[nsp-sec] DDoS: Compromised web servers: 20121017
Nick Ianelli
ni at allyourinfoarebelongto.us
Wed Oct 17 13:28:00 EDT 2012
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
199 new compromised web servers attached.
- -------- Original Message --------
>> Latest list of compromised web servers. They are absolutely
>> killing vulnerable Joomla hosts.
>
>> Been busy updating some of their scripts.
>
>> stp.hp stcurl.php stmdu.php
>
>> They also modified indx.php a bit:
>
>> if ($_GET['action']=="status") { print "That is good"; exit(); }
>
>
>> ****
>
>> It should be noted that if you try and "GET" the indx.php
>> without any parameters it will generate an error.
>
>> Take a closer look at the 404 you are getting back, if you see
>> the typo, the sites are still infected:
>
>> "a 404 Not Foun derror was encountered'
>
>> ****
>
>> Nick
>
>> -------- Original Message -------- Subject: DDoS: Compromised
>> web servers (part 1) Date: Tue, 09 Oct 2012 02:51:33 +0000
>
>> For those that haven't seen, tomorrow will kick off the
>> continuation of DDoS attacks targeting various financial
>> organizations. Current schedule:
>
>> Capital One 20121009 Suntrust 20121010 Regions 20121011
>
>> Attached are 160 new compromised web servers the malicious
>> actors have added in the past 24 hours.
>
>> ****
>
>> It should be noted that if you try and "GET" the indx.php
>> without any parameters it will generate an error.
>
>> Take a closer look at the 404 you are getting back, if you see
>> the typo, the sites are still infected:
>
>> "a 404 Not Foun derror was encountered'
>
>> ****
>
>> Prior to distribution please remove any list or personally
>> identifiable information from it.
>
>
>> In addition to indx.php, the following files may exist in the
>> same directory:
>
>> stcp.php stip.php stph.php classtyle.php classtyle2.php
>
>> The following URL discusses some of the issues at play here, but
>> I don't believe all are Joomla compromises:
>
>> http://forum.joomla.org/viewtopic.php?t=737503
>
>> In working with your constituency, if you were able to obtain
>> the files listed above (and any other files in the same
>> directory) as well as any web access logs specific to the files
>> listed above, I would be extremely interested and eternally
>> grateful.
>
>> Any questions, let me know.
>
>
>> Here is a list of ASNs (by count) of what's in the attached
>> file:
16 26496
14 24940
13 21844
9 10297
6 8560
5 47583
5 16276
4 32613
3 36351
3 32475
3 26347
3 13768
2 6939
2 6724
2 51559
2 51468
2 34788
2 32392
2 32244
2 25151
2 25074
2 21155
2 18403
2 16265
2 13213
2 11042
1 9942
1 9929
1 9737
1 9464
1 9198
1 9153
1 8990
1 8972
1 8468
1 8315
1 8308
1 7132
1 6983
1 6848
1 6830
1 5483
1 5408
1 4847
1 4837
1 4812
1 4808
1 4802
1 47205
1 4713
1 4618
1 45544
1 45538
1 45425
1 44497
1 44256
1 43146
1 42807
1 4134
1 41075
1 40819
1 40034
1 39729
1 37943
1 35916
1 35327
1 34660
1 3462
1 34619
1 34282
1 33210
1 33182
1 32748
1 3254
1 32181
1 31272
1 31034
1 30058
1 29873
1 29522
1 29278
1 2914
1 29024
1 28204
1 27431
1 25847
1 25653
1 25369
1 22652
1 21788
1 2116
1 20773
1 20738
1 20155
1 197922
1 197726
1 18492
1 17479
1 17139
1 16637
1 15685
1 15418
1 15351
1 15083
1 14259
1 13354
1 13335
1 12824
1 12754
1 12306
1 11388
1 11305
1 10929
Nick
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
iEYEARECAAYFAlB+6qAACgkQi10dJIBjZIBOKwCg40Q2aM2GJXovtecwYoeRqAxe
WAYAoKfn7nyjB2Mu3DIhoImP6w8UWKIL
=Sykv
-----END PGP SIGNATURE-----
-------------- next part --------------
21844 | 74.55.97.180 | US | http://74.55.97.180/calvinc3/calendar//includes/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
5408 | 195.251.123.232 | GR | http://aetos.it.teithe.gr/antcha/joomla/administrator/templates/bluestork/indx.php | GR-NET Greek Research & Technology Network, http://www.grnet.gr
21788 | 184.82.244.150 | US | http://blackpanther.co.in/installation/indx.php | NOC - Network Operations Center Inc.
4812 | 114.80.209.195 | CN | http://hztaoche.com/10-20/indx.php | CHINANET-SH-AP China Telecom (Group)
24940 | 176.9.63.137 | DE | http://jazmefatemi.com/templates/beez/indx.php | HETZNER-AS Hetzner Online AG RZ
24940 | 78.47.28.69 | DE | http://jeguitfamily.orgfree.com/FCMS_2.3.2//indx.php | HETZNER-AS Hetzner Online AG RZ
32392 | 173.83.183.2 | US | http://jivanmagic.in//components/com_oziogallery2/imagin/indx.php | OPENTRANSFER-ECOMMERCE - Ecommerce Corporation
21844 | 74.53.28.50 | US | http://jlsounddj.com/Calendar//includes/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
36351 | 184.173.9.57 | US | http://joindefence.com/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
34788 | 85.13.135.243 | DE | http://joomla.creto.at/templates/beez/indx.php | NMM-AS Neue Medien Muennich GmbH
34788 | 85.13.132.217 | DE | http://jucknix.de/forum/indx.php | NMM-AS Neue Medien Muennich GmbH
6830 | 84.242.90.227 | CZ | http://kalendar.trachemyska.cz//includes/indx.php | LGI-UPC UPC Broadband Holding B.V.
20773 | 80.237.133.34 | DE | http://kameraforum.net/indx.php | HOSTEUROPE-AS Host Europe GmbH
24940 | 176.9.158.68 | DE | http://kamrantebafagh.com/templates/beez/indx.php | HETZNER-AS Hetzner Online AG RZ
16265 | 95.211.9.164 | NL | http://kantoorophetweb.svsweb.nl/fag3/admin/editor/plugins/ajaxfilemanager/inc/indx.php | LEASEWEB LeaseWeb B.V.
197726 | 195.64.155.63 | UA | http://karaoke-utesov.com.ua/templates/beez/indx.php | UKRNAMES-AS Ukrainian Internet Names Center LTD
4713 | 223.219.33.252 | JP | http://kato.plala.jp/joomla2/administrator/templates/bluestork/indx.php | OCN NTT Communications Corporation
10297 | 209.51.196.243 | US | http://kayhan.byethost22.com/indx.php | ENET-2 - eNET Inc.
44256 | 195.93.153.5 | KZ | http://kazcenter.kz//wp-content/plugins/P_music_player/indx.php | NEOLABS-AS Neolabs Ltd.
13354 | 108.60.202.151 | US | http://kbbc.org/kernancalendar//includes/indx.php | ASN-EBLGLOBAL - EBL Global Networks, Inc.
10297 | 209.190.85.27 | US | http://kegeo1193.byethost16.com/indx.php | ENET-2 - eNET Inc.
45544 | 112.213.89.104 | VN | http://kinhdoanhthuongmaidientu.com/cache/indx.php | PAVIETNAM-AS-VN PAVIETNAM Co.,Ltd
8315 | 194.165.34.199 | NL | http://klein-schreuder.com/templates/beez/indx.php | ARGEWEB-AS Amsio B.V.
32613 | 72.55.156.153 | CA | http://kootalkoloob.com/templates/beez/indx.php | IWEB-AS - iWeb Technologies Inc.
9198 | 92.46.62.134 | KZ | http://korobas.kz/templates/atomic/indx.php | KAZTELECOM-AS JSC Kazakhtelecom
21844 | 174.132.190.231 | US | http://krishaweb.info/c2v/templates/beez/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
7132 | 99.65.74.129 | US | http://krislinusaw01.krislin.com/krislin/templates/beez/indx.php | SBIS-AS - AT&T Internet Services
24940 | 178.63.8.150 | DE | http://krystis.altervista.org//components/com_oziogallery2/imagin/indx.php | HETZNER-AS Hetzner Online AG RZ
16276 | 5.39.19.141 | FR | http://ksa4week.com/cache/indx.php | OVH OVH Systems
16276 | 5.39.19.141 | FR | http://ksa4week.com/includes/indx.php | OVH OVH Systems
24940 | 178.63.16.243 | DE | http://kurs.maturowo.edu.pl/www//content/editor_templates/indx.php | HETZNER-AS Hetzner Online AG RZ
21844 | 174.120.243.186 | US | http://lauramichellemusic.com//components/com_oziogallery2/imagin/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
35327 | 193.47.83.109 | GB | http://lem-family.com//indx.php | NAGLOTECH Naglotech AS Number
24940 | 176.9.52.230 | DE | http://lenardspiecker.bplaced.net/Beamerdienst-Kalender/WebCalendar//includes/indx.php | HETZNER-AS Hetzner Online AG RZ
10929 | 68.71.47.66 | CA | http://lh2.ca/administrator/templates/bluestork/indx.php | NETELLIGENT - Netelligent Hosting Services Inc.
9464 | 192.100.77.250 | TH | http://lib.med.psu.ac.th/libmedeng2010/templates/beez/indx.php | PSU-TH-AS-AP Prince of Songkla University (Sritrang_NET)
45425 | 118.127.36.129 | AU | http://lilydalecfa.com.au/lfbcal//includes/indx.php | DEDICATED-SERVERS-SYD-AS-AP Dedicated Servers - Sydney
45538 | 112.78.2.180 | VN | http://linhkienlcd.com/administrator/indx.php | ODS-AS-VN Online data services
6983 | 216.224.129.167 | US | http://lms1.synaudcon.com//content/editor_templates/indx.php | ITCDELTA - ITC^Deltacom
26496 | 50.63.43.1 | US | http://lokamalayali.com/poriyathu/FCMS//indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
47583 | 31.170.160.249 | US | http://lubneejtojsiab.hostei.com/templates/beez/indx.php | HOSTING-MEDIA Hostinger International Limited
21844 | 74.53.178.253 | US | http://macca-pal.com/templates/beez/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
8560 | 74.208.46.180 | US | http://mail.frogathome.com/frogmail2/myplugins/collection/calendar/app//includes/indx.php | ONEANDONE-AS 1&1 Internet AG
17479 | 202.28.25.214 | TH | http://makok.pharmacy.cmu.ac.th/DeanCalendar//includes/indx.php | CMU-TH-AP Chiang Mai University
26347 | 69.163.131.143 | US | http://mansfieldtownship.dreamhosters.com/calendar//includes/indx.php | DREAMHOST-AS - New Dream Network, LLC
21844 | 174.120.232.253 | US | http://marah-stadium.com/templates/beez/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
15083 | 65.111.174.48 | US | http://maximilian-jewellery.com/setup/indx.php | INFOLINK-MIA-US - Infolink
32613 | 184.107.227.58 | CA | http://maysouncollection.com//wp-content/plugins/P_music_player/indx.php | IWEB-AS - iWeb Technologies Inc.
10297 | 209.51.196.244 | US | http://mesvik.byethost14.com/indx.php | ENET-2 - eNET Inc.
40819 | 173.249.145.93 | US | http://mfcsat.org.mx/administrator/templates/bluestork/indx.php | VPSDATACENTER - VPS Datacenter, LLC
47583 | 31.170.161.156 | US | http://michelle.webege.com//addons/lightbox/indx.php | HOSTING-MEDIA Hostinger International Limited
47583 | 31.170.160.149 | US | http://milanzboutique.netii.net//addons/lightbox/indx.php | HOSTING-MEDIA Hostinger International Limited
47583 | 31.170.160.229 | US | http://millio.host56.com//addons/lightbox/indx.php | HOSTING-MEDIA Hostinger International Limited
32392 | 98.131.64.2 | US | http://millionlinkmarketing.com/indx.php | OPENTRANSFER-ECOMMERCE - Ecommerce Corporation
21844 | 174.122.19.221 | US | http://mk7japan.com/transyoshi_calendar//includes/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
32244 | 69.167.173.224 | US | http://modusempresarial.com.br/calendar//includes/indx.php | LIQUID-WEB-INC - Liquid Web, Inc.
26496 | 97.74.144.137 | US | http://montanofamilyonline.com//indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
3254 | 193.193.194.194 | UA | http://motopro.kiev.ua/templates/beez/indx.php | LNUA LN.UA Ltd.
4618 | 203.151.157.72 | TH | http://muangakegrandville.com/components/indx.php | INET-TH-AS Internet Thailand Company Limited
25369 | 178.239.163.202 | GB | http://mukesheducation.com/templates/beez/indx.php | BANDWIDTH-AS Bandwith Technologies Ltd
51468 | 193.202.110.68 | DK | http://multi-sport.no/administrator/templates/bluestork/indx.php | ONECOM One.com A/S
14259 | 190.98.219.17 | CL | http://musicauv.cl/estudio//includes/indx.php | Gtd Internet S.A.
11042 | 209.140.16.41 | US | http://mvum.org/calendar//includes/indx.php | LANDIS-HOLDINGS-INC - Landis Holdings Inc
6848 | 212.123.21.148 | BE | http://mx.georgepetchint.com/calendar//includes/indx.php | TELENET-AS Telenet N.V.
26496 | 97.74.215.186 | US | http://myactisthebest.com/www//content/editor_templates/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
21844 | 174.132.164.34 | US | http://mycaliforniaevents.com/calendar//includes/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
17139 | 74.124.194.252 | US | http://myhopebaptistchurch.org/calendar//includes/indx.php | CORPCOLO - Corporate Colocation Inc.
32475 | 184.154.67.66 | US | http://myhostingmanager.com/who_we_are/templates/beez/indx.php | SINGLEHOP-INC - SingleHop
31272 | 217.77.208.228 | UA | http://nabat.mk.ua/templates/beez/indx.php | WILDPARK-AS ISP WildPark, Ukraine, Nikolaev
13213 | 213.232.110.159 | GB | http://narnian.org/stagness//components/com_oziogallery2/imagin/indx.php | UK2NET-AS UK-2 Ltd Autonomous System
26496 | 97.74.141.128 | US | http://nationalbariatriclink.org/forum/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
26496 | 184.168.206.1 | US | http://nbcatexas.com/efront/www//content/editor_templates/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
36351 | 208.43.79.203 | US | http://nerurkars.in/Calender//includes/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
11388 | 66.40.34.224 | US | http://netpostnig.com/templates/beez/indx.php | MAXIM - Peer 1 Dedicated Hosting
16265 | 85.17.231.237 | NL | http://www.3tech.it/assistenza-shoppix2/lang/indx.php | LEASEWEB LeaseWeb B.V.
29278 | 87.229.73.98 | HU | http://www.acnhun.hu/webcal//includes/indx.php | DENINET-HU-AS Deninet KFT
39729 | 81.88.48.95 | IT | http://www.actionpreventionsport.fr/indx.php | REGISTER-AS Register.IT S.p.A.
21844 | 174.120.118.222 | US | http://www.adam.ps/adame/templates/beez/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
10297 | 207.182.137.187 | US | http://www.aderance.ir/administrator/indx.php | ENET-2 - eNET Inc.
5483 | 80.249.164.140 | HU | http://www.agardi.hu/webshop/addons/tinymce/jscripts/tiny_mce/plugins/ajaxfilemanager/inc/indx.php | HTC-AS Magyar Telekom plc.
13768 | 176.74.178.11 | GB | http://www.agriserviceethiopia.org/administrator/templates/bluestork/indx.php | PEER1 - Peer 1 Network Inc.
26496 | 182.50.147.1 | SG | http://www.aia-india.org/CMS/templates/beez/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
8308 | 194.181.14.175 | PL | http://www.aida.webd.pl/koshin-polska/templates/beez/indx.php | NASK-COMMERCIAL NASK Research and Academic Computer Networks
30058 | 204.45.64.122 | US | http://www.al-amal.ws/vb/indx.php | FDCSERVERS - FDCservers.net
3462 | 60.250.203.85 | TW | http://www.alfaplus.com.tw/joomla15/templates/beez/indx.php | HINET Data Communication Business Group
13768 | 64.69.64.205 | US | http://www.almond-fresh.com/us/templates/beez/indx.php | PEER1 - Peer 1 Network Inc.
21155 | 77.94.248.247 | NL | http://www.andrzejewski-interieur.com/webshop//addons/lightbox/indx.php | ASN-PROSERVE ProServe B.V.
26496 | 72.167.232.152 | US | http://www.anssaby.com/others/unionjoen/templates/beez/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
10297 | 173.45.73.3 | US | http://www.apada7.com/templates/beez/indx.php | ENET-2 - eNET Inc.
41075 | 88.151.96.8 | HU | http://www.ap-faktura.hu/templates/beez/indx.php | ATW-AS ATW Internet Kft.
26496 | 64.202.163.152 | US | http://www.apnaflex.com/forum/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
20155 | 216.171.167.38 | US | http://www.approvedmemory.com/templates/beez/indx.php | OCO-1 - ORANGE COUNTY ONLINE
10297 | 209.190.24.3 | US | http://www.arabnt.eb2a.com/vb/indx.php | ENET-2 - eNET Inc.
25074 | 78.138.99.229 | DE | http://www.asb.ir/templates/beez/indx.php | MESH-AS MESH GmbH
21155 | 77.94.249.147 | NL | http://www.atelier180.nl/shop//addons/lightbox/indx.php | ASN-PROSERVE ProServe B.V.
21844 | 174.120.40.125 | US | http://www.avalikesinemine.net/ekursus/www//content/editor_templates/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
36351 | 173.193.206.240 | US | http://www.awayesirik.com/Farsi/templates/beez/indx.php | SOFTLAYER - SoftLayer Technologies Inc.
51559 | 159.253.37.23 | TR | http://www.ayansoft.com.tr/templates/beez/indx.php | NETINTERNET Netinternet Bilgisayar ve Telekomunikasyon San. ve Tic. Ltd. Sti.
10297 | 209.51.196.252 | US | http://www.azab3shqy.eb2a.com/vb/indx.php | ENET-2 - eNET Inc.
42807 | 94.199.200.177 | TR | http://www.baliktutkunlari.net/indx.php | AEROTEK-AS Aerotek Bilisim Taahhut Sanayi ve Ticaret Limited Sirketi
24940 | 176.9.158.68 | DE | http://www.banovan.kfesfahan.com/templates/beez/indx.php | HETZNER-AS Hetzner Online AG RZ
40034 | 208.91.198.95 | VG | http://www.bce.org.in/FC//indx.php | CONFLUENCE-NETWORK-INC - Confluence Networks Inc
8560 | 74.208.159.31 | US | http://www.bearlyexposed.com/templates/beez/indx.php | ONEANDONE-AS 1&1 Internet AG
18492 | 200.1.131.45 | CL | http://www.bebeparis.cl//components/com_oziogallery2/imagin/indx.php | Almacenes Paris Comercial S.A
8990 | 193.30.164.15 | HU | http://www.bentahorgaszpark.hu//components/com_oziogallery2/imagin/indx.php | AHRT-AS _ANTENNA HUNGARIA_ Magyar Musorszoro es Radiohirkozlesi Zartkoruen Mukodo Reszvenytarsasag
34619 | 94.73.146.50 | TR | http://www.besthile.com/indx.php | CIZGI Cizgi Telekomunikasyon Hizmetleri Sanayi Ve Ticaret Limited Sirketi
16276 | 94.23.68.133 | FR | http://www.bestrenting.it/wp-content/plugins/vo/indx.php | OVH OVH Systems
18403 | 210.245.91.203 | VN | http://www.bgit.vn/stttt//components/com_oziogallery2/imagin/indx.php | FPT-AS-AP The Corporation for Financing & Promoting Technology
25151 | 217.170.3.213 | NL | http://www.bijdetijdzijn.nl//addons/lightbox/indx.php | CYSO-AS Cyso Hosting B.V., Alkmaar, The Netherlands
24940 | 176.9.50.137 | DE | http://www.bildungundberuf.at/verein/administrator/templates/bluestork/indx.php | HETZNER-AS Hetzner Online AG RZ
21844 | 74.55.66.85 | US | http://www.biocongress.ir/administrator/templates/bluestork/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
29522 | 94.152.187.102 | PL | http://www.biogabinet2.prestin.com.pl/www//content/editor_templates/indx.php | KEI Krakowskie e-Centrum Informatyczne JUMP
15418 | 213.171.218.132 | GB | http://www.bismillahwelfaretrust.org/templates/beez/indx.php | FASTHOSTS-INTERNET Fasthosts Internet Ltd. Gloucester, UK.
6939 | 199.192.157.11 | US | http://www.bjgzk.com/crgk/indx.php | HURRICANE - Hurricane Electric, Inc.
6939 | 199.192.157.11 | US | http://www.bjgzk.com/search/indx.php | HURRICANE - Hurricane Electric, Inc.
25847 | 206.214.217.26 | US | http://www.bobtheteacher.com/_vti_bin/indx.php | SERVINT - ServInt
6724 | 81.169.145.167 | DE | http://www.bodybuildinginfo.nl/indx.php | STRATO STRATO AG
26496 | 173.201.240.48 | US | http://www.bodykitsforum.com/forums/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
8560 | 74.208.237.224 | US | http://www.bozemanwintergames.org/administrator/templates/bluestork/indx.php | ONEANDONE-AS 1&1 Internet AG
12306 | 213.83.63.57 | DE | http://www.br-info.net/br-info/kalender//includes/indx.php | PLUSLINE Plus.Line AG
51468 | 193.202.110.125 | DK | http://www.brown-frandsen.dk//indx.php | ONECOM One.com A/S
8560 | 74.208.138.153 | US | http://www.buckshotstaxidermy.com//components/com_oziogallery2/imagin/indx.php | ONEANDONE-AS 1&1 Internet AG
6724 | 81.169.145.160 | DE | http://www.burgstaedterhc.de/templates/beez/indx.php | STRATO STRATO AG
51559 | 31.192.213.197 | TR | http://www.buyukada.org/templates/beez/indx.php | NETINTERNET Netinternet Bilgisayar ve Telekomunikasyon San. ve Tic. Ltd. Sti.
20738 | 94.136.40.103 | GB | http://www.calender.daventryscouts.org.uk//includes/indx.php | AS20738 Webfusion Internet Solutions
32475 | 108.178.4.52 | US | http://www.cambodiaglobalaction.org/templates/beez/indx.php | SINGLEHOP-INC - SingleHop
26496 | 173.201.234.94 | US | http://www.carlhenryglobal.com/outwardboundmonaco//components/com_oziogallery2/imagin/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
16276 | 46.105.107.54 | FR | http://www.cashinlive.fr/templates/beez/indx.php | OVH OVH Systems
26496 | 184.168.137.1 | US | http://www.certifiedent.net/Home/templates/beez/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
32613 | 72.55.186.54 | CA | http://www.chafric.ca/nouveau/templates/beez/indx.php | IWEB-AS - iWeb Technologies Inc.
4808 | 211.99.249.248 | CN | http://www.chinasbpx.com/indx.php | CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network
4847 | 211.99.249.248 | CN | http://www.chinasbpx.com/indx.php | CNIX-AP China Networks Inter-Exchange
18403 | 210.245.90.148 | VN | http://www.chint.com.vn/templates/beez/indx.php | FPT-AS-AP The Corporation for Financing & Promoting Technology
12824 | 79.96.11.103 | PL | http://www.chirurgia3.pl//components/com_oziogallery2/imagin/indx.php | HOMEPL-AS home.pl sp. z o.o.
15351 | 76.164.198.23 | US | http://www.clinicdrhakimzadeh.com/templates/beez/indx.php | VISPERAD-NETWORKS-LLC - VISPERAD NETWORKS, LLC
24940 | 78.46.62.13 | DE | http://www.clubnapoliangri.altervista.org//components/com_oziogallery2/imagin/indx.php | HETZNER-AS Hetzner Online AG RZ
22652 | 68.67.33.162 | CA | http://www.college-sainte-anne.qc.ca/calendrier//includes/indx.php | FIBRENOIRE-INTERNET - Fibrenoire Internet Inc.
15685 | 82.208.47.153 | CZ | http://www.collegium1704.com/webcalendar//includes/indx.php | CASABLANCA-AS Casablanca INT Autonomous system
25653 | 69.72.202.224 | US | http://www.collemare.it//components/com_oziogallery2/imagin/indx.php | FORTRESSITX - FortressITX
33210 | 69.41.162.4 | US | http://www.competesoft.com/test/2/templates/beez/indx.php | 1-800-HOSTING - 1-800-HOSTING, Inc.
32748 | 208.100.54.31 | US | http://www.compuforums.org/indx.php | STEADFAST - Steadfast Networks
32613 | 108.163.179.42 | CA | http://www.conectar.org.br/teste//components/com_oziogallery2/imagin/indx.php | IWEB-AS - iWeb Technologies Inc.
32244 | 72.52.185.41 | US | http://www.constructoralara.com//components/com_oziogallery2/imagin/indx.php | LIQUID-WEB-INC - Liquid Web, Inc.
8560 | 82.165.207.205 | DE | http://www.costes.alexandre-cagnoli.com//wp-content/plugins/P_music_player/indx.php | ONEANDONE-AS 1&1 Internet AG
26347 | 173.236.163.118 | US | http://www.couturetravel.com.mx/administrator/templates/bluestork/indx.php | DREAMHOST-AS - New Dream Network, LLC
8468 | 81.31.99.19 | GB | http://www.ctek-solutions.co.uk/estore/addons/tinymce/jscripts/tiny_mce/plugins/ajaxfilemanager/inc/indx.php | ENTANET ENTANET International Limited
2116 | 85.252.49.19 | NO | http://www.datarep.no//addons/lightbox/indx.php | ASN-CATCHCOM Ventelo AS
24940 | 188.40.217.154 | DE | http://www.david92.it/forum/indx.php | HETZNER-AS Hetzner Online AG RZ
11042 | 69.73.191.80 | US | http://www.desarrollodemedios.com/eltiem/templates/beez/indx.php | LANDIS-HOLDINGS-INC - Landis Holdings Inc
32181 | 69.65.26.29 | US | http://www.digigreen.net/forums/indx.php | ASN-GIGENET - GigeNET
34282 | 85.92.83.139 | GB | http://www.digital-goods.co.uk/portal/administrator/templates/bluestork/indx.php | UKNOC-AS UKNOC AS
47205 | 92.61.39.19 | LT | http://www.diskutuok.lt/indx.php | HOSTEX UAB HOSTEX
24940 | 78.46.92.147 | DE | http://www.dmcroma.altervista.org//components/com_oziogallery2/imagin/indx.php | HETZNER-AS Hetzner Online AG RZ
25074 | 78.138.99.229 | DE | http://www.dog.ir/templates/beez/indx.php | MESH-AS MESH GmbH
24940 | 78.46.45.86 | DE | http://www.dpgrandifirme.altervista.org//components/com_oziogallery2/imagin/indx.php | HETZNER-AS Hetzner Online AG RZ
43146 | 80.78.247.4 | RU | http://www.dvertorg.ru/classes/indx.php | AGAVA3 Agava Ltd.
32475 | 173.236.25.42 | US | http://www.eaelafrica.com/_vti_bin/indx.php | SINGLEHOP-INC - SingleHop
21844 | 74.52.179.82 | US | http://www.edu.zmajsoft.com/www//content/editor_templates/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
26496 | 97.74.182.1 | US | http://www.eigotree.com/efront/www//content/editor_templates/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
28204 | 189.91.58.58 | BR | http://www.eishin.com.br/calendario//includes/indx.php |
13335 | 108.162.199.82 | US | http://www.ekata.net/CALENDAR//includes/indx.php | CLOUDFLARENET - CloudFlare, Inc.
8972 | 85.25.236.223 | DE | http://www.e-leap.gr/www//content/editor_templates/indx.php | PLUSSERVER-AS intergenia AG
25151 | 85.158.203.90 | NL | http://www.electrische-tandenborstels.nl//addons/lightbox/indx.php | CYSO-AS Cyso Hosting B.V., Alkmaar, The Netherlands
29024 | 91.189.44.179 | SE | http://www.ellit.se/administrator/templates/bluestork/indx.php | BALLOU-AS Ballou Internet Services AB
8560 | 82.165.99.187 | DE | http://www.enjoyevolution.com//components/com_oziogallery2/imagin/indx.php | ONEANDONE-AS 1&1 Internet AG
9942 | 202.4.30.244 | AU | http://www.esl.oleng.com.au/administrator/templates/bluestork/indx.php | COMINDICO-AP SOUL Converged Communications Australia
197922 | 91.229.20.13 | FR | http://www.etudeposturale.be/admin/indx.php | FIRSTHEBERG Techcrea Solutions Sarl
11305 | 66.155.114.236 | US | http://www.euromods.com/forums/indx.php | P1DH-1-ASN - Peer 1 Dedicated Hosting
24940 | 178.63.47.210 | DE | http://www.everydownload.altervista.org//components/com_oziogallery2/imagin/indx.php | HETZNER-AS Hetzner Online AG RZ
33182 | 72.29.92.210 | US | http://www.exclusivosysalvajes.com/templates/beez/indx.php | DIMENOC - HostDime.com, Inc.
34660 | 217.168.156.55 | GB | http://www.exquisitedesigns.co.uk/products_files/indx.php | IDAQ-AS Idaq Ltd
4802 | 210.15.220.52 | AU | http://www.fabc.org.au/fabc/templates/beez/indx.php | ASN-IINET iiNet Limited
26496 | 97.74.144.174 | US | http://www.femexbo.com/joomla4//components/com_oziogallery2/imagin/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
26496 | 97.74.215.234 | US | http://www.fenyxsky.com//components/com_oziogallery2/imagin/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
16276 | 213.186.33.17 | FR | http://www.ferme-paque.be/administrator/templates/bluestork/indx.php | OVH OVH Systems
44497 | 92.43.17.150 | ES | http://www.festiforo.es/indx.php | REDCORUNA-AS REDCORUNA
26496 | 188.121.59.128 | NL | http://www.ffscomputers.com//addons/lightbox/indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
47583 | 31.170.162.42 | US | http://www.fietsenopsomer.be//addons/lightbox/indx.php | HOSTING-MEDIA Hostinger International Limited
26496 | 173.201.242.1 | US | http://www.firstfamilyenterprise.com//indx.php | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
9737 | 203.113.98.11 | TH | http://www.fisheries.go.th/sf-lamphun/web2/templates/beez/indx.php | TOTNET-TH-AS-AP TOT Public Company Limited
16637 | 196.7.147.64 | ZA | http://www.fiveforward.co.za/templates/beez/indx.php | MTNNS-AS
21844 | 74.52.120.66 | US | http://www.fixitdad.net.au/home/templates/beez/indx.php | THEPLANET-AS - ThePlanet.com Internet Services, Inc.
12754 | 188.225.189.76 | PS | http://www.folklore.ps/templates/beez/indx.php | COOLNET Coolnet New Communication Provider
24940 | 178.63.34.82 | DE | http://www.forumnoa.com.nu/indx.php | HETZNER-AS Hetzner Online AG RZ
10297 | 209.190.85.28 | US | http://www.fun4.ir/news/templates/beez/indx.php | ENET-2 - eNET Inc.
35916 | 100.42.67.52 | US | http://www.gamebestprice.com/templates/beez/indx.php | MULTA-ASN1 - MULTACOM CORPORATION
26347 | 173.236.157.177 | US | http://www.gearupnow.net/Joomla/administrator/templates/bluestork/indx.php | DREAMHOST-AS - New Dream Network, LLC
27431 | 64.185.224.110 | US | http://www.genels.com/prodavnica/addons/tinymce/jscripts/tiny_mce/plugins/ajaxfilemanager/inc/indx.php | JTLNET - JTL Networks Inc.
29873 | 38.113.1.225 | US | http://www.globetravelservice.org/webcal//includes/indx.php | BIZLAND-SD - The Endurance International Group, Inc.
4134 | 222.92.116.16 | CN | http://www.green5e.com/D_backup/indx.php | CHINANET-BACKBONE No.31,Jin-rong Street
9929 | 210.51.166.86 | CN | http://www.habacun.com/admin/editor/plugins/ajaxfilemanager/inc/indx.php | CNCNET-CN China Netcom Corp.
13213 | 83.170.100.79 | GB | http://www.hagelandskarnes.no/administrator/templates/bluestork/indx.php | UK2NET-AS UK-2 Ltd Autonomous System
13768 | 76.74.228.8 | US | http://www.halifaxairporthotels.ca/templates/atomic/indx.php | PEER1 - Peer 1 Network Inc.
10297 | 209.190.3.42 | US | http://www.hamiyangostar.com/templates/beez/indx.php | ENET-2 - eNET Inc.
31034 | 62.149.140.52 | IT | http://www.h-annozero.it/templates/beez/indx.php | ARUBA-ASN Aruba S.p.A.
4837 | 116.255.155.106 | CN | http://www.hbgyzz.cn/xxzt//5/52/521//indx.php | CHINA169-BACKBONE CNCGROUP China169 Backbone
37943 | 116.255.155.106 | CN | http://www.hbgyzz.cn/xxzt//5/52/521//indx.php | CNNIC-GIANT ZhengZhou GIANT Computer Network Technology Co., Ltd
9153 | 31.132.0.33 | GB | http://www.hellshammers.net/forums/indx.php | BURSTFIRE-EU Burstfire Networks Limited
2914 | 204.200.160.157 | US | http://www.hfmich.org/calendar//includes/indx.php | NTT-COMMUNICATIONS-2914 - NTT America, Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 20121017_1700UTC_new_tier1_asn.txt.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20121017/6ce27076/attachment-0001.sig>
More information about the nsp-security
mailing list