ftp warez server snake ?
From: Andreas Putzo (andreas_at_inferno.nadir.org)
Date: 12/07/04
- Previous message: Barrie Dempster: "Re: PHP injection attempt from 200.222.244.154"
- Next in thread: Peter Moody: "Re: ftp warez server snake ?"
- Reply: Peter Moody: "Re: ftp warez server snake ?"
- Maybe reply: H Carvey: "Re: ftp warez server snake ?"
- Reply: Bob User: "Re: ftp warez server snake ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: incidents@securityfocus.com Date: Tue, 7 Dec 2004 22:14:17 +0100
Hello,
today i found an ftp server listening on port 5800 on a windows box.
Anonymous login is not allowed. I tried a few name/pass combos without luck.
I believe, it's a pubstro used for warez, but i don't have physical access to
confirm this.
# ftp 194.xx.x.xx 5800
Connected to 194.xx.x.xx.
220 Snake Server
Name (194.xx.x.xx:root): snake
331 User name okay, need password.
Password:
530 Not logged in.
Login failed.
Remote system type is habe.
ftp>
There is also an auth server listening, providing me this:
# nc 194.xx.x.xxx 113
: USERID : UNIX : ekwaxtjm
I googled a bit, but found nothing useful.
Anyone recognize this one?
regards,
Andreas
- Previous message: Barrie Dempster: "Re: PHP injection attempt from 200.222.244.154"
- Next in thread: Peter Moody: "Re: ftp warez server snake ?"
- Reply: Peter Moody: "Re: ftp warez server snake ?"
- Maybe reply: H Carvey: "Re: ftp warez server snake ?"
- Reply: Bob User: "Re: ftp warez server snake ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|