you dont learn, eh?
damn.
bash# cd /var/log
bash# cat messages |grep 194.85
bash# cat syslog|grep 'Blocked attempt'
(...)
Sep 3 15:02:47 tcs-web mountd[21850]: Blocked attempt of 194.85.102.79 to
mount
^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P
Sep 3 15:15:32 tcs-web in.rlogind[32119]: connect from root@194.85.102.79
Sep 3 15:18:32 tcs-web in.rlogind[32222]: connect from root@194.85.102.79
Sep 3 15:34:42 tcs-web in.telnetd[32420]: connect from root@194.85.102.79
Sep 3 15:41:11 tcs-web in.telnetd[32542]: connect from root@194.85.102.79
Sep 3 15:52:41 tcs-web in.telnetd[32702]: connect from root@194.85.102.79
Sep 3 15:59:24 tcs-web in.telnetd[76]: connect from root@194.85.102.79
Sep 3 16:02:05 tcs-web in.telnetd[114]: connect from root@194.85.102.79
Sep 3 16:24:39 tcs-web in.telnetd[416]: connect from root@194.85.102.79
Sep 3 16:27:31 tcs-web in.telnetd[520]: connect from root@194.85.102.79
Sep 3 16:34:51 tcs-web in.telnetd[597]: connect from root@194.85.102.79
Sep 3 16:46:26 tcs-web in.telnetd[806]: connect from root@194.85.102.79
bash# cat /etc/inetd.conf
(...)
# End of inetd.conf.
telnet stream tcp nowait root /usr/sbin/tcpd in.telnetd
bash#
h0h0h0, thats just eleet shee1t hum?
"ahh fuck how did i get here!!"
well.. you got here like you get in
all sites you deface. by rpc.mountd overflow, using some w4r3z you g0t at
efn3t or r00tshell or whatever! @%$#@ coz you dont code your own shit, thats
obvious :)
stop being so fucking lame. i mean, get a bullet in your head, suckass.
and oh, we wont do this re-defacements anymore. we'll just ignore you all, kiddies. you have been owned. thats not gonna change. so remember that.
props. v00d00, every1 from uneek tech, NYS.
-- bl0w.