Article 27689 of alt.security: Path: nntpd.lkg.dec.com!crl.dec.com!crl.dec.com!bloom-beacon.mit.edu!spool.mu.edu!usenet.eel.ufl.edu!news.mathworks.com!newsfeed.internetmci.com!news.sprintlink.net!EU.net!dkuug!Norway.EU.net!nntp-oslo.UNINETT.no!nntp-trd.UNINETT.no!due.unit.no!Steinar.Haug From: Steinar.Haug@runit.sintef.no (Steinar Haug) Newsgroups: comp.security.unix,comp.security.misc,alt.security Subject: Warez list, please check your anon FTP hosts Date: 23 Aug 1995 07:43:12 GMT Organization: SINTEF RUNIT, Trondheim, Norway Lines: 698 Message-ID: NNTP-Posting-Host: bokfink.runit.sintef.no Xref: nntpd.lkg.dec.com comp.security.unix:19099 comp.security.misc:20551 alt.security:27689 This list fell into the incoming directory of one of our FTP servers last night. (Yes, we have an incoming directory that is writable, but which cannot be used for anonymous FTP retrieval. Stops Warez distribution very effectively.) Steinar Haug, SINTEF RUNIT, University of Trondheim, NORWAY Email: Steinar.Haug@runit.sintef.no _______________________________________________________________________ 18.62.0.15 128.253.194.202 140.160.192.123 194.57.198.13 204.91.31.73/.c/incoming/mcrb/head.gif 128.253.194.202 /pub/incoming 129.71.32.152/pub/.../ ===== FSW sites ===== drugs.com/pub/upload/".." 129.71.32.152/pub/"..."/"...." guild.bc.ca/usr/bin/".^F^S^W" vax.eedsp.gatech.edu/pub.local/clements/".^Fs^W" 194.57.198.13/tmp/".^Fs^W" mot.cprost.sfu.ca/temp/"^E^E^A^A^T^T/".^Fs^W" scholastic.com/pub/"^E^E^A^A^T^T"/".^Fs^W" ftp.internex.com/incoming/".incoming^I^I"/".^Fs^W" ftp.sparco.com/pub/"^I^I" 140.129.80.1/pub/clements/"^F^I^N^E"/".^Fs^W" ftp.monmouth.edu/pub/incoming/"^I^I"/".^Fs^W95" ====================== 131.220.16.66/pub/upload ftp.rahul.net /pub/incoming/..new....or 128.171.44.70/paccomm/incoming/outgoing/"..." Host dtk1.ym.edu.tw (140.129.80.1) Location: /pub/upload/^[[37mBai Tr Ch S/.appz/Norton_Menu_Manager 199.75.77.70 ??? byrd.mu.wvnet.edu /pub/ReDDogtmp cts.com futique.scs.unr.edu /Data/^[[1A WIN 95! 140.114.78.231 ??? 130.246.48.31 /general/msdos 192.160.13.5 /pub/oms/www/oosf.html/PRED^H^H^H^H 192.215.162.3 /pub/contrib/^[[K^[[A^[/users/studio4d/".. "/^K^K^K 198.82.161.244 /pub/msdos/test/.iLA^H^H^H/".^I^C^P95^H^H" 158.170.34.4 /ginger/ 192.216.46.98 /pub/incoming 198.4.75.44 /pub/users/studio4d/.. /^K^K^K 129.71.32.152 /pub/pub/ / 137.186.128.11 /in.coming/nev/nevster3a.jpg/^I/ 204.240.186.2 /pub/.haha/Site 128.196.127.73 /pub/uploads/. ^I ^I"/".^I^C^P.^I^L^A./ 128.223.6.19 /pub/lester/lasterm.r100.tar.Z/.^I^C^P(5sp)/.^I^L^A/ 128.196.127.73 /pub/uploads/. ^I ^I"/".^I^C^P.^I^L^A./ 128.223.6.19 /pub/lester/lasterm.r100.tar.Z/.^I^C^P(5sp)/.^I^L^A/ 198.53.64.8 /in.coming/upload.only/"^[[T^[[I^[[C"/.^O the chronic^O./ 157.252.10.250 /incoming 29.2.8.114 /rush/incoming/^L^A/ 128.196.127.73 + /pub/group/biatch/mcrb/ 128.100.5.10 /incoming/temp-hu/users/rick/tmp/old/ 204.91.31.73 /pub/incoming/mcrb/head.gif/ stones.com (BBS Warez) /pub/tmp/public/uploads/as128/ boombox.micro.umn.edu /pub/gopher/incoming/^I/ 140.114.78.231 pub/??? ftp.cs.tulane.edu ??? 129.71.32.152 /pub/.../.... 198.69.204.50 152.18.18.6 /pub/genesis/in 198.61.201.50 /pub/incoming 128.191.62.4 ??? panda.uiowa.edu /pub/contrib/^V^L^A^C^U^D^I^K/ aardvark.ucs.uoknor.edu l: nemir P: n0lamers 132.203.138.16 /upload/gargoyle 128.191.62.4 /pub/hidden/erdem3/ 165.254.127.3 /pub/ 128.195.10.26 /pub/hidden 140.129.80.1 /pub/upload 137.166.16.2 /pub/". ^Hsys" winner.com ??? ixc.net l: lokust p: 1800 198.69.201.50 /pub/incoming 131.239.2.100 /INCOMING/ 152.18.18.6 /pub/genesis/in 148.205.190.131 /pub/alfredo 204.183.221.4 /pub/dos/".. "/"\"/"^C^E^N^T^U^R^Y"/ 134.111.1.111 /pub/isis/incoming/AuctionDemo/istk/ADR/ 131.239.2.100 /incoming/".. "/".^I ^I" 158.250.12.233 /.1995/ 131.239.2.100 /incoming/. 129.71.32.152 /pub/.../.... 129.177.62.102 /pub/schubert/"..^I^I"/"^I" 129.71.32.152 /pub/ 137.186.128.11 /in.coming/new/ 140.114.78.231 /pub/Game/ENGLISH/ 165.254.127.3 ??? faxtalk.com /pub/???/ www.nano.co /pub/incoming/ 165.247.1.6 /pub/www/vcwtxl/unreadable/ 199.77.225.103 office95 & 95 stuff bstorm.bga.com ?? 192.160.13.5 /pub/supafag 193.213.20.33 /pub/incoming 192.215.162.3 /pub/contrib/"[[K^[[A^[[K 140.129.80 /pub/upload 137.166.16.2 /pub/ 140.114.78.231 /pub 128.187.2.20 /cs327/ABCD_Group-da 128.223.6.19 /pub/group/jpg/gifs/1 129.2.8.114 /rush/incoming 131.239.2.100 /incoming smithson.si.edu /pub/^I/kelly.jpg 128.223.6.19 /pub/lester/lasterm.r100.tar.Z 165.254.127.2 /pub/Incoming/tmp/ panda.uiowa.edu /doug/incoming/"tab"/ 132.235.3.151 L: mkendall p: Concrete 129.71.32.152 /pub/ 137.186.128.11 /in.coming/new/ byrd.mu.wvnet.edu /pub/pub 140.114.78.231 /pub/Game/ENGLISH/ nwcl.nwcl.net /incoming 165.254.127.3 ??? stones.com /pub/..^S^P^EC^T^R^E 128.100.5.10 /incoming//.../... 128.197.127.73 /pub/uploads winner.com /pub/in.coming 203.8.182.253 /tmp/"sample.dip<4sp>"/"^R00^K^I^E" 128.101.62.4 /pub/hidden/erdem3 137.186.128.11 /in.coming/nev 129.71.32.152 /pub/.../..../ 193.213.20.33 /pub/incoming 128.206.2.222 /pub/pc/incoming 192.215.162.3 /pub/contrib/"[[K^[[A^[[K 130.207.244.26 /pub/submissions/linux/XFree86-3.1.1 140.129.80.1 /pub/upload byrd.mu.wvnet.edu /pub/NiGHTMaRe/CuRe-95 137.166.16.2 /pub/ 129.173.4.5 /josko/wind/ 140.114.78.231 /pub 198.67.15.163 /pub 128.187.2.20 /cs327/ABCD_Group-data@bert-Desi/ 129.177.62.102 /pub/schubert 128.223.6.19 /pub/group/jpg/gifs/1 158.250.12.233 /.1995 129.2.8.114 /rush/incoming 198.69.201.50 /pub/incoming 131.239.2.100 /incoming winner.com /pub/in.coming/".. " smithson.si.edu /pub/^I/kelly.jpg 128.95.205.36 /private/ 128.174.252.1 /osumap/source_code/.map_sour.tar/CJ) 148.205.190.131 /pub/alfredo/CJmas.tar.Z/.a).a./ 128.223.6.19 /pub/dataflo/dataflo.old/.cache./......)....++/../ nwcl.nwcl.net /incoming 129.71.32.152 /pub/novell/.cache./++./++...)..+/ iia2.org u: jdoe p: gonaD! faxtalk.com pub/.^H^I/".^I^I^I^I^I 128.197.127.73 /pub/uploads 129.71.32.152 /pub/.../.... 203.8.182.253 /tmp/"sample.dip<4sp>"/"^R00^K^I^E" 137.186.128.11 /in.coming/new/ 128.101.62.4 /pub/hidden/erdem3 205.160.44.28 TELNET 129.0.0.1 128.206.2.222 128.206.2.222 /pub/user/^W^A^R^E^Z/ 158.250.12.233 /pub/hidden kids.kotel.co.kr /pub/ winner.com /in.coming/^I^E^I^E^I /^U^U^U^E^E^I/ 128.95.160.232 ftp.banyan.com /incoming/.unreadable^H/^C^N^T/ connectnet.com X52.52.28.46 L: warez P: warez X37.166.16.2 /pub 192.215.162.3 /pub/contrib cap.gwu.edu /pub/incoming ppp183.iadfw.net l:guest p:guest 132.203.138.16 /upload/gargoyle panda.uiowa.edu /doug/incoming/"tab"/ 129.71.32.152 /pub/ 137.186.128.11 /in.coming/new/ 165.247.1.6 /pub/www/vcwtxl/unreadable/ bstorm.bga.com 193.213.20.33 /pub/incoming 192.215.162.3 /pub/contrib/"[[K^[[A^[[K 140.129.80.1 /pub/upload 137.166.16.2 /pub/ 140.114.78.231 /pub 128.187.2.20 cs327/ABCD_Group-data@bert-Desi/ 128.223.6.19 /pub/group/jpg/gifs/1 129.2.8.114 /rush/incoming nwcl.nwcl.net /incoming 129.173.4.5 /josko/wind/ 198.67.15.163 /pub 129.177.62.102 /pub/schubert 158.250.12.233 /.1995 198.69.201.50 /pub/incoming 132.235.3.151 165.254.127.3 128.206.2.222 /pub/pc/incoming/.HA^H^A^H^A/T!^HW!^H!!^H^HC 129.71.32.152 18.83.0.45 /pub/kel/fig69.ps 128.196.127.73 stones.com /pub/.____/warez/ byrd.mu.wvnet.edu /.../..../ 18.30.0.190 /pub/kenm/ch12.ps.2/erenhi 192.17.3.3 /pub/usr/somebody/"..^D^W^I"/".. "/ 192.17.3.3 /pub/usr/somebody/..^I/.. / alaska.et.byu.edu (anon login) /ecgl/"tazizm.tar.GZ "/". cache " 128.83.153.241 login : gateway password : warez FSP Port: 31415 Ip#: 163.178.140.2 FSP Port: 3333 Ip#: 129.82.123.34 155.207.32.6 34565 128.36.0.36 /WWW/pub/images/escher/var/.cache+ ^H^H ^H ^H/^?^?^?^C^O^R^?^?^? 194.67.28.171 132.236.108.5 /pub/LII/Cello/drivers/. H^T ./.^N^A^F^T^A./ 128.103.161.65 /pub/.. ^H/^C^CS^I^I^I^H/ 128.134.1.1 Login: $H$iago Pass: inferno 192.215.162.3 in the pub/contrib/{chars} dir 128.134.1.1 L:$H$WkdLester P:hoodlum 128.175.11.47 incoming/^FuN 192.215.162.3 pub/contrib/^[[K^[[A^[[K 128.171.44.70 /paccom/incoming/outgoing/ 137.166.16.2 /pub/ 140.114.78.231 /pub alaska.et.byu.edu /ecgl/"tazizm.tar.GZ "/". cache " stones.com /pub/..^S^P^EC^T^R^E 128.195.1.1 /TeX/eplain/eplain/..cache.old/eplain/eplain/\/\/\ http://freeside.com/phrack.html 148.205.190.131 /pub/alfredo/ 140.129.80.1 /pub/upload/ /tmp/ 193.124.148.73 /pub/incomin/ 128.36.0.36 /tmp/ 137.166.16.2 /pub/.cache.old/.. / ftp.hawaii.edu /paccom/incoming/outgoing/...^H/ 128.146.209.34 /incoming/columbus/Untitel.tar 204.7.186.12 /pub/er / airpcs.com /pub/contrib/ 204.168.121.100 /pub/incoming/ 204.168.121.1 /pub/incoming/ 140.113.13.3 L: jungle P: Lancer16 128.169.76.67 /pub/dialup/incoming/..(5sp)/ 194.67.28.162 8888 155.207.32.6 34565 128.171.44.70 /paccom/incoming/outgoing/...^I/ 128.169.76.67 /pub/dialup/incoming/.. /^D^D^A^Y ^H/ 192.122.209.42 /incoming/laugh.wav/DEC/ 137.166.16.2 /pub/incoming/wrz||cache/ 128.169.76.67 /pub/dialup/incoming/.. <5sp>/^D^D^A^Y 192.215.162.3 /pub/contrib/^[[K^[[A^[[K/ 137.166.16.2 /pub/.cache.old/ Hector.turing.toronto.edu 6351 sam.com /..^A/..^N^H 128.83.153.241 anonymous 128.175.11.47 incoming/^FuN a.cs.uiuc.edu /pub/RE3^HADME3^H stenar.arnes.si Login: pcsoft Password: pcsoft 204.240.186.2 pub/.haha/Site 140.129.80.1 /pub/upload/.WA^R^EZ/ 137.166.16.2 /pub/..<2sp>/..<2sp>/..<2sp>/ 204.168.121.100 /pub/incoming 128.32.43.51 /pub/cd-rom/.[/ 204.168.121.1 /pub/incoming/W^AR^EZ 152.18.18.6 /pub/mcmahan/cyber 158.250.12.233 /.1995/ stones.com /pub/..^S^P^EC^T^R^E 128.195.1.1 /TeX/eplain/eplain/..cache.old/eplain/eplain/\/\/..^H^H^V^C^N^T 128.171.44.70 /paccom/incoming/outgoing/"... " 158.250.12.233 /.1995 merlot.welch.jhu.edu incoming/mclaren 192.216.46.98 /pub/incoming/game/". " pgu.karelia.ru L: guest P: demowork /u/guest/yyBBS/* (mine site.) moron.cs.msu.su /.1995/* (mucho warez!) ro.com /incoming/"\"/"^C^E^N^T^U^R^Y" stg.indy.net /tmp/"..(sp)(tab)"/". unreadable" 152.18.18.6 /pub/mcmahan/cyber/cyb.100fuq^H^H^H/carius 194.67.28.171 137.166.16.2 /pub/.cache.old/.temp/.sys 143.107.208.111 198.161.220.127 158.250.12.233/.1995 136.142.20.154 204.181.74.5 /incoming/"\"/"^C^E^N^T^U^R^Y" 204.160.88.10 L:stevep P:fuckoff 128.110.8.42 ". unreadable"/"^O^N^L^Y"/"MA^S^ON" 163.178.140.2 31415 143.106.23.20 9669 129.82.123.34 3333 128.195.1.1 /pub/zjw/mpeg/".. "/anonymous/TiE'95 129.138.6.90 /incoming/". 137.166.16.2/pub/.cache.old/.temp/.sys 204.7.186.12: /pub/er/Real[][] 142.66.3.29: /pub/incoming/.iLA^H^H^H/...^H^H...^H^H...^H^H 128.169.76.67: /pub/dialup/incoming/..<5sp>/^D^D^A^Y<2sp>^H scotch.csua.berkeley.edu/pub/acco/Messages/VTiSITE001 128.36.0.36: /WWW/pub/images/escher/var/.cache+<2sp>^H^H^H^H/^?^?^?^C ^O^R^?^?^? Site: 192.239.77.4 (Kelly Bundy Swap Shop) Dir: /incoming/mclaren/carpetech.gif/.. Site: 128.146.209.34 (NAFTA Site #10) Dir: /incoming/columbus/Untitel.tar<2sp>/^[[L Site: ftp.hawaii.edu Dir: /paccom/incoming/outgoing/... Site: 128.195.1.1 Dir: /TeX/eplain/eplain/..cache.old/eplain/eplain/\\/\\/..^H^H^C^N^T Site: 192.215.96.2 Dir: /users/bjhigh/incoming/<2sp>../$$$$^H^H^H^H Site: 137.112.40.250 Dir: /pub/incoming/^V^T^I/^E^X^P^R^E^S^S/ Site: 165.247.1.6 (ACCESS DENIED Site #2) Dir: /pub/www/vcwtx1/umreadable Site: 204.160.88.10 Login: stevep Pass: fuckoff Dir: ~/BBSWAREZ/ Site: 193.124.224.35 Dir: /pub/rfc/..^A^H^H/.^A^H^H