kmanrox

i was hacked, and the hacker didnt do shit, except leave a couple files on my server, I'm trying to figure out who it was, or where they are from here is what one of the docs said; and yes i realize the first paragraph is in ENGLISH lol;

"KAKEK_IMUT: "I would like to purchase 2 girls from your webstore,do you have this f**k chick in stock ?, could you ship it to Indonesia by using USPS? Because this is as a gift for Mr. Joko in beacukai"

didotnakal: I'm juga minta satu, dengan spec: 170cm, 36C, 45Kg, putih, rambut sebahu, pantat sexy "

Also, his IP he logged in with was;

202.155.98.12

And my site of which he dropped this little html file i have not taken it down yet is at;
http://www.smutreviewer.com/validator.htm

-=HUNGRYMAN=-

With a name like "KAKEK_IMUT", you'd better contact the FBI immediately ... (well run Internet Eraser first, then call the FBI ..)

I think he is Taliban ... using your server to host encrypted messages for Taliban intelligence.

(and I am only ½ joking ...)

------------------

The Black Sheep of the Boneprone Family
I like to rub HERTURN on my nipples

[This message has been edited by -=HUNGRYMAN=- (edited 12-27-2001).]

Ludedude

Well, since he mentioned Indonesia, is it maybe Indonesian? Also a traceroute on his IP looks like it goes back to Indonesia...so good luck doing anything with this prick.

12/27/01 02:04:42 Fast traceroute 202.155.98.12
Trace 202.155.98.12 ...
1 168.100.186.161 1ms 1ms 1ms TTL: 0 (No rDNS)
2 168.100.250.1 12ms 16ms 12ms TTL: 0 (red-atm50-250.wpn.cloud9.net ok)
3 168.100.1.190 12ms 14ms 12ms TTL: 0 (darjeeling-F6-0.wpn.cloud9.net ok)
4 216.223.47.5 13ms 13ms 14ms TTL: 0 (border13.h5-1.cloud9-3.nyc.pnap.net probable bogus rDNS: No DNS)
5 209.191.128.66 13ms 14ms 13ms TTL: 0 (core2.ge2-0-bbnet1.nyc.pnap.net probable bogus rDNS: No DNS)
6 157.130.50.85 16ms 15ms 16ms TTL: 0 (POS1-2.GW7.NYC4.ALTER.NET ok)
7 152.63.25.118 14ms 14ms 17ms TTL: 0 (159.ATM3-0.XR2.NYC4.ALTER.NET ok)
8 152.63.21.146 15ms 15ms 14ms TTL: 0 (188.at-2-1-0.TR2.NYC9.ALTER.NET ok)
9 152.63.6.82 95ms 94ms 93ms TTL: 0 (125.at-6-1-0.TR2.SAC1.ALTER.NET ok)
10 152.63.50.145 93ms 94ms 94ms TTL: 0 (196.at-1-3-0.XR2.SAC1.ALTER.NET ok)
11 152.63.54.117 95ms 94ms 93ms TTL: 0 (POS7-0.IG2.SAC1.ALTER.NET ok)
12 157.130.193.222 289ms 289ms 287ms TTL: 0 (indosat-gw.customer.ALTER.NET ok)
13 202.155.7.249 292ms 296ms 289ms TTL: 0 (No rDNS)
14 202.155.7.50 292ms 293ms 290ms TTL: 0 (No rDNS)
15 202.155.27.14 289ms * 292ms TTL: 0 (No rDNS)
16 202.155.60.66 310ms 314ms 308ms TTL: 0 (ro-se******.indosat.net.id probable bogus rDNS: No DNS)
17 202.155.31.228 312ms 311ms 312ms TTL: 0 (No rDNS)
18 202.155.98.1 335ms 335ms 352ms TTL: 0 (No rDNS)
19 No Response * * *
20 No Response * * *
21 No Response * * *
22 No Response * * *
23 No Response * * *
24 No Response * * *
25 No Response * * *
26 No Response * * *
27 No Response * * *
28 No Response * * *
29 No Response * * *

Trying 202.155.98.12 at ARIN
Trying 202.155.98 at ARIN
Asia Pacific Network Information Center (APNIC2)
These addresses have been further assigned to Asia-Pacific users.
Contact info can be found in the APNIC database,
at WHOIS.APNIC.NET or http://www.apnic.net/
Please do not send spam complaints to APNIC.
AU

Netname: APNIC-CIDR-BLK
Netblock: 202.0.0.0 - 203.255.255.255
Maintainer: AP

Coordinator:
Administrator, System (SA90-ARIN) [No mailbox]
+61-7-3367-0490

Domain System inverse mapping provided by:

SVC00.APNIC.NET 202.12.28.131
NS.APNIC.NET 203.37.255.97
NS.TELSTRA.NET 203.50.0.137
NS.RIPE.NET 193.0.0.193

Regional Internet Registry for the Asia-Pacific Region.

*** Use whois -h whois.apnic.net
***
*** or see http://www.apnic.net/db/ for database assistance ***


Record last updated on 18-Jun-1999.
Database last updated on 26-Dec-2001 19:56:11 EDT.

The ARIN Registration Services Host contains ONLY Internet
Network Information: Networks, ASN's, and related POC's.
Please use the whois server at rs.internic.net for DOMAIN related
Information and whois.nic.mil for NIPRNET Information.


------------------
Post your galleries here!
Make 60% recurring (no fees) with these Babes!

<A HREF="http://refer.ccbill.com/cgi-bin/clicks.cgi?CA=914709&PA=210461" TARGET=_blank>
The Professional TGP Submitter! </A>

[This message has been edited by Lensman (edited 12-26-2001).]

Amputate Your Head

hey... what happened to the footer?

kmanrox

lemme catch this no talent ass bed wettin indonesian homosexual and ill break him down USMC style!!



------------------
K-MaN

RawPussy's TGP - Trade TRAFFIC
NicheBucks 50/50
You Own a PAYSITE? I DARE YOU!
ICQ 1337988

-=HUNGRYMAN=-

Alright LudeDude ....

WTF did you do to the bottom buttons Bro ???

Ram's gonna fuck you up the poop chute !!

------------------

The Black Sheep of the Boneprone Family
I like to rub HERTURN on my nipples

[This message has been edited by -=HUNGRYMAN=- (edited 12-27-2001).]

Wilber

202.155.98.12 = proxy

Ludedude

I stole the buttons looking for the secret switch to the GFY sweatshirt page

bookmarc

get the bastard(s).... and dont forget to update me on it .... pls.

------------------
We Build Programs & Relationships!!