{"id":42,"date":"2011-09-18T22:47:08","date_gmt":"2011-09-18T12:47:08","guid":{"rendered":"http:\/\/sijnstra.name\/blog\/?p=42"},"modified":"2011-09-18T22:47:08","modified_gmt":"2011-09-18T12:47:08","slug":"back-to-technology-adventures-the-hacking-attempts-begin","status":"publish","type":"post","link":"http:\/\/sijnstra.name\/blog\/2011\/09\/18\/back-to-technology-adventures-the-hacking-attempts-begin\/","title":{"rendered":"Back to technology adventures – the hacking attempts begin"},"content":{"rendered":"

This was a little more overt and quite frankly faster than I expected. They were nice enough to sign it though.<\/p>\n

[Sun Sep 18 08:09:48 2011] [error] [client 210.71.198.186]\n\u00c2\u00a0File does not exist: \/var\/www\/w00tw00t.at.blackhats.romanian.anti-sec:)\n[Sun Sep 18 08:09:49 2011] [error] [client 210.71.198.186]\n\u00c2\u00a0File does not exist: \/var\/www\/phpMyAdmin\n[Sun Sep 18 08:09:50 2011] [error] [client 210.71.198.186]\n\u00c2\u00a0File does not exist: \/usr\/share\/phpmyadmin\/scripts\n[Sun Sep 18 08:09:50 2011] [error] [client 210.71.198.186]\n\u00c2\u00a0File does not exist: \/var\/www\/pma\n[Sun Sep 18 08:09:51 2011] [error] [client 210.71.198.186]\n\u00c2\u00a0File does not exist: \/var\/www\/myadmin\n[Sun Sep 18 08:09:52 2011] [error] [client 210.71.198.186]\n\u00c2\u00a0File does not exist: \/var\/www\/MyAdmin<\/pre>\n
Well, the script was written by Romanians (according to a quick search). The list of attempted hacks seems remarkably short for a brute force scripted attack. Just for the record, the whois owner of that address is currently:
\nTaiwan Taipei Chtd Chunghwa Telecom Co. Ltd
\nalthough, as I know far too well now for all the wrong reasons, the whois data isn’t always useful, helpful or correct.<\/p>\n","protected":false},"excerpt":{"rendered":"
This was a little more overt and quite frankly faster than I expected. They were nice enough to sign it though. [Sun Sep 18 08:09:48 2011] [error] [client 210.71.198.186] \u00c2\u00a0File does not exist: \/var\/www\/w00tw00t.at.blackhats.romanian.anti-sec:) [Sun Sep 18 08:09:49 2011] [error] [client 210.71.198.186] \u00c2\u00a0File does not exist: \/var\/www\/phpMyAdmin [Sun Sep 18 08:09:50 2011] [error] [client 210.71.198.186] … <\/p>\n
Continue reading “Back to technology adventures – the hacking attempts begin”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[5],"tags":[15,19,29],"_links":{"self":[{"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/posts\/42"}],"collection":[{"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/comments?post=42"}],"version-history":[{"count":0,"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/posts\/42\/revisions"}],"wp:attachment":[{"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/media?parent=42"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/categories?post=42"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/tags?post=42"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}