Educause Security Discussion mailing list archives
Re: Rogue FTP Servers
From: "Lucas, Bryan" <b.lucas () TCU EDU>
Date: Tue, 2 Nov 2004 14:28:29 -0600
That's short for Distro and Divx_due suggest it's a dump site for Divx encoded movies. That's a pretty typical result of a hack. Look in your recycler bin with something that can see inside of it (TreeSize Pro) and locate where they are dumping the files. Alternatively, look at the .ini file if they chose Serv-U as the server. Bryan Lucas Lead Server Administrator Texas Christian University (817) 257-6971 -----Original Message----- From: The EDUCAUSE Security Discussion Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Justin Azoff Sent: Tuesday, November 02, 2004 2:17 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] Rogue FTP Servers On Tue, 2004-11-02 at 14:28, Anderson, Brandie wrote:
Does the banner say anything about "pubstro"?
I found one that had a banner of: 220-FTP SerVeR ReADy 220-_______________________________________________ 220- - = ] MadHouse [ = - 220- 220- This Stro is Brought You By Divx_due 220- & Evisu! 220- ____________ 220- User iNFO : ..... Does "Stro" mean something in another language? -- -- Justin Azoff -- Network Performance Analyst ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
Current thread:
- Rogue FTP Servers Elliott Franklin (Nov 02)
- <Possible follow-ups>
- Re: Rogue FTP Servers John Bambenek (Nov 02)
- Re: Rogue FTP Servers Daniel Adinolfi (Nov 02)
- Re: Rogue FTP Servers Mike Iglesias (Nov 02)
- Re: Rogue FTP Servers Anderson, Brandie (Nov 02)
- Re: Rogue FTP Servers Jordan Wiens (Nov 02)
- Re: Rogue FTP Servers Elliott Franklin (Nov 02)
- Re: Rogue FTP Servers Justin Azoff (Nov 02)
- Re: Rogue FTP Servers Anderson, Brandie (Nov 02)
- Re: Rogue FTP Servers Todd Clementz (Nov 02)
- Re: Rogue FTP Servers Lucas, Bryan (Nov 02)
- Re: Rogue FTP Servers Geoff (Nov 02)
- Re: Rogue FTP Servers Brian Eckman (Nov 02)
- Re: Rogue FTP Servers Wyman Miles (Nov 02)
- Re: Rogue FTP Servers Schmidt, Eric W (Nov 02)
- Re: Rogue FTP Servers James H Moore (Nov 02)
- Re: Rogue FTP Servers RLVaughn (Nov 02)
- Re: Rogue FTP Servers Mark Wilson (Nov 03)
- Re: Rogue FTP Servers Jason Richardson (Nov 04)