Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
FTP is Online
#31
Re: FTP is Online
mrthinlysliced post_id=949 time=1528806268 user_id=83 Wrote:Just a suggestion, but pre-create a file with that name in incoming, zero size, owned by someone else, not writeable.
I could but two months from now it's going to be another name.

It's just a bot or infected system hammering away at every directory in the FTP server. I have thousands of lines like this in the logs:
Code:
Tue Jun 12 12:00:56 2018 [pid 30577] [ftp] OK LOGIN: Client "163.22.83.32", anon password "test"
Tue Jun 12 12:00:58 2018 [pid 30579] [ftp] FAIL UPLOAD: Client "163.22.83.32", "/mirrors/ftp.sgi.com/support/Patches/public/globe/5.3/3386/Photo.scr", 0.00Kbyte/sec
Tue Jun 12 12:00:59 2018 [pid 30581] CONNECT: Client "163.22.83.32"
Tue Jun 12 12:00:59 2018 [pid 30580] [ftp] OK LOGIN: Client "163.22.83.32", anon password "test"
Tue Jun 12 12:01:02 2018 [pid 30582] [ftp] FAIL UPLOAD: Client "163.22.83.32", "/mirrors/ftp.sgi.com/support/Patches/public/globe/5.3/3463/Photo.scr", 0.00Kbyte/sec
Tue Jun 12 12:01:02 2018 [pid 30584] CONNECT: Client "163.22.83.32"
Tue Jun 12 12:01:03 2018 [pid 30583] [ftp] OK LOGIN: Client "163.22.83.32", anon password "test"
Tue Jun 12 12:01:06 2018 [pid 30585] [ftp] FAIL UPLOAD: Client "163.22.83.32", "/mirrors/ftp.sgi.com/support/Patches/public/globe/5.3/3510/Photo.scr", 0.00Kbyte/sec
Tue Jun 12 12:01:06 2018 [pid 30587] CONNECT: Client "163.22.83.32"
Tue Jun 12 12:01:07 2018 [pid 30586] [ftp] OK LOGIN: Client "163.22.83.32", anon password "test"
Tue Jun 12 12:01:09 2018 [pid 30588] [ftp] FAIL UPLOAD: Client "163.22.83.32", "/mirrors/ftp.sgi.com/support/Patches/public/globe/5.3/3526/Photo.scr", 0.00Kbyte/sec
Tue Jun 12 12:01:10 2018 [pid 30590] CONNECT: Client "163.22.83.32"
Tue Jun 12 12:01:10 2018 [pid 30589] [ftp] OK LOGIN: Client "163.22.83.32", anon password "test"
Tue Jun 12 12:01:13 2018 [pid 30591] [ftp] FAIL UPLOAD: Client "163.22.83.32", "/mirrors/ftp.sgi.com/support/Patches/public/globe/5.3/3565/Photo.scr", 0.00Kbyte/sec
Tue Jun 12 12:01:14 2018 [pid 30593] CONNECT: Client "163.22.83.32"
Tue Jun 12 12:01:14 2018 [pid 30592] [ftp] OK LOGIN: Client "163.22.83.32", anon password "test"
Tue Jun 12 12:01:17 2018 [pid 30594] [ftp] FAIL UPLOAD: Client "163.22.83.32", "/mirrors/ftp.sgi.com/support/Patches/public/globe/5.3/358/Photo.scr", 0.00Kbyte/sec
Tue Jun 12 12:01:18 2018 [pid 30596] CONNECT: Client "163.22.83.32"
jan-jaap Offline
SGI Collector

Posts: 144
Threads: 4
Joined: Jun 2018
Website Find Reply
06-12-2018, 01:15 PM
#32
Re: FTP is Online
Oh, this is another reason to make sure you've got no directories both readable and writable:

Code:
Mon Jun 11 12:49:45 2018 [pid 21930] [ftp] OK DOWNLOAD: Client "157.42.97.174", "/mirrors/ftp.mrynet.com/operatingsystems/SGI/f77to90/c13.html", 2615 bytes, 11.91Kbyte/sec
Mon Jun 11 12:49:45 2018 [pid 21930] [ftp] FAIL UPLOAD: Client "157.42.97.174", "/mirrors/ftp.mrynet.com/operatingsystems/SGI/f77to90/c13.html", 0.00Kbyte/sec
Mon Jun 11 12:49:47 2018 [pid 21930] [ftp] FAIL DOWNLOAD: Client "157.42.97.174", "/mirrors/ftp.mrynet.com/operatingsystems/SGI/f77to90/Photo.scr", 0.00Kbyte/sec
Mon Jun 11 12:49:48 2018 [pid 21930] [ftp] OK DOWNLOAD: Client "157.42.97.174", "/mirrors/ftp.mrynet.com/operatingsystems/SGI/f77to90/c14.html", 4551 bytes, 18.78Kbyte/sec
Mon Jun 11 12:49:49 2018 [pid 21930] [ftp] FAIL UPLOAD: Client "157.42.97.174", "/mirrors/ftp.mrynet.com/operatingsystems/SGI/f77to90/c14.html", 0.00Kbyte/sec
Mon Jun 11 12:49:50 2018 [pid 21930] [ftp] FAIL DOWNLOAD: Client "157.42.97.174", "/mirrors/ftp.mrynet.com/operatingsystems/SGI/f77to90/Photo.scr", 0.00Kbyte/sec
(rinse and repeat many many many times)

I'll leave the interpretation as an exercise to the reader Wink
jan-jaap Offline
SGI Collector

Posts: 144
Threads: 4
Joined: Jun 2018
Website Find Reply
06-12-2018, 01:20 PM
#33
Re: FTP is Online
FWIW I know it's never easy to deal with these automated trouble makers. I run fail2ban on my server to iptables them out of the way after a couple of strikes. Might be worth looking into.
mrthinlysliced Offline
Octane

Posts: 71
Threads: 5
Joined: May 2018
Find Reply
06-12-2018, 01:23 PM
#34
Re: FTP is Online
Guys it was just a mistake because one of our directories other than incoming was writable.

Fail2ban isn't gonna work for anonymous ftp
I'm the manager
Besides irix.cc, I run these sites:
projectkitsune.com
kazuo.io

Tezro
Octane2
Indigo2 IMPACT
Indigo2
3x O2
3x Indy

Raion Offline
Administrator
*******

Posts: 270
Threads: 46
Joined: Nov 2017
Discord: Umbra#0893
Website Find Reply
06-12-2018, 04:54 PM
#35
Re: FTP is Online
FTP server has been updated, 6.5.30 images have been added, and most of the submissions have been processed. We've also updated the rules and will be strictly enforcing these:

tar files should be relatively pathed, not with absolute pathing. No leading path names. Tar your files in the directory above them.

No .zip,.rar or any other banned formats.

No submissions full of MacOS resource forks.
I'm the manager
Besides irix.cc, I run these sites:
projectkitsune.com
kazuo.io

Tezro
Octane2
Indigo2 IMPACT
Indigo2
3x O2
3x Indy

Raion Offline
Administrator
*******

Posts: 270
Threads: 46
Joined: Nov 2017
Discord: Umbra#0893
Website Find Reply
07-31-2018, 08:54 PM
#36
RE: FTP is Online
Uploaded a checked and packed version of Maya 4.5 to ftp provided by Xerf . This include installer and additional docs with sample and tutorials.
With this Maya version we have a compleat collection of IRIX maya versions on FTP.
O2 O2 R12k  IRIS Crimson  Iris Crimson Elan R4400  Octane  Octane R10k
(This post was last modified: 09-11-2018, 12:10 PM by kikems.)
kikems Offline
Octane

Posts: 93
Threads: 12
Joined: May 2018
Find Reply
09-11-2018, 12:09 PM


Forum Jump:


Users browsing this thread: 1 Guest(s)