Le site web a été défacé (par des images pornopgraphiques dont certaines scatophiles) en provenance des deux adresses IP suivantes :
Nov 11 20:24:03 hopy-one sshd[36639]: Accepted keyboard-interactive/pam for yanis from 85.201.47.150 port 10433 ssh2
Nov 11 20:27:20 hopy-one sshd[36687]: Accepted keyboard-interactive/pam for yanis from 85.201.47.150 port 10469 ssh2
Nov 11 20:40:06 hopy-one sshd[36867]: Accepted keyboard-interactive/pam for yanis from 85.201.47.150 port 11288 ssh2
Nov 11 20:48:13 hopy-one sshd[37009]: Accepted keyboard-interactive/pam for yanis from 85.201.47.150 port 11415 ssh2
Nov 11 20:54:53 hopy-one sshd[37155]: Accepted keyboard-interactive/pam for yanis from 85.201.47.150 port 11559 ssh2
Nov 11 21:09:10 hopy-one sshd[37323]: Accepted keyboard-interactive/pam for yanis from 85.201.47.150 port 12108 ssh2
Nov 11 21:39:54 hopy-one sshd[37624]: Accepted keyboard-interactive/pam for yanis from 90.2.126.72 port 31637 ssh2
Ce défacement a été reporté :
- Pour l'adresse IP 85.201.47.150 à TECTEO15 à Liege en Belgique.
- Pour l'adresse IP 90.2.126.72 à Orange.