xml/ftp_banners.xml in recog-2.3.21 vs xml/ftp_banners.xml in recog-2.3.22
- old
+ new
@@ -412,11 +412,11 @@
<param pos="0" name="service.family" value="Serv-U"/>
<param pos="1" name="service.version"/>
<param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:serv-u_ftp_server:{service.version}"/>
</fingerprint>
- <fingerprint pattern="^Serv-U FTP[ -]Server v(\d+\.\S+) for WinSock ready\.*$">
+ <fingerprint pattern="^Serv-U FTP[ -]Server v(\d+\.\S+) for WinSock ready">
<description>Serv-U Serv-U with version on Windows</description>
<example service.version="2.5n">Serv-U FTP-Server v2.5n for WinSock ready...</example>
<example service.version="6.0">Serv-U FTP Server v6.0 for WinSock ready</example>
<param pos="0" name="service.vendor" value="Serv-U"/>
<param pos="0" name="service.product" value="Serv-U FTP Server"/>
@@ -427,11 +427,11 @@
<param pos="0" name="os.family" value="Windows"/>
<param pos="0" name="os.product" value="Windows"/>
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
</fingerprint>
- <fingerprint pattern="^Serv-U FTP[ -]Server v(\d+\.\S+) ready\.*$">
+ <fingerprint pattern="^Serv-U FTP[ -]Server v(\d+\.\S+) ready">
<description>Serv-U Serv-U with version </description>
<example service.version="7.2">Serv-U FTP Server v7.2 ready...</example>
<example service.version="14.0">Serv-U FTP Server v14.0 ready...</example>
<param pos="0" name="service.vendor" value="Serv-U"/>
<param pos="0" name="service.product" value="Serv-U FTP Server"/>
@@ -489,21 +489,21 @@
<param pos="0" name="service.family" value="vsFTPd"/>
<param pos="0" name="service.product" value="vsFTPd Extended"/>
<param pos="1" name="service.version"/>
</fingerprint>
- <fingerprint pattern="^OOPS: .*vsftp.*$">
+ <fingerprint pattern="^OOPS: .*vsftp">
<description>vsFTPd (Very Secure FTP Daemon) error message</description>
<example>OOPS: vsftpd: root is not mounted.</example>
<example>OOPS: cannot read user list file:/etc/vsftpd.user_list</example>
<param pos="0" name="service.vendor" value="vsFTPd Project"/>
<param pos="0" name="service.family" value="vsFTPd"/>
<param pos="0" name="service.product" value="vsFTPd"/>
<param pos="0" name="service.cpe23" value="cpe:/a:vsftpd_project:vsftpd:-"/>
</fingerprint>
- <fingerprint pattern="^FileZilla Server(?: version)? (?:v)?(\d\.[\w.]+(?: beta)?).*$">
+ <fingerprint pattern="^FileZilla Server(?: version)? (?:v)?(\d\.[\w.]+(?: beta)?)">
<description>FileZilla FTP Server</description>
<example service.version="0.9.2 beta">FileZilla Server version 0.9.2 beta</example>
<example service.version="0.9.13a beta">FileZilla Server version 0.9.13a beta</example>
<example service.version="0.9.54 beta">FileZilla Server 0.9.54 beta</example>
<example service.version="0.9.33 beta">FileZilla Server v0.9.33 beta</example>
@@ -516,11 +516,11 @@
<param pos="0" name="os.family" value="Windows"/>
<param pos="0" name="os.product" value="Windows"/>
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
</fingerprint>
- <fingerprint pattern="^\s{0,1024}APC FTP server ready\.$">
+ <fingerprint pattern="^\s{0,1000}APC FTP server ready\.$">
<description>APC device</description>
<example>APC FTP server ready.</example>
<param pos="0" name="service.vendor" value="APC"/>
<param pos="0" name="service.product" value="FTP"/>
<param pos="0" name="os.vendor" value="APC"/>
@@ -563,11 +563,11 @@
<param pos="0" name="hw.device" value="Storage"/>
<param pos="0" name="hw.product" value="Celerra"/>
<param pos="0" name="hw.cpe23" value="cpe:/h:emc:celerra_network_attached_storage:-"/>
</fingerprint>
- <fingerprint pattern="^JD FTP Server Ready.*$">
+ <fingerprint pattern="^JD FTP Server Ready">
<description>HP JetDirect printer</description>
<example>JD FTP Server Ready</example>
<example>JD FTP Server Ready.</example>
<param pos="0" name="service.vendor" value="HP"/>
<param pos="0" name="service.product" value="JetDirect"/>
@@ -613,11 +613,11 @@
<description>Nepenthes honeypot</description>
<param pos="0" name="service.family" value="Nepenthes"/>
<param pos="0" name="service.product" value="Nepenthes"/>
</fingerprint>
- <fingerprint pattern="^[^ ]{1,512} IBM FTP CS (V1R\d+) at ([^,]*),.*">
+ <fingerprint pattern="^[^ ]{1,512} IBM FTP CS (V1R\d+) at ([^,]*),">
<description>IBM z/OS FTP Service</description>
<example>SFTPD1 IBM FTP CS V1R4 at x.y.z, 21:02:19 on 2007-12-15.</example>
<param pos="0" name="service.vendor" value="IBM"/>
<param pos="0" name="service.product" value="z/OS FTP Server"/>
<param pos="0" name="os.vendor" value="IBM"/>
@@ -674,11 +674,11 @@
<param pos="0" name="os.family" value="StorEdge"/>
<param pos="1" name="os.product"/>
<param pos="0" name="os.device" value="Storage"/>
</fingerprint>
- <fingerprint pattern="(?i)^AXIS (\S+) .* Camera(?:\s+version)?\s+(\S+) .*">
+ <fingerprint pattern="(?i)^AXIS (\S+) .* Camera(?:\s+version)?\s+(\S+)">
<description>Axis Network Camera</description>
<example hw.product="2100" hw.version="2.43">Axis 2100 Network Camera 2.43 Nov 04 2008 ready.</example>
<example hw.product="216FD" hw.version="4.47">AXIS 216FD Network Fixed Dome Camera 4.47 (Mar 13 2008) ready.</example>
<example hw.product="214" hw.version="4.49">AXIS 214 PTZ Network Camera 4.49 (Oct 05 2009) ready</example>
<example hw.product="205" hw.version="4.05">AXIS 205 Network Camera version 4.05 (Sep 27 2004) ready.</example>
@@ -691,11 +691,11 @@
<param pos="0" name="os.vendor" value="AXIS"/>
<param pos="0" name="os.family" value="Linux"/>
<param pos="0" name="os.device" value="IP Camera"/>
</fingerprint>
- <fingerprint pattern="(?i)^AXIS (\S+) (?:(?:Mk II )?Video) (?:Encoder|Encoder Blade|Module|Server|Decoder) (\S+) .*">
+ <fingerprint pattern="(?i)^AXIS (\S+) (?:(?:Mk II )?Video) (?:Encoder|Encoder Blade|Module|Server|Decoder) (\S+)">
<description>Axis Video encoders/servers</description>
<example hw.product="Q7406">AXIS Q7406 Video Encoder Blade 5.01 (Aug 01 2008) ready.</example>
<example hw.product="241Q">AXIS 241Q Video Server 4.47.2 (Dec 11 2008) ready.</example>
<example hw.version="5.07.2">AXIS P7701 Video Decoder 5.07.2 (Apr 20 2010) ready.</example>
<example hw.product="Q7401" hw.version="5.01">AXIS Q7401 Video Encoder 5.01 (Aug 01 2008) ready.</example>
@@ -707,11 +707,11 @@
<param pos="0" name="hw.device" value="Video Encoder"/>
<param pos="0" name="os.vendor" value="AXIS"/>
<param pos="0" name="os.family" value="Linux"/>
</fingerprint>
- <fingerprint pattern="(?i)^AXIS (\S+) (?:(?:Mk II )?IO Audio) (?:Encoder|Encoder Blade|Module|Server|Decoder) (\S+) .*">
+ <fingerprint pattern="(?i)^AXIS (\S+) (?:(?:Mk II )?IO Audio) (?:Encoder|Encoder Blade|Module|Server|Decoder) (\S+)">
<description>Axis Audio encoders/servers</description>
<example hw.product="P8221" hw.version="5.10.2">AXIS P8221 IO Audio Module 5.10.2 (Nov 07 2011) ready.</example>
<param pos="0" name="hw.vendor" value="Axis"/>
<param pos="1" name="hw.product"/>
<param pos="2" name="hw.version"/>
@@ -773,11 +773,11 @@
<param pos="0" name="hw.vendor" value="Ricoh"/>
<param pos="0" name="hw.device" value="Multifunction Device"/>
<param pos="1" name="hw.product"/>
</fingerprint>
- <fingerprint pattern="^Xerox WorkCentre ([A-Za-z0-9]+).*$" certainty="1.0">
+ <fingerprint pattern="^Xerox WorkCentre ([A-Za-z0-9]+)" certainty="1.0">
<description>Xerox WorkCentre</description>
<example hw.product="6605DN">Xerox WorkCentre 6605DN</example>
<example hw.product="3615">Xerox WorkCentre 3615</example>
<example hw.product="6505DN">Xerox WorkCentre 6505DN</example>
<example hw.product="6505N">Xerox WorkCentre 6505N</example>
@@ -802,11 +802,11 @@
<param pos="0" name="hw.family" value="Phaser"/>
<param pos="0" name="hw.device" value="Printer"/>
<param pos="1" name="hw.product"/>
</fingerprint>
- <fingerprint pattern="^XEROX (\d+) Wide Format .*$" certainty="1.0">
+ <fingerprint pattern="^XEROX (\d+) Wide Format" certainty="1.0">
<description>Xerox Wide Format Series of Printers</description>
<example>XEROX 6204 Wide Format FTP server ready</example>
<param pos="0" name="os.vendor" value="Xerox"/>
<param pos="0" name="os.family" value="Wide Format"/>
<param pos="0" name="os.device" value="Printer"/>
@@ -838,22 +838,22 @@
<param pos="0" name="hw.vendor" value="Lexmark"/>
<param pos="0" name="hw.device" value="Printer"/>
<param pos="2" name="hw.product"/>
</fingerprint>
- <fingerprint pattern="^.*Lexmark (\S+) FTP Server (\S+) ready\.?$" certainty="1.0" flags="REG_ICASE">
+ <fingerprint pattern="Lexmark (\S+) FTP Server (\S+) ready\.?$" certainty="1.0" flags="REG_ICASE">
<description>Lexmark printer with OS version</description>
<example hw.product="T654" os.version="NR.APS.F368">ET0021718 Lexmark T654 FTP Server NR.APS.F368 ready.</example>
<param pos="0" name="os.vendor" value="Lexmark"/>
<param pos="0" name="os.device" value="Printer"/>
<param pos="2" name="os.version"/>
<param pos="0" name="hw.vendor" value="Lexmark"/>
<param pos="0" name="hw.device" value="Printer"/>
<param pos="1" name="hw.product"/>
</fingerprint>
- <fingerprint pattern="^.*Lexmark (\S+) FTP Server ready\.?$" certainty="1.0" flags="REG_ICASE">
+ <fingerprint pattern="Lexmark (\S+) FTP Server ready\.?$" certainty="1.0" flags="REG_ICASE">
<description>Lexmark printer</description>
<example hw.product="X500">Lexmark X500 FTP server ready</example>
<param pos="0" name="os.vendor" value="Lexmark"/>
<param pos="0" name="os.device" value="Printer"/>
<param pos="0" name="hw.vendor" value="Lexmark"/>
@@ -1112,11 +1112,11 @@
<param pos="0" name="hw.vendor" value="Toshiba"/>
<param pos="0" name="hw.device" value="Multifunction Device"/>
<param pos="0" name="hw.product" value="e-STUDIO"/>
</fingerprint>
- <fingerprint pattern="^.*Lexmark Optra (\S+) FTP Server (\S+) ready\.$" certainty="1.0">
+ <fingerprint pattern="Lexmark Optra (\S+) FTP Server (\S+) ready\.$" certainty="1.0">
<description>Lexmark Optra Printer</description>
<example os.product="T612">lex142785470853 Lexmark Optra T612 FTP Server 3.20.30 ready.</example>
<example os.version="3.20.20">oppr1.s02504.us Lexmark Optra T610 FTP Server 3.20.20 ready.</example>
<param pos="0" name="os.vendor" value="Lexmark"/>
<param pos="0" name="os.family" value="Optra"/>
@@ -1367,11 +1367,11 @@
<param pos="1" name="host.name"/>
<param pos="2" name="os.version"/>
<param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:{os.version}"/>
</fingerprint>
- <fingerprint pattern="^.{0,1024} FTP server \(MikroTik (\d\.[\w\.]+)\) ready\.?$">
+ <fingerprint pattern="^.{0,1000} FTP server \(MikroTik (\d\.[\w\.]+)\) ready\.?$">
<description>MikroTik with description</description>
<example os.version="6.43.16">Super Thing_Place- FTP server (MikroTik 6.43.16) ready</example>
<example os.version="6.43.16beta2">Super Thing_Place- FTP server (MikroTik 6.43.16beta2) ready</example>
<example os.version="6.43.16rc56">Super Thing_Place- FTP server (MikroTik 6.43.16rc56) ready</example>
<param pos="0" name="os.vendor" value="MikroTik"/>
@@ -1791,8 +1791,22 @@
<param pos="0" name="service.vendor" value="NetWin"/>
<param pos="0" name="service.product" value="SurgeFTP"/>
<param pos="2" name="service.version"/>
<param pos="0" name="service.cpe23" value="cpe:/a:netwin:surgeftp:{service.version}"/>
<param pos="1" name="host.name"/>
+ </fingerprint>
+
+ <fingerprint pattern="^CyberPower Systems FTP Server Ready">
+ <description>CyberPower UPS Device</description>
+ <example>CyberPower Systems FTP Server Ready.</example>
+ <param pos="0" name="hw.vendor" value="CyberPower"/>
+ <param pos="0" name="hw.device" value="Power Device"/>
+ </fingerprint>
+
+ <fingerprint pattern="^Printer's ftp server (?:\d+) Please login with USER and PASS\.$">
+ <description>Weidmüller Printer</description>
+ <example>Printer's ftp server 530 Please login with USER and PASS.</example>
+ <param pos="0" name="hw.vendor" value="Weidmüller"/>
+ <param pos="0" name="hw.device" value="Printer"/>
</fingerprint>
</fingerprints>
\ No newline at end of file