Hacks In this section I am logging all the hacks I've seen on my honeypot. I've devided things on a per-kiddo basis, e.g. every cracker has his own sub-section.
This should actually be Hack 1a and Hack 1b, since this honeypot got cracked two times in a row due to the first kiddo not securing the vulnerable wu-ftpd. Check out MASTER-0N and MiCrobul.
On Sunday July 7th, 2002 a guy named Cinder paid my honeypot a visit, four hours after booting!
This isn't a really useful log, since I didn't investigate this hack much. Anyway, here's a little info about an unknown intruder.
In November 2002 a Romenian kiddo called Smenutz (?) exploited a bug in wu-ftpd and gained root on my honeypot. Read about it here.
|