, the sites are still infected:
>
>> "a 404 Not Foun derror was encountered'
>
>> ****
>
>> Prior to distribution please remove any list or personally
>> identifiable information from it.
>
>
>> In addition to indx.php, the following files may exist in the
>> same directory:
>
>> stcp.php stip.php stph.php classtyle.php classtyle2.php
>
>> The following URL discusses some of the issues at play here, but
>> I don't believe all are Joomla compromises:
>
>> http://forum.joomla.org/viewtopic.php?t=737503
>
>> In working with your constituency, if you were able to obtain the
>> files listed above (and any other files in the same directory)
>> as well as any web access logs specific to the files listed
>> above, I would be extremely interested and eternally grateful.
>
>> Any questions, let me know.
>
>
>> Here is a list of ASNs (by count) of what's in the attached
>> file:
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
iEYEARECAAYFAlB9rHgACgkQi10dJIBjZIDIogCg8WSGktgor2LZy2fhBzGjWnfD
V+IAoPsGvYpeLvTSN4AAqesF0iHgfy+a
=mwyr
-----END PGP SIGNATURE-----
-------------- next part --------------
198414 | 91.228.197.84 | PL | http://club-song.pl/indx.php | BIZNESHOST-AS Biznes-Host.pl sp. z o.o.
11664 | 190.220.145.130 | AR | http://190.220.145.130/EstudiandoMatematicas/templates/beez/indx.php | Techtel LMDS Comunicaciones Interactivas S.A.
55684 | 203.6.149.74 | ID | http://203.6.149.74/www//content/editor_templates/indx.php | UNS-AS-ID Universitas Sebelas Maret
31727 | 89.248.60.40 | GB | http://5052.co.uk/1fsb.co.uk/administrator/templates/bluestork/indx.php | NODE4-AS Node4 Ltd, UK
21844 | 74.55.97.180 | US | http://74.55.97.180/calvinc3/calendar//includes/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
39729 | 81.88.48.79 | IT | http://adecuasa.com/xmlrpc/cache/indx.php | REGISTER-AS Register.IT S.p.A.
39729 | 81.88.48.79 | IT | http://adecuasa.com/xmlrpc/indx.php | REGISTER-AS Register.IT S.p.A.
5408 | 195.251.123.232 | GR | http://aetos.it.teithe.gr/antcha/joomla/administrator/templates/bluestork/indx.php | GR-NET Greek Research & Technology Network, http://www.grnet.gr
12322 | 212.27.63.129 | FR | http://angiejolie.free.fr/php/templates/beez/indx.php | PROXAD Free SAS
21788 | 184.82.244.150 | US | http://blackpanther.co.in/installation/indx.php | NOC - Network Operations Center Inc.
2914 | 198.63.35.239 | US | http://bowlinesecurity.com/eLearn/www//content/editor_templates/indx.php | NTT-COMMUNICATIONS-2914 - NTT America, Inc.
21844 | 174.120.146.106 | US | http://brockportfire.org/van//includes/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
32475 | 69.175.67.106 | US | http://brumadinhoparajesus.com.br/administrator/templates/bluestork/indx.php | SINGLEHOP-INC - SingleHop
21844 | 174.122.47.53 | US | http://buckheimer.com/templates/beez/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
13768 | 72.51.41.86 | US | http://cala.skillspark.net//content/editor_templates/indx.php | PEER1 - Peer 1 Network Inc.
29873 | 65.254.250.109 | US | http://calendar.mack4.com//includes/indx.php | BIZLAND-SD - The Endurance International Group, Inc.
13826 | 199.68.176.91 | CA | http://can.systemsinteractive.ca/www//content/editor_templates/indx.php | YYZ001 - DATA CENTERS CANADA INC.
36351 | 174.36.194.176 | US | http://careministry.co.in/administrator/templates/bluestork/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
25767 | 208.76.80.173 | US | http://carlstadtfd.org/calendar//includes/indx.php | WAVEFORM - Waveform Technology, LLC
8972 | 85.25.246.136 | DE | http://ccpd.ngo.ug/images/indx.php | PLUSSERVER-AS intergenia AG
8262 | 91.196.125.42 | BG | http://cdmsystems.eu/templates/beez/indx.php | LIREXNET-AS Lirex net EOOD
26496 | 184.168.137.1 | US | http://certifiedent.net/Home/templates/beez/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
42910 | 31.210.49.11 | TR | http://cevirgelduasi.com/indx.php | SADECEHOSTING-COM Hosting Internet Hizmetleri Ltd Sti
56067 | 119.59.120.10 | TH | http://chaiwatdiesel.com//components/com_oziogallery2/imagin/indx.php | METRABYTE-TH 453 Ladplacout Jorakhaebua
7470 | 119.46.91.198 | TH | http://chaiyaphum.dlt.go.th/cache/indx.php | TRUEINTERNET-AS-AP TRUE INTERNET Co.,Ltd.
47583 | 31.170.161.76 | US | http://chili.webatu.com//addons/lightbox/indx.php | HOSTING-MEDIA Hostinger International Limited
8560 | 87.106.140.187 | DE | http://chocolaterie-patisserie-bouche.com/media/indx.php | ONEANDONE-AS 1&1 Internet AG
9931 | 122.155.13.123 | TH | http://chonqm.org/templates/beez/indx.php | CAT-AP The Communication Authoity of Thailand, CAT
47583 | 31.170.162.43 | US | http://clubccna.comule.com/www//content/editor_templates/indx.php | HOSTING-MEDIA Hostinger International Limited
198414 | 91.228.197.84 | PL | http://club-song.pl/indx.php | BIZNESHOST-AS Biznes-Host.pl sp. z o.o.
4837 | 116.255.246.177 | CN | http://cntsov.com/indx.php | CHINA169-BACKBONE CNCGROUP China169 Backbone
37943 | 116.255.246.177 | CN | http://cntsov.com/indx.php | CNNIC-GIANT ZhengZhou GIANT Computer Network Technology Co., Ltd
29550 | 92.48.97.5 | GB | http://coderzrealm.com/_vti_bin/indx.php | SIMPLYTRANSIT Simply Transit Ltd
32244 | 69.167.162.69 | US | http://colegiollinyoliztli.com/templates/beez/indx.php | LIQUID-WEB-INC - Liquid Web, Inc.
8315 | 91.200.51.134 | NL | http://colegiomantellate.es/Construccion_archivos/indx.php | ARGEWEB-AS Amsio B.V.
26496 | 184.168.184.1 | US | http://combatarmsforum.com/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
26347 | 64.90.51.2 | US | http://condominiobaraodeiguape.com.br/cache/indx.php | DREAMHOST-AS - New Dream Network, LLC
26347 | 64.90.51.2 | US | http://condominiobaraodeiguape.com.br/components/indx.php | DREAMHOST-AS - New Dream Network, LLC
21844 | 174.120.117.93 | US | http://conversati-om.com//indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
26347 | 69.163.167.160 | US | http://cosmoshealth.org/administrator/templates/bluestork/indx.php | DREAMHOST-AS - New Dream Network, LLC
197155 | 37.28.153.83 | PL | http://co-za.info.pl/administrator/templates/bluestork/indx.php | ARTNET Artnet Spolka z ograniczona odpowiedzialnoscia
4837 | 116.255.131.226 | CN | http://cvb123.cn/12tg/indx.php | CHINA169-BACKBONE CNCGROUP China169 Backbone
37943 | 116.255.131.226 | CN | http://cvb123.cn/12tg/indx.php | CNNIC-GIANT ZhengZhou GIANT Computer Network Technology Co., Ltd
4837 | 116.255.131.226 | CN | http://cvb123.cn/YX/indx.php | CHINA169-BACKBONE CNCGROUP China169 Backbone
37943 | 116.255.131.226 | CN | http://cvb123.cn/YX/indx.php | CNNIC-GIANT ZhengZhou GIANT Computer Network Technology Co., Ltd
11042 | 69.73.173.242 | US | http://danforth.com.my//components/com_oziogallery2/imagin/indx.php | LANDIS-HOLDINGS-INC - Landis Holdings Inc
197902 | 91.184.19.70 | NL | http://danspoppelaars.nl/administrator/templates/bluestork/indx.php | HOSTNET Hostnet B.V.
24940 | 178.63.47.210 | DE | http://danzarteis.altervista.org//components/com_oziogallery2/imagin/indx.php | HETZNER-AS Hetzner Online AG RZ
30058 | 208.53.168.5 | US | http://dariroevents.com/events//includes/indx.php | FDCSERVERS - FDCservers.net
23352 | 64.202.120.73 | US | http://darrehsaz.com/tmp/indx.php | SERVERCENTRAL - Server Central Network
29944 | 74.209.213.5 | US | http://dbasemanagement.com/PerchezCalendar//includes/indx.php | LATISYS-ASHBURN - Latisys-Ashburn, LLC
47242 | 81.31.145.73 | IT | http://dcmc.it/administrator/templates/bluestork/indx.php | COLTENGINE COLT Engine S.r.l.
26347 | 173.236.224.169 | US | http://delekgre.com/images/stories//indx.php | DREAMHOST-AS - New Dream Network, LLC
26347 | 173.236.224.169 | US | http://delekgre.com/images/stories/indx.php | DREAMHOST-AS - New Dream Network, LLC
8972 | 217.118.24.189 | DE | http://demo1.pieria-its.gr/images/indx.php | PLUSSERVER-AS intergenia AG
29550 | 213.229.71.224 | GB | http://demo2.phase-broadcast.co.uk/wp-admin/indx.php | SIMPLYTRANSIT Simply Transit Ltd
14280 | 64.40.101.137 | CA | http://demo31.abcguide.com//content/editor_templates/indx.php | NETNATION-NETWORK NetNation Communications Inc.
8426 | 95.172.4.2 | GB | http://efront.vertischool.eu//content/editor_templates/indx.php | CLARANET-AS ClaraNET LTD
55684 | 203.6.149.74 | ID | http://elearning.fe.uns.ac.id/www//content/editor_templates/indx.php | UNS-AS-ID Universitas Sebelas Maret
49699 | 91.215.216.12 | BG | http://evtimova.com/kalend//includes/indx.php | ICN-BG Internet Corporated Networks Ltd.
16265 | 95.211.81.194 | NL | http://ganalihelme.fi/tapahtumakalenteri//includes/indx.php | LEASEWEB LeaseWeb B.V.
39729 | 81.88.48.97 | IT | http://gestao-de-conteudos.psigest.com/indx.php | REGISTER-AS Register.IT S.p.A.
9931 | 61.19.248.174 | TH | http://gifti.co.th/web/templates/beez/indx.php | CAT-AP The Communication Authoity of Thailand, CAT
31727 | 89.248.60.100 | GB | http://havenhealthcare.co.uk/documents/indx.php | NODE4-AS Node4 Ltd, UK
26496 | 184.168.42.1 | US | http://heartbeatrun.ca/administrator/templates/bluestork/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
4812 | 114.80.209.195 | CN | http://hztaoche.com/10-20/indx.php | CHINANET-SH-AP China Telecom (Group)
5602 | 46.252.158.60 | IT | http://inginius.it/www/administrator/templates/bluestork/indx.php | KPNQwest Italia S.p.a
39729 | 81.88.48.97 | IT | http://itapa.psicologiaveiro.pt/templates/beez/indx.php | REGISTER-AS Register.IT S.p.A.
17971 | 202.71.109.43 | MY | http://jpnns.gov.my/takwim//includes/indx.php | TMVADS-AP TM-VADS DC Hosting
46015 | 110.4.45.105 | MY | http://kennysmagic.com/indx.php | EXABYTES-AS-AP Exa Bytes Network Sdn.Bhd.
21844 | 174.122.46.156 | US | http://kiams.ac.in/alumni/templates/beez/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
47385 | 79.174.72.136 | RU | http://lakloba.ru//addons/lightbox/indx.php | HOSTING-COMPANY-AS Hosting Company, RBC
26347 | 69.163.140.226 | US | http://obeikan.tasawr.org/templates/beez/indx.php | DREAMHOST-AS - New Dream Network, LLC
25780 | 199.241.145.139 | US | http://parsian-dej.com/templates/beez/indx.php | HUGESERVER-NETWORKS - HugeServer Networks, LLC
42005 | 92.240.253.14 | SK | http://predaj.astropresov.sk//addons/lightbox/indx.php | LIGHTSTORM-COMMUNICATIONS-SRO-SK-AS LightStorm Communications s.r.o.
36351 | 50.116.66.238 | US | http://reddengreen.com//wp-content/plugins/P_music_player/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
39729 | 195.110.124.133 | IT | http://sestofitness.it/plugins/system/indx.php | REGISTER-AS Register.IT S.p.A.
29873 | 65.254.250.108 | US | http://siteconcealment.com/templates/beez/indx.php | BIZLAND-SD - The Endurance International Group, Inc.
4250 | 64.40.151.128 | US | http://stjosephcctx.org/webcalendar//includes/indx.php | ALENT-ASN-1 - Alentus Corporation
26496 | 182.50.135.128 | SG | http://www.thefrs.net/lms/www//content/editor_templates/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
20202 | 208.76.246.66 | US | http://www.the-gateway.org/test/joomla1/templates/beez/indx.php | CRUCIAL - Crucial Paradigm
17139 | 205.134.252.244 | US | http://www.theictteacher.com/bijou//components/com_oziogallery2/imagin/indx.php | CORPCOLO - Corporate Colocation Inc.
24940 | 176.9.42.76 | DE | http://www.themistokles.gr//components/com_oziogallery2/imagin/indx.php | HETZNER-AS Hetzner Online AG RZ
31034 | 62.149.140.200 | IT | http://www.the-overclock-hole.it/forum/indx.php | ARUBA-ASN Aruba S.p.A.
24940 | 178.63.47.210 | DE | http://www.thepeppiniello.altervista.org//components/com_oziogallery2/imagin/indx.php | HETZNER-AS Hetzner Online AG RZ
32613 | 72.55.186.17 | CA | http://www.thundra.ca/j161/administrator/templates/bluestork/indx.php | IWEB-AS - iWeb Technologies Inc.
51468 | 193.202.110.109 | DK | http://www.tielensefeesten.be/templates/beez5/indx.php | ONECOM One.com A/S
13768 | 76.74.247.97 | US | http://www.topmar.com/components/com_smartformer/files/indx.php | PEER1 - Peer 1 Network Inc.
39391 | 89.33.190.55 | RO | http://www.topm.ro/indx.php | SANOS-AS SANOS CONSULTING INTERNATIONAL SRL
39234 | 87.238.162.16 | BE | http://www.trainyourdream.com/webcalendar//includes/indx.php | STONE-IS Stone Internet Services bvba
50482 | 212.154.192.164 | KZ | http://www.trans-azia.kz/libraries/phpmailer/language/indx.php | KAZAKHTELECOM-AS JSC Kazakhtelecom
8560 | 87.106.49.60 | DE | http://www.ttfuz.de/webcal//includes/indx.php | ONEANDONE-AS 1&1 Internet AG
33668 | 173.162.37.67 | US | http://www.tupelobusinesscenter.com/admin/Modules/indx.php | CMCS - Comcast Cable Communications, Inc.
42807 | 94.199.200.177 | TR | http://www.turkiyebalikcilari.com/indx.php | AEROTEK-AS Aerotek Bilisim Taahhut Sanayi ve Ticaret Limited Sirketi
34788 | 85.13.146.76 | DE | http://www.tvg-handball.de/web30/templates/beez/indx.php | NMM-AS Neue Medien Muennich GmbH
4788 | 58.27.56.239 | MY | http://www.txt-earnestel.com/cyberview/templates/beez/indx.php | TMNET-AS-AP TM Net, Internet Service Provider
20738 | 94.136.40.103 | GB | http://www.ty-melyn.co.uk/calendar//includes/indx.php | AS20738 Webfusion Internet Solutions
7393 | 184.175.123.49 | US | http://www.uae4mall.com/templates/beez/indx.php | CYBERCON - CYBERCON, INC.
13041 | 161.116.100.2 | ES | http://www.ub.edu/mars/templates/beez/indx.php | CESCA-AC CESCA - Anella Cientifica RREN Autonomous System
21069 | 80.74.149.42 | CH | http://www.ufkv.ch/webcalendar//includes/indx.php | ASN-METANET METANET AG, Switzerland
6730 | 195.141.28.51 | CH | http://www.umv.ch/administrator/templates/bluestork/indx.php | SUNRISE Sunrise Communications AG
12310 | 89.149.33.65 | RO | http://www.urbansa.ro/components/com_smartformer/files/indx.php | INES iNES Group SRL
16265 | 95.211.122.203 | NL | http://www.valers.nl/administrator/templates/bluestork/indx.php | LEASEWEB LeaseWeb B.V.
8342 | 81.177.139.175 | RU | http://www.vasdiplom.ru/components/com_smartformer/files/indx.php | RTCOMM-AS OJSC RTComm.RU
33790 | 196.216.20.9 | ZA | http://www.vbkom.co.za/consulting/templates/beez/indx.php | MEXCOM-AS
16276 | 213.186.33.17 | FR | http://www.verifi.fr/components/com_smartformer/files/indx.php | OVH OVH Systems
29141 | 80.83.119.250 | DE | http://www.vibeacademia.com.br/components/com_smartformer/files/indx.php | BKVG-AS Bradler & Krantz GmbH & Co. KG
18403 | 118.69.206.77 | VN | http://www.viet-export.com/templates/beez/indx.php | FPT-AS-AP The Corporation for Financing & Promoting Technology
36351 | 184.172.145.117 | US | http://www.villenissan.com.br/components/com_smartformer/files/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
6245 | 206.188.192.111 | US | http://www.virginiateacheronline.com/calendar//includes/indx.php | NETWORK-SOLUTIONS - InterNIC Registration Services
36351 | 96.125.167.82 | US | http://www.vithoriahelena.com.br/components/com_smartformer/files/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
7643 | 123.30.109.6 | VN | http://www.vts.net.vn/templates/beez/indx.php | VNPT-AS-VN Vietnam Posts and Telecommunications (VNPT)
56067 | 119.59.120.2 | TH | http://www.watnonglee.com//components/com_oziogallery2/imagin/indx.php | METRABYTE-TH 453 Ladplacout Jorakhaebua
33070 | 98.129.229.225 | US | http://www.whatistesting.com/webcalendar//includes/indx.php | RMH-14 - Rackspace Hosting
8622 | 85.233.160.130 | GB | http://www.whitestone-devon.org.uk/webcalendar-1.2.3//includes/indx.php | ISIONUK Namesco Limited
41079 | 195.114.1.92 | PL | http://www.wirsbud.com.pl/components/com_smartformer/files/indx.php | SUPERHOST-PL-AS SuperHost.pl sp. z o.o.
3320 | 62.153.128.125 | DE | http://www.wissen-maschinensicherheit.de/faq/admin/editor/plugins/ajaxfilemanager/inc/indx.php | DTAG Deutsche Telekom AG
25535 | 195.208.1.111 | RU | http://www.woodturning.pro/components/com_smartformer/files/indx.php | ASN-RUCENTER-HOSTING Autonomous Non-commercial Organization _Regional Network Information Center_
18866 | 69.50.218.228 | US | http://www.wordofhisgracemission.org/components/com_smartformer/files/indx.php | ATJEU - atjeu publishing, llc
31727 | 79.170.44.135 | GB | http://www.workwearsoutheast.co.uk/components/com_smartformer/files/indx.php | NODE4-AS Node4 Ltd, UK
26496 | 97.74.215.186 | US | http://www.worldmentoringacademy.com//content/editor_templates/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
20495 | 92.48.206.110 | NL | http://www.xixion.nl/site/components/com_smartformer/files/indx.php | WEDARE We Dare BV Autonomous System
24940 | 46.4.63.146 | DE | http://www.xn--kvadraturengrdeierforening-jic.no/administrator/templates/bluestork/indx.php | HETZNER-AS Hetzner Online AG RZ
24940 | 178.63.16.195 | DE | http://www.yardimeli.org.ps/center/templates/beez/indx.php | HETZNER-AS Hetzner Online AG RZ
9371 | 219.94.129.15 | JP | http://www.yoshimi-lab.jp/administrator/templates/bluestork/indx.php | SAKURA-C SAKURA Internet Inc.
36024 | 173.237.189.14 | US | http://www.zambiachambers.org/templates/beez/indx.php | COLO4-CO - Colo4, LLC
24940 | 78.46.50.21 | DE | http://www.zanjanmount.com/templates/beez/indx.php | HETZNER-AS Hetzner Online AG RZ
4134 | 125.65.83.4 | CN | http://www.zgjn888.com/ad/indx.php | CHINANET-BACKBONE No.31,Jin-rong Street
21788 | 66.197.136.201 | US | http://www.zktriz.net/Espaol/indx.php | NOC - Network Operations Center Inc.
36351 | 74.86.149.244 | US | http://www.zssco.co/en/templates/beez/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
20738 | 81.21.75.87 | GB | http://xdslclient.clientpanel.biz/cart//addons/lightbox/indx.php | AS20738 Webfusion Internet Solutions
45538 | 112.78.2.187 | VN | http://xuanmaimobile.com/cache/indx.php | ODS-AS-VN Online data services
26496 | 188.121.46.128 | NL | http://xzone-reactor.com/forums/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
24961 | 81.30.150.90 | DE | http://yourwebcom.de/libraries/indx.php | FIBREONE-AS myLoc managed IT AG
24961 | 81.30.150.90 | DE | http://yourwebcom.de/phpbb/indx.php | FIBREONE-AS myLoc managed IT AG
13618 | 74.81.186.49 | US | http://ypsc.org/calendar//includes/indx.php | CARONET-ASN - Carolina Internet, Ltd.
33139 | 66.49.214.28 | CA | http://yusefcity.com/city/templates/beez/indx.php | CANACA-210 - Canaca-com Inc.
31815 | 70.32.70.253 | US | http://z4creative.com/efront/www//content/editor_templates/indx.php | MEDIATEMPLE - Media Temple, Inc.
24940 | 46.4.105.172 | DE | http://zabytki-wisla.enoclegi-karwia.pl/administrator/templates/bluestork/indx.php | HETZNER-AS Hetzner Online AG RZ
36024 | 173.237.189.14 | US | http://zambiachambers.org/templates/beez/indx.php | COLO4-CO - Colo4, LLC
47583 | 31.170.160.149 | US | http://zazinyul.netii.net//addons/lightbox/indx.php | HOSTING-MEDIA Hostinger International Limited
32244 | 67.227.171.170 | US | http://zealssa.com/templates/beez5/indx.php | LIQUID-WEB-INC - Liquid Web, Inc.
4538 | 202.201.208.22 | CN | http://zsjy.xjufe.edu.cn//zhuanti/indx.php | ERX-CERNET-BKB China Education and Research Network Center
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 20121016_1500UTC_new_tier1_asn.txt.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20121016/a0f43817/attachment-0001.sig>
More information about the nsp-security
mailing list