virus ftp daemon fingerprints

Maybe this helps the one or other to findout what service is lurking on his box without permission.

StnyFtpd

220 StnyFtpd 0wns j0
331 Password required
230 User logged in.
200 PORT command successful.
150 Opening BINARY mode data connection
226 Transfer complete.
221 Goodbye happy r00ting.

Reptile

220 Reptile welcomes you..
331 Password required
230 User logged in.
200 PORT command successful.
150 Opening BINARY mode data connection
226 Transfer complete.
221 Goodbye, happy rooting.

WinFtpd 1.2

220 WinFtpd 1.2
331 Password required
230 User logged in.
200 PORT command successful.
150 Opening BINARY mode data connection

Agobot

220 Bot Server (Win32)
331 Password required.
230 Login successful. Have fun.
200 PORT command successful
 
documentation/modules/downloadhandler/download_ftp/ftpd_fingerprints.txt · Last modified: 2006/02/17 14:01
 
Recent changes RSS feed Creative Commons License Donate Powered by PHP Valid XHTML 1.0 Valid CSS Driven by DokuWiki