Linux - SecurityThis forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Distribution: Yellow Dog, FreeBSD 6, SuSe 10, Red Hat EL
Posts: 3
Rep:
irc convo, anyone speak Romanian?
I recently did some forensics on a compromised red hat 6.2 system. The attacker used Psybnc to turn into an irc proxy and i intercepted this convo. Anyone know any Romanian (or whatever it is) that can tell me what this means? The part in english is very interesting.
USER smoke smoke 127.0.0.1 :tai-pan
NICK smoker
NOTICE AUTH :*** Looking up your hostname
NOTICE AUTH :*** Checking Ident
NOTICE AUTH :*** Found your hostname
:Diemen.NL.EU.Undernet.org 433 * smoker :Nickname is already in use.
NICK smoke
:Diemen.NL.EU.Undernet.org 433 * smoke :Nickname is already in use.
NICK :smk
PING :2002921664
PONG :2002921664
:Diemen.NL.EU.Undernet.org 001 smk :Welcome to the Internet Relay Network, smk
:Diemen.NL.EU.Undernet.org 002 smk :Your host is Diemen.NL.EU.Undernet.org, running version u2.10.11.04
:Diemen.NL.EU.Undernet.org 003 smk :This server was created Tue Jan 7 2003 at 12:58:41 CET
:Diemen.NL.EU.Undernet.org 004 smk Diemen.NL.EU.Undernet.org u2.10.11.04 dioswkgx biklmnopstvr bklov
:Diemen.NL.EU.Undernet.org 005 smk WHOX WALLCHOPS WALLVOICES USERIP CPRIVMSG CNOTICE SILENCE=15 MODES=6 MAXCHANNELS=12 MAXBANS=45 NICKLEN=9 TOPICLEN=160 AWAYLEN=160 KICKLEN=160 :are supported by this server
:Diemen.NL.EU.Undernet.org 005 smk CHANTYPES=#& PREFIX=(ov)@+ CHANMODES=b,k,l,imnpstr CASEMAPPING=rfc1459 NETWORK=UnderNet :are supported by this server
:Diemen.NL.EU.Undernet.org 251 smk :There are 41988 users and 62418 invisible on 34 servers
:Diemen.NL.EU.Undernet.org 252 smk 81 :operator(s) online
:Diemen.NL.EU.Undernet.org 253 smk 161 :unknown connection(s)
:Diemen.NL.EU.Undernet.org 254 smk 44110 :channels formed
:Diemen.NL.EU.Undernet.org 255 smk :I have 5418 clients and 1 servers
PONG :diemen.nl.eu.undernet.org
:Diemen.NL.EU.Undernet.org NOTICE smk :Highest connection count: 8272 (8271 clients)
:Diemen.NL.EU.Undernet.org 375 smk :- Diemen.NL.EU.Undernet.org Message of the Day -
:Diemen.NL.EU.Undernet.org 372 smk :Welcome to the Planet Internet Undernet IRC Server
:Diemen.NL.EU.Undernet.org 372 smk :Type /MOTD to read the AUP before continuing using this service.
:Diemen.NL.EU.Undernet.org 372 smk :The message of the day was last changed: 2003-1-20 13:2
:Diemen.NL.EU.Undernet.org 376 smk :End of /MOTD command.
:Diemen.NL.EU.Undernet.org NOTICE smk :on 1 ca 1(4) ft 10(10)
MODE smk +i
:smk!~smoke@dept.cs.utsa.edu MODE smk :+i
USERHOST smk
:Diemen.NL.EU.Undernet.org 302 smk :smk=+~smoke@dept.cs.utsa.edu
JOIN #gold
:smk!~smoke@dept.cs.utsa.edu JOIN :#gold
:Diemen.NL.EU.Undernet.org 332 smk #gold :X
:Diemen.NL.EU.Undernet.org 333 smk #gold X 1047471355
:Diemen.NL.EU.Undernet.org 353 smk @ #gold :smk orbu` @smoker _Nevermor jmk556 Forzza`s smoke jmk elaine XpErIeNcE Akasha smoker-- smoke--- +Saruman @X
:Diemen.NL.EU.Undernet.org 366 smk #gold :End of /NAMES list.
WHO #gold
:Diemen.NL.EU.Undernet.org 352 smk #gold ~smoke dept.cs.utsa.edu *.undernet.org smk H :0 tai-pan
:Diemen.NL.EU.Undernet.org 352 smk #gold smoke OrB.users.undernet.org *.undernet.org orbu` Hx :3 Just OrBu
:Diemen.NL.EU.Undernet.org 352 smk #gold smoke sm0ke.users.undernet.org *.undernet.org smoker H@x :3 tai-pan
:Diemen.NL.EU.Undernet.org 352 smk #gold smoke demonyus.com *.undernet.org _Nevermor H :3 ravens
:Diemen.NL.EU.Undernet.org 352 smk #gold smoke 66.252.10.244 *.undernet.org jmk556 H :3 ravens
:Diemen.NL.EU.Undernet.org 352 smk #gold smoke 66.252.10.166 *.undernet.org Forzza`s H :3 Forzza_s
:Diemen.NL.EU.Undernet.org 352 smk #gold smoke I.am.a.linux-pro.net *.undernet.org smoke G :3 $moke
:Diemen.NL.EU.Undernet.org 352 smk #gold ~ravens junior.Stanford.EDU *.undernet.org jmk H :3 abyssus abyssum INVOCAT
:Diemen.NL.EU.Undernet.org 352 smk #gold ~elaine junior.Stanford.EDU *.undernet.org elaine H :3 elaine
:Diemen.NL.EU.Undernet.org 352 smk #gold danxp apocalypse.devilsown.net *.undernet.org XpErIeNcE H :3 xp
:Diemen.NL.EU.Undernet.org 352 smk #gold danxp apocalypse.devilsown.net *.undernet.org Akasha Hd :3 Queen of the dammed
:Diemen.NL.EU.Undernet.org 352 smk #gold ~spectrum 65-37-14-80.nrp2.roc.ny.frontiernet.net *.undernet.org smoker-- H :3 3l33t
:Diemen.NL.EU.Undernet.org 352 smk #gold ~spectrum 65-37-14-80.nrp2.roc.ny.frontiernet.net *.undernet.org smoke--- H :3 3l33t
:Diemen.NL.EU.Undernet.org 352 smk #gold ~spectrum ns6.users.undernet.org *.undernet.org Saruman H+x :3 3l33t
:Diemen.NL.EU.Undernet.org 352 smk #gold cservice undernet.org *.undernet.org X H@d :3 For help type: /msg X help
:Diemen.NL.EU.Undernet.org 315 smk #gold :End of /WHO list.
MODE #gold
:Diemen.NL.EU.Undernet.org 324 smk #gold +stn
:Diemen.NL.EU.Undernet.org 329 smk #gold 1025895363
JOIN #electric_reality
:smk!~smoke@dept.cs.utsa.edu JOIN :#electric_reality
:Diemen.NL.EU.Undernet.org 332 smk #electric_reality :lmc
:Diemen.NL.EU.Undernet.org 333 smk #electric_reality smoker 1047149171
:Diemen.NL.EU.Undernet.org 353 smk @ #electric_reality :smk smoker smoke @paxy @xlogic- @Aramis @_p1mp @ic3 @addy @icele @XpErIeNcE @ice @xp_ @paxi @freedom @twis @xlogicS @SubPoint @claudiu @Sm0ck3r @RSE
:Diemen.NL.EU.Undernet.org 366 smk #electric_reality :End of /NAMES list.
WHO #electric_reality
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality ~smoke dept.cs.utsa.edu *.undernet.org smk H :0 tai-pan
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality smoke sm0ke.users.undernet.org *.undernet.org smoker Hx :3 tai-pan
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality smoke I.am.a.linux-pro.net *.undernet.org smoke G :3 $moke
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality ~xlogic sec.nous.soft.net *.undernet.org paxy H@ :3 paxi
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality ~xlogic 66.220.12.162 *.undernet.org xlogic- G@ :3 xlogic
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality armando my.admin.isabitch.net *.undernet.org Aramis H@ :3 Aramis
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality ~pimp ns2.vitaven.com *.undernet.org _p1mp G@ :3 got weed?
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality ~ice 216.231.37.52 *.undernet.org ic3 G@ :3 ice
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality ~addy addy.users.undernet.org *.undernet.org addy G@x :3 jeg er den bedste!jeg er fra UnC!
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality ~ice 206.183.13.165 *.undernet.org icele G@ :3 ice
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality danxp apocalypse.devilsown.net *.undernet.org XpErIeNcE H@ :3 xp
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality ~ice iceX.users.undernet.org *.undernet.org ice G@x :3 ice
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality ~mautzi 200.163.68.122 *.undernet.org xp_ H@ :3 From your sweet breath comes the dawn of my death
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality ~xlogic is.nnet.net *.undernet.org paxi H@ :3 fishbone
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality ~cozu cozu.users.undernet.org *.undernet.org freedom G@x :3 freedom .
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality twis twis.users.undernet.org *.undernet.org twis G@x :3
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality ~xlogic 164.164.149.13 *.undernet.org xlogicS G@ :3 PaXing
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality ~rmx brain17.users.undernet.org *.undernet.org SubPoint H@x :3 rmx
MODE #electric_reality
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality ~mautzi xxxnudes.users.undernet.org *.undernet.org claudiu H@x :3 From your sweet breath comes the dawn of my death
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality ~mautzi cvv2.users.undernet.org *.undernet.org Sm0ck3r H@x :3 From your sweet breath comes the dawn of my death
:Diemen.NL.EU.Undernet.org 352 smk #electric_reality ~rs mars.vosn.net *.undernet.org RSE H@ :3 97.4
:Diemen.NL.EU.Undernet.org 315 smk #electric_reality :End of /WHO list.
:Diemen.NL.EU.Undernet.org 324 smk #electric_reality +stn
:Diemen.NL.EU.Undernet.org 329 smk #electric_reality 1002786386
JOIN #ircshells
:smk!~smoke@dept.cs.utsa.edu JOIN :#ircshells
:Diemen.NL.EU.Undernet.org 353 smk @ #ircshells :smk smoker _Nevermor jmk556 smoke jmk XpErIeNcE Akasha xp_ smoker-- DarkCage claudiu GaBelo smoke--- Saruman `0wNeR
:Diemen.NL.EU.Undernet.org 366 smk #ircshells :End of /NAMES list.
WHO #ircshells
:Diemen.NL.EU.Undernet.org 352 smk #ircshells ~smoke dept.cs.utsa.edu *.undernet.org smk H :0 tai-pan
:Diemen.NL.EU.Undernet.org 352 smk #ircshells smoke sm0ke.users.undernet.org *.undernet.org smoker Hx :3 tai-pan
:Diemen.NL.EU.Undernet.org 352 smk #ircshells smoke demonyus.com *.undernet.org _Nevermor H :3 ravens
:Diemen.NL.EU.Undernet.org 352 smk #ircshells smoke 66.252.10.244 *.undernet.org jmk556 H :3 ravens
:Diemen.NL.EU.Undernet.org 352 smk #ircshells smoke I.am.a.linux-pro.net *.undernet.org smoke G :3 $moke
:Diemen.NL.EU.Undernet.org 352 smk #ircshells ~ravens junior.Stanford.EDU *.undernet.org jmk H :3 abyssus abyssum INVOCAT
:Diemen.NL.EU.Undernet.org 352 smk #ircshells danxp apocalypse.devilsown.net *.undernet.org XpErIeNcE H :3 xp
:Diemen.NL.EU.Undernet.org 352 smk #ircshells danxp apocalypse.devilsown.net *.undernet.org Akasha Hd :3 Queen of the dammed
:Diemen.NL.EU.Undernet.org 352 smk #ircshells ~mautzi 200.163.68.122 *.undernet.org xp_ H :3 From your sweet breath comes the dawn of my death
:Diemen.NL.EU.Undernet.org 352 smk #ircshells ~spectrum 65-37-14-80.nrp2.roc.ny.frontiernet.net *.undernet.org smoker-- H :3 3l33t
:Diemen.NL.EU.Undernet.org 352 smk #ircshells ~cage owns.users.undernet.org *.undernet.org DarkCage Hx :3 Open my soul!
:Diemen.NL.EU.Undernet.org 352 smk #ircshells ~mautzi xxxnudes.users.undernet.org *.undernet.org claudiu Hx :3 From your sweet breath comes the dawn of my death
:Diemen.NL.EU.Undernet.org 352 smk #ircshells ~raphaelo raphaelo.users.undernet.org *.undernet.org GaBelo Gx :3 I'm too sexy to read BitchX.doc *
:Diemen.NL.EU.Undernet.org 352 smk #ircshells ~spectrum 65-37-14-80.nrp2.roc.ny.frontiernet.net *.undernet.org smoke--- H :3 3l33t
:Diemen.NL.EU.Undernet.org 352 smk #ircshells ~spectrum ns6.users.undernet.org *.undernet.org Saruman Hx :3 3l33t
:Diemen.NL.EU.Undernet.org 352 smk #ircshells 0wNeR 213.217.70.80 *.undernet.org `0wNeR H :3 Da0wNeR
:Diemen.NL.EU.Undernet.org 315 smk #ircshells :End of /WHO list.
MODE #ircshells
:Diemen.NL.EU.Undernet.org 324 smk #ircshells +stn
:Diemen.NL.EU.Undernet.org 329 smk #ircshells 1034511300
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :.say a
:smoker--!~spectrum@65-37-14-80.nrp2.roc.ny.frontiernet.net PRIVMSG #gold :a
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :smoker-- nick G4ndalf
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :smoker-- nick Gandalf-
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :smoker-- nick Gandalf--
:smoker--!~spectrum@65-37-14-80.nrp2.roc.ny.frontiernet.net NICK :Gandalf--
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :Gandalf-- nick smoker
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :Gandalf-- .save
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :smoke--- nick beast
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :smoke--- nick b3ast
:smoke---!~spectrum@65-37-14-80.nrp2.roc.ny.frontiernet.net NICK :b3ast
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :b3ast nick smoke
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :b3ast save
whois Forzza`s
:Diemen.NL.EU.Undernet.org 311 smk Forzza`s smoke 66.252.10.166 * : Forzza_s
:Diemen.NL.EU.Undernet.org 319 smk Forzza`s :#ruxandra #sebes @#9i #extaz #gold
:Diemen.NL.EU.Undernet.org 312 smk Forzza`s *.undernet.org :The Undernet Underworld
:Diemen.NL.EU.Undernet.org 318 smk Forzza`s :End of /WHOIS list.
PING :Diemen.NL.EU.Undernet.org
PONG :Diemen.NL.EU.Undernet.org
PRIVMSG #gold :rr
NICK :smoke-
:Diemen.NL.EU.Undernet.org 433 smk smoke- :Nickname is already in use.
PONG :Diemen.NL.EU.Undernet.org
whois smoek`
:Diemen.NL.EU.Undernet.org 401 smk smoek` :No such nick
:Diemen.NL.EU.Undernet.org 318 smk smoek` :End of /WHOIS list.
whois smoke`
:Diemen.NL.EU.Undernet.org 401 smk smoke` :No such nick
:Diemen.NL.EU.Undernet.org 318 smk smoke` :End of /WHOIS list.
whois smoke-
:Diemen.NL.EU.Undernet.org 311 smk smoke- ~smoke ftp.pentamation.com * :tai-pan
:Diemen.NL.EU.Undernet.org 319 smk smoke- :#psychz #echoshell
:Diemen.NL.EU.Undernet.org 312 smk smoke- *.undernet.org :The Undernet Underworld
:Diemen.NL.EU.Undernet.org 318 smk smoke- :End of /WHOIS list.
NICK :smoke`
:smk!~smoke@dept.cs.utsa.edu NICK :smoke`
PING :Diemen.NL.EU.Undernet.org
PONG :Diemen.NL.EU.Undernet.org
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold :smoker
PONG :Diemen.NL.EU.Undernet.org
NICK smoke
:Diemen.NL.EU.Undernet.org 433 smoke` smoke :Nickname is already in use.
PING :Diemen.NL.EU.Undernet.org
PONG :Diemen.NL.EU.Undernet.org
NICK smoke
:Diemen.NL.EU.Undernet.org 433 smoke` smoke :Nickname is already in use.
PONG :Diemen.NL.EU.Undernet.org
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :da
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :./w smoke-
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :iauite ba sa `mi bag pula
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :e al meu
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold :Please note that once the documents are obtained the
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold :Bank will approve within 5 (five) working days the
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold :$2.5m and it will be transfered to your account.
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold :Let me know if you are willing to co-operate.
:smoke-!~smoke@ftp.pentamation.com JOIN :#gold
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold :Awaiting your mail,
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold :John.
:smoke-!~smoke@ftp.pentamation.com JOIN :#ircshells
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold ::))))))))))))0
:smoke-!~smoke@ftp.pentamation.com JOIN :#electric_reality
PING :Diemen.NL.EU.Undernet.org
PONG :Diemen.NL.EU.Undernet.org
NICK smoke
:Diemen.NL.EU.Undernet.org 433 smoke` smoke :Nickname is already in use.
PONG :Diemen.NL.EU.Undernet.org
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :2.5 ce ?
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold :mil
PING :Diemen.NL.EU.Undernet.org
PONG :Diemen.NL.EU.Undernet.org
NICK smoke
:Diemen.NL.EU.Undernet.org 433 smoke` smoke :Nickname is already in use.
PONG :Diemen.NL.EU.Undernet.org
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :haha
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :besi ma
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold :ehehehe
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold :suge`o
PING :Diemen.NL.EU.Undernet.org
PONG :Diemen.NL.EU.Undernet.org
NICK smoke
:Diemen.NL.EU.Undernet.org 433 smoke` smoke :Nickname is already in use.
PONG :Diemen.NL.EU.Undernet.org
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :si vrei sa imi zici ca iti vin 2 mil de dolari
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold :nu
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold :2.5
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :daca iti vin imi dai si mie 10 mii de dolari ?
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold ::>
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :tre` sa`mi fac o spalatorie
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :ne facem asociati :)
PING :Diemen.NL.EU.Undernet.org
PONG :Diemen.NL.EU.Undernet.org
NICK smoke
:Diemen.NL.EU.Undernet.org 433 smoke` smoke :Nickname is already in use.
PONG :Diemen.NL.EU.Undernet.org
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold ::))))))))))))))))))))))))))))))))))))))))))))))))))))))))
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold :ho ca in primu rand nu se stie
PING :Diemen.NL.EU.Undernet.org
PONG :Diemen.NL.EU.Undernet.org
NICK smoke
:Diemen.NL.EU.Undernet.org 433 smoke` smoke :Nickname is already in use.
PING :p
:Diemen.NL.EU.Undernet.org PONG Diemen.NL.EU.Undernet.org :p
PONG :Diemen.NL.EU.Undernet.org
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold :si in aldoilea rand nu e toata balta a mea!~
:smoker!smoke@sm0ke.users.undernet.org PRIVMSG #gold :da` a mai cui e
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold :pula mea
:orbu`!smoke@OrB.users.undernet.org PRIVMSG #gold :o sa se inparta in mai multe parti
:smoke-!~smoke@ftp.pentamation.com PRIVMSG #gold :cine ma
PING :Diemen.NL.EU.Undernet.org
PONG :Diemen.NL.EU.Undernet.org
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
Thanks!
