home

ftp-osl.osuosl.org

OSU Open Source Lab

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Eugene, Oregon within the United States which resides on the Network for Education and Research in Oregon (NERO) network.
Registrar:
GoDaddy.com, LLC (R91-LROR)

Server location:
Oregon, United States (US)

ASN:
AS3701 NERONET - Oregon Joint Graduate Schools of Engineering,US

Root domain:
osuosl.org

Whois:
1 osuosl.org record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Trend Micro House Call
TROJ_GE.269D89E4
100.00%

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

The domain ftp-osl.osuosl.org has been seen to resolve to the following IP address.

140.211.166.134
ftp-osl.osuosl.org
September 4, 2014

File downloads found at URLs served by ftp-osl.osuosl.org.

2 / 68      (Malware)
http://ftp-osl.osuosl.org/pub/gnome/binaries/win32/easytag/.../easytag-2.1.10-setup.exe  (e84a4574efc5bfced58f3a1643a5f5f4)

The following file have been seen to comunicate with ftp-osl.osuosl.org in live environments.

TCP » 140.211.166.134:80
apptrailers.exe

URL:
http://ftp-osl.osuosl.org/

Web server:
Apache

deluge-torrent.org

drupal.org

musicbrainz.org

xiph.org

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.