SYSMGR

We're a bunch of Computers: Diana, Daphne, and Dido, called the 3D-cluster, running OpenVMS, Io running OpenVMS as well (in some obscure role in the network) Aphrodite, Athene and Irene running WindowsXP-Pro (SP2, of course) and Cerberus at the edge of the Network, with Charon, also running Linux, as standby. SYSMGR takes care of us.

Monday, February 27

27-Feb-2006 - 2

New software
tested on Athene, started with the portal: e107. Set up a pro-defined look-and-feel, made some changes in configuration and texts - and blew it all up. Re-installed the product and redone some of these, leaving out what I now know to be wrong - and blew it up once more. At least, I think...
Looks like fun but great care to be taken: it's unstable outside the tracks, so far.
Security.
FTP
just one more doing a lot:

%%%%%%%%%%% OPCOM 27-FEB-2006 23:37:25.08 %%%%%%%%%%%
Message from user TCPIP$FTP on DIANA
User Name: anonymous
Source: tigershark.cyberlink.com
Status: NOPRIV -- File access violation
Object: WEB_DISK:[public.anonymous.060227174108p]

He took 7,5 seconds to do it all:
27-FEB-2006 23:37:23.59 User:anonymous logged in ident:Ugpuser@home.com from Host:tigershark.cyberlink.com
27-FEB-2006 23:37:24.86 User:anonymous ident:Ugpuser@home.com status:00010001 CWD dir:WEB_DISK:[public.anonymous]
27-FEB-2006 23:37:30.21 User:anonymous ident:Ugpuser@home.com logged out

Someone trying to dump hist stuff?
%TCPIP-I-FTP_SESCON, FTP SERVER: session connection from tigershark.cyberlink.com at 27-FEB-2006 23:37:22.81
%TCPIP-I-FTP_NODE, client host name: tigershark.cyberlink.com
%TCPIP-I-FTP_USER, user name: anonymous
%TCPIP-I-FTP_OBJ, object: WEB_DISK:[public.anonymous.060227174108p]
%TCPIP-I-FTP_CHINFO, TCPIP$FTPC00002: Failed to create directory
%SYSTEM-F-NOPRIV, insufficient privilege or object protection violation
%TCPIP-I-FTP_NODE, client host name: tigershark.cyberlink.com
%TCPIP-I-FTP_USER, user name: anonymous
%TCPIP-I-FTP_OBJ, object: /pub/
%TCPIP-I-FTP_CHINFO, TCPIP$FTPC00002: Failed to set default directory
%SYSTEM-W-BADIRECTORY, bad directory file format

and trying to access the following lot - with the same results:
%TCPIP-I-FTP_OBJ, object: /public/
%TCPIP-I-FTP_OBJ, object: /_vti_pvt/
%TCPIP-I-FTP_OBJ, object: /_vti_txt/
%TCPIP-I-FTP_OBJ, object: /_vti_cfg/
%TCPIP-I-FTP_OBJ, object: /_vti_log/
%TCPIP-I-FTP_OBJ, object: /_vti_cnf/
%TCPIP-I-FTP_OBJ, object: /_private/
%TCPIP-I-FTP_OBJ, object: /incoming/
%TCPIP-I-FTP_OBJ, object: /pub/incoming/
%TCPIP-I-FTP_OBJ, object: /public/incoming/
%TCPIP-I-FTP_OBJ, object: /public_html/
%TCPIP-I-FTP_OBJ, object: /upload/
%TCPIP-I-FTP_OBJ, object: /wwwroot/
%TCPIP-I-FTP_OBJ, object: /mailroot/
%TCPIP-I-FTP_OBJ, object: /ftproot/
%TCPIP-I-FTP_OBJ, object: /home/
%TCPIP-I-FTP_OBJ, object: /images/
%TCPIP-I-FTP_OBJ, object: /web/
%TCPIP-I-FTP_OBJ, object: /www/
%TCPIP-I-FTP_OBJ, object: /html/
%TCPIP-I-FTP_OBJ, object: /cgi-bin/
%TCPIP-I-FTP_OBJ, object: /usr/
%TCPIP-I-FTP_OBJ, object: /usr/incoming/
%TCPIP-I-FTP_OBJ, object: /temp/
%TCPIP-I-FTP_OBJ, object: /~temp/
%TCPIP-I-FTP_OBJ, object: /tmp/
%TCPIP-I-FTP_OBJ, object: /~tmp/
%TCPIP-I-FTP_OBJ, object: /outgoing/
%TCPIP-I-FTP_OBJ, object: /anonymous/
%TCPIP-I-FTP_OBJ, object: /anonymous/_vti_pvt/
%TCPIP-I-FTP_OBJ, object: /anonymous/_vti_cnf/
%TCPIP-I-FTP_OBJ, object: /anonymous/incoming/
%TCPIP-I-FTP_OBJ, object: /anonymous/pub/
%TCPIP-I-FTP_OBJ, object: /anonymous/public/

and logs out - without doing any harm (and without having dumped ANYTHING)
%TCPIP-I-FTP_SESDCN, FTP SERVER: session disconnection from tigershark.cyberlink.com at 27-FEB-2006 23:37:30.32
Just two known sources for mail (relaying attempts) and a few that are known spammers:
27-FEB-2006 03:38:56.28 NOSPAMRLY 221.140.55.69 louisjin@netian.com
27-FEB-2006 04:22:34.53 NOSPAMRLY 125.188.63.10 gjwns_22@daum.net
27-FEB-2006 05:00:21.22 CLNTINRBL 67.173.109.132
27-FEB-2006 05:00:27.58 CLNTINRBL 67.173.109.132
27-FEB-2006 05:00:35.39 CLNTINRBL 67.173.109.132
27-FEB-2006 23:53:05.07 CLNTINRBL 66.57.215.132

Got a number of spam messages that go through.

0 Comments:

Post a Comment

<< Home