wtmp wouldn't copy paste right into wordpad when I was writing the page. When I get home I will try again. The IP that resolved to putnam-fl.com was me. and the post attack connection was me also, I was trying to get back in.
UberC0der, if there is anything else you would like me to post I will on my website.
Where did the Hacker edit whatever file he/she did for me to get the output of the screenshot.
I don't know alot about linux commands but doesn't 'grep' search for things by their content. Could I 'grep' for "h4v1ng fun j45on?"
Any feedback appreciated.
-Jason




