Proof of Previous post on Attacker BEWARE

dipset · none Joined: 26 Jan 2008 Posts: 14

lol katlyn [BANG!].

Xaphan · Newbie Joined: 12 Feb 2007 Posts: 78

[Deleted by request of poster]

funny how the familiarities keep coming

[04:58] *** Joins: lithium (gov@MN-39044.got.ownt.by.a.hax00r.com)
[04:58] (lithium): Xaphan, a server is a terrible thing to waste no?
[05:00] (lithium): Next time, think before you post on searchirc, you never know who you will offend.
[05:01] (lithium): Ill go easy this time, but next time ill make sure my friend BrKiller is involved.
[05:03] *** Joins: Treasure_Tiger (madness@MN-41443.dslaccess.co.uk)
[05:03] *** MegaNET sets mode: +v Treasure_Tiger
[05:03] (lithium): Xaphan, once again, next time there wont be a lame ass flood, offend me or one of my friends and there is punishment to be served.
[05:03] (lithium): Next time watch what you post on searchirc.
[05:04] (lithium): understood?
[05:04] (+Treasure_Tiger): okkkk :/
[05:04] (lithium): Did you post shit about BrKiller too?
[05:04] (+Treasure_Tiger): easy boy
[05:05] (+Treasure_Tiger): i dun even know who brkiller is
[05:05] (lithium): Let me tell you this, Xaphan you post 1 more time shit about ANYBODY, this servers going down.
[05:05] (+Treasure_Tiger): why this one
[05:05] (+Treasure_Tiger): Xaphan is everywhere
[05:05] (+Treasure_Tiger): that fukr stalks me
[05:05] (lithium): oh really?
[05:05] (+Treasure_Tiger): is he even here right now lol
[05:05] (lithium): please give me a list of his servers.
[05:05] (+Treasure_Tiger): lol i dun have a list
[05:06] (lithium): then the attack goes on.
[05:06] *** Joins: AVyRD (krwpp@MN-51159.c51338.usr.user.meganet.us)
[05:06] *** Joins: jSBGwN (rxrsqbcnza@MN-51159.c51338.usr.user.meganet.us) - Clones: 2 from jSBGwN (AVyRD) CtrlF1 whois; ShiftF8 ping
[05:06] *** Joins: oRxmKO (jvrierqhxo@MN-986.dip0.t-ipconnect.de)
[05:06] *** Joins: dbBrUxdP (etkbt@MN-25387.16-80-b.business.telecomitalia.it)
[05:06] *** Joins: EjVFUsm (cwpilo@MN-24936.ibys.com.br)
[05:06] *** Joins: GEcpqCvh (wbswbvkir@MN-40276.virtua.com.br)
[05:06] *** Joins: yrjGA (jmdpwatcnl@MN-8529.dip0.t-ipconnect.de)
[05:06] *** Joins: GYytNLJpCI (psbfipg@MN-9835.dsl.telesp.net.br)
[05:06] (+Treasure_Tiger): just as long as i known him hes always popped up where ive been
[05:06] (AVyRD): http://41.68.119.88/gravehack.exe
[05:06] (jSBGwN): http://41.68.119.88/gravehack.exe
[05:06] (oRxmKO): http://41.68.119.88/gravehack.exe
[05:06] (dbBrUxdP): http://41.68.119.88/gravehack.exe
[05:06] (yrjGA): http://41.68.119.88/gravehack.exe
[05:06] (EjVFUsm): http://41.68.119.88/gravehack.exe
[05:06] (GEcpqCvh): http://41.68.119.88/gravehack.exe
[05:06] (GYytNLJpCI): http://41.68.119.88/gravehack.exe
[05:06] (AVyRD): http://41.68.119.88/gravehack.exe
[05:06] (jSBGwN): http://41.68.119.88/gravehack.exe
[05:06] (oRxmKO): http://41.68.119.88/gravehack.exe
[05:06] (dbBrUxdP): http://41.68.119.88/gravehack.exe
[05:06] (yrjGA): http://41.68.119.88/gravehack.exe
[05:06] (EjVFUsm): http://41.68.119.88/gravehack.exe
[05:06] (GEcpqCvh): http://41.68.119.88/gravehack.exe
[05:06] (AVyRD): http://41.68.119.88/gravehack.exe
[05:06] (jSBGwN): http://41.68.119.88/gravehack.exe
[05:06] (GYytNLJpCI): http://41.68.119.88/gravehack.exe
[05:06] (oRxmKO): http://41.68.119.88/gravehack.exe
[05:06] (dbBrUxdP): http://41.68.119.88/gravehack.exe
[05:06] (yrjGA): http://41.68.119.88/gravehack.exe
[05:06] (AVyRD): http://41.68.119.88/gravehack.exe
[05:06] (jSBGwN): http://41.68.119.88/gravehack.exe
[05:06] (GEcpqCvh): http://41.68.119.88/gravehack.exe
[05:06] (EjVFUsm): http://41.68.119.88/gravehack.exe

<cut>

SasukeUchiha · Lurker Joined: 01 Dec 2007 Posts: 114 Location: California

There Just People With No Lifes..COME GET ME YOU DONT KNOW MY SERVER >:O -Bitches- Razz

bubblez6000 · Newbie Joined: 06 Sep 2007 Posts: 60

Thanks Xaphan for posting my company, I would like that IMPORTANT imformation gone NOW!

Jobe · Posted: Feb 03, 2008 6:30am Post subject:

bubblez6000 it's not like nobody else can find that information themselves too. It's publicly available information.

bctrainers · Newbie Joined: 11 Mar 2005 Posts: 68 Location: kansas city

I'd like to get my hands on that exe and rip it to bits. I bet you it is an IRC backdoor trojan. I'll just sandbox it, post it up on a few honeypot websites. Very Happy

Oh no, since i've posted here, i'm going to get some proxy flood! Silly kids. Neutral

bubblez6000 · Newbie Joined: 06 Sep 2007 Posts: 60

It was not the whole whois information, it was the address I wanted gone.

PingBad · Guru Joined: 05 Feb 2005 Posts: 2031 Location: New Zealand

lol... lemme get this straight... some kid living in his mother's basement (or his granny's) starts acting like the lame piece of crap he is... gets on the local gossip chain because of said lameness... then says "don't speak ill of me or I'll continue being lame"?

WOW! Since when did the internet start becoming such a lame place to be? But it doesn't matter... I've already been in contact with the user's ISP and escallated it above your bog-standard Tier-1 helpdesk.

SasukeUchiha · Lurker Joined: 01 Dec 2007 Posts: 114 Location: California

[04:19:29] *** Quits: rH6357xfS2531 (~bpawzx@B95B0715.61187B8A.C3805D19.IP) (Quit: DIE YO!)
[04:19:29] *** Quits: ictjIUt (~woh9444sn@MasQ-AC78F4E0.dedibox.fr) (Quit: DIE YO!)
[04:19:29] *** Quits: hNblPP8994 (~frwizl@8058C451.A64277DE.3D2A1F7.IP) (Quit: DIE YO!)
[04:19:29] *** Quits: rqts3135On (~ast3550cw@A1065ABD.EB8462E9.724118ED.IP) (Quit: DIE YO!)
[04:19:29] *** Quits: tq6792Z2850I2635 (~a7840zisg@MasQ-3BDBEC5F.mrs.modulonet.fr) (Quit: DIE YO!)
[04:19:29] *** Quits: rgkY6817dd (~vwftoi@MasQ-3BDE775B.dyn.user.ono.com) (Quit: DIE YO!)
[04:19:29] *** Quits: ko2003SsuX (~jgjbuu@MasQ-2B08A61.red-80-35-52.staticip.rima-tde.net) (Quit: DIE YO!)
[04:19:29] *** Quits: yrmt4048B6269 (~wcrkf2475@MasQ-F035641E.cable.dyn.cableonline.com.mx) (Quit: DIE YO!)
[04:19:29] *** Quits: wfceabl (~j1231wrvu@9F2CD0E4.9DA45DB4.CCB8C6B9.IP) (Quit: DIE YO!)
[04:19:29] *** Quits: vmamAlC (~gyhkvw@MasQ-40D6989.chello.pl) (Quit: DIE YO!)
[04:19:29] *** Quits: fRwwpmB (~mztokp@MasQ-E29120E.dyn.user.ono.com) (Quit: DIE YO!)
[04:19:29] *** Quits: oF1369KXf739 (~pyv9886if@MasQ-4AB751DC.dsl.completel.net) (Quit: DIE YO!)
[04:19:29] *** Quits: cl5304SVDS (~ocvhi4546@MasQ-43E25B4.manc.cable.ntl.com) (Quit: DIE YO!)
[04:19:29] *** Quits: kRutoze (~delloy@MasQ-113DE69B.grudziadz.mm.pl) (Quit: DIE YO!)
[04:19:29] *** Quits: dX3656yfqe (~c9366dmq9@MasQ-1AA1483E.dyn.user.ono.com) (Quit: DIE YO!)
[04:19:29] *** Quits: qJ415cvoh (~vmm4660y9@MasQ-D705F821.clientes.euskaltel.es) (Quit: DIE YO!)
[04:19:29] *** Quits: mtPFALs (~v5594liqi@MasQ-EBE24BEF.master.pl) (Quit: DIE YO!)
[04:19:29] *** Quits: aCFvfov (~ofqobe@1FD4E12.116DD8E5.8284BAF6.IP) (Quit: DIE YO!)
[04:19:29] *** Quits: wlUDwc39 (~w8462sgu4@MasQ-22DFE40A.telecable.es) (Quit: DIE YO!)

Someone choose to join in the party with the other dumbasses =/ and they PM'd me all 200 of em, which took me forever to close all the PM >.>

Anarchy · Posted: Feb 04, 2008 9:12pm Post subject:

mthwgrn · none Joined: 09 Dec 2007 Posts: 28

QW's little punkass came to my network a week ago and begged for forgiveness. Haha, I have the log and he demanded I delete the post of searchirc. I said I would but not after he came and attacked Xaphan linked to my network. BOPM handled all them. He obviously has no idea what he's doing and thank god or the whole searchirc network would be toast.

qw is lame
Purple}{aze is lame
secure is lame

those are all the names i've seen him connect through
and several ips if you want them pm me

Xaphan · Newbie Joined: 12 Feb 2007 Posts: 78

Xaphan · Newbie Joined: 12 Feb 2007 Posts: 78

Oh-HaiNET · none Joined: 30 Mar 2008 Posts: 3

You know that if the links they are spamming are viruses, you can go ahead and download the files, then upload them to a sandbox service and see where they are connecting to, and possibly join the botnet IRC server, then find the remove command and remove them.