Skip to content
Permalink
main
Switch branches/tags
Go to file
 
 
Cannot retrieve contributors at this time
<html><head><title>oh well.</title></head>
<body bgcolor="black" text="#FFFFFF" link="red">
<p><br>
<center>
<font face="arial" size="+1">
oh 0h.. h3ll0 k1dd13z.. j00 4r3 0wn3d 4g41n... h0h0h0 b334tch3z!#%!@<br>
</font></center>
<p>
you dont learn, eh?
<br>damn.
<p>
<font face="verdana" size="3">
bash# cd /var/log<br>
bash# cat syslog|grep 'Blocked attempt'<br>
(...)<br>
Sep 3 15:02:47 tcs-web mountd[21850]: Blocked attempt of 194.85.102.79 to
mount
^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P
<p>
bash# cat messages |grep 194.85<br>
Sep 3 15:15:32 tcs-web in.rlogind[32119]: connect from root@194.85.102.79
<br>
Sep 3 15:18:32 tcs-web in.rlogind[32222]: connect from root@194.85.102.79
<br>
Sep 3 15:34:42 tcs-web in.telnetd[32420]: connect from root@194.85.102.79
<br>
Sep 3 15:41:11 tcs-web in.telnetd[32542]: connect from root@194.85.102.79
<br>
Sep 3 15:52:41 tcs-web in.telnetd[32702]: connect from root@194.85.102.79
<br>
Sep 3 15:59:24 tcs-web in.telnetd[76]: connect from root@194.85.102.79<br>
Sep 3 16:02:05 tcs-web in.telnetd[114]: connect from root@194.85.102.79<br>
Sep 3 16:24:39 tcs-web in.telnetd[416]: connect from root@194.85.102.79<br>
Sep 3 16:27:31 tcs-web in.telnetd[520]: connect from root@194.85.102.79<br>
Sep 3 16:34:51 tcs-web in.telnetd[597]: connect from root@194.85.102.79<br>
Sep 3 16:46:26 tcs-web in.telnetd[806]: connect from root@194.85.102.79<br>
bash# cat /etc/inetd.conf<br>
(...)<br>
# End of inetd.conf.<br>
telnet stream tcp nowait root /usr/sbin/tcpd in.telnetd<br>
bash#<p></font>
HAHAHAH!@#@! this sounds like a joke. they need to activate telnetd just to
get the files. #!@ they didnt even bother to clean the l0gz.<br>
h0h0h0, thats just eleet shee1t hum?
<p>"ahh fuck how did i get here!!"<br>well.. you got here like you get in
all sites you deface. by rpc.mountd overflow, using some w4r3z you g0t at
efn3t or r00tshell or whatever! @%$#@ coz you dont code your own shit, thats
obvious :)<br>
<br>stop being so fucking lame. i mean, get a bullet in your head, suckass.
<p>and oh, we wont do this re-defacements anymore. we'll just ignore you
all, kiddies. you have been owned. thats not gonna change. so remember that.
<p>
<p>props. v00d00, every1 from uneek tech, NYS.
<p>-- bl0w.
</font></body>
</html>
<!-- www.attrition.org web hack mirror - watermark or something -->