So, I'm sure some of you remember a Pacnet's
failed hosting service. After the drama surrounding it, Pacnet disappeared for a long time. I noticed overtime a group of servers from the same address, one with Pacnet's name and some of his original clients, so I knew that he is still trying to continue it. However, as I learned now, a friend of his is hosting for him.
Last night, my web server was unreachable (the server problems yesterday was another issue at my host). The next day, today, I noticed that my web page was unreachable, however it was only the web server that had a problem.
I take a look at live traffic, and notice one IP spamming my web server, so I block it with ease. The web server problem ended, then I took a further look at the IP. To my finding, it was the IP that Pacnet moved his hosting service to, under Clinr121's internet.
I let the logs get real juicy before announcing I caught them which is where they would've stopped. Just to get an idea of how bad this is for the ISP, 24,463,949 web requests were sent from Clinr121's IP, (67.8.249.47) over the two days of Jan 29 and Jan 30. I contacted the both of them once the logs were juicy enough.
Pacnet2012: hey all your servers are pretty much lagging Pacnet2012: too bad Pacnet2012: it wasn't me Pacnet2012: i swear Kalphiter: you ass Pacnet2012: it was Clinr121 he says he was really really sorry Pacnet2012: he is my friend though Kalphiter: and how did he do this? Pacnet2012: let me tell you that Pacnet2012: .php file Pacnet2012: called attack.php Kalphiter: who ran ti Kalphiter: ran it Pacnet2012: he did Kalphiter: how Pacnet2012: i don't know Pacnet2012: he is really really sorry though Pacnet2012: it ran with a cmd program though Pacnet2012: i saw his join.me screen but i forget the code Pacnet2012: maybe i have a screen shot Pacnet2012: yes i have one Pacnet2012: let me write what it says Pacnet2012: okay Pacnet2012: http://willyou.typewith.me/p/z9f4rYwHmH Pacnet2012: there happy Pacnet2012: it's not me Kalphiter: syntax error Kalphiter: caught you trying to make up stuff Pacnet2012: i wasn't making anything up Pacnet2012: that's what it said Pacnet2012: maybe he corrected it Pacnet2012: but that's what my screenshot says Pacnet2012: "$port" i guess Pacnet2012: really i am not lying Kalphiter: funny because fsockpen is not a function Pacnet2012: that's what he wrote Pacnet2012: let me post some screens Pacnet2012: this is php btw Kalphiter: what he wrote wouldn't run Pacnet2012: he may have edited it that's the point Kalphiter: I understand what you're doing, Clinr is innocent and you're guilty Kalphiter: Clinr's being real helpful in nailing your guilt Pacnet2012: he's guilt Pacnet2012: just wait Pacnet2012: photobucket pictures being uplaoded Pacnet2012: uploaded Pacnet2012: http://s1120.photobucket.com/albums/l489/Pacnet2010/?action=view¤t=clinr1211.png Pacnet2012: and Pacnet2012: the better one Pacnet2012: http://s1120.photobucket.com/albums/l489/Pacnet2010/?action=view¤t=clinr1212.png Pacnet2012: start with the 2nd Pacnet2012: and probably just downloa it Pacnet2012: download it Pacnet2012: did you do it Pacnet2012: ? Kalphiter: Had a very nice discussion with Clinr, now I understand (actually I knew this from the beginning) that both of your are responsible. Pacnet2012: ?? Pacnet2012: what do you mean Pacnet2012: he gave me the php file but i did not use it Pacnet2012: i told him i did but it didn't work so we would be friends but i did not run the file Pacnet2012: i cheered him on but i didn't do it myself Pacnet2012: you know that Kalphiter: yeah, no Kalphiter: Heedicalking gave me a tip where to find that out Kalphiter: That's OK, I already got a stuff ton of evidence Pacnet2012: and clinr just messaged you Pacnet2012: i didn't do it. He did Pacnet2012: and he asked me if the servers lagged Pacnet2012: but i didn't actually run the file Pacnet2012: okay Pacnet2012: report his ISP, not mine Pacnet2012: i have a screenshot of him telling you it was not me so too bad Pacnet2012: and if you looked at my screenshots he hated me Pacnet2012: so the summary is i didn't do it and clinr admitted Kalphiter: You did it Kalphiter: the thing is, all you damaged was the web server Pacnet2012: nope it was clinr not me Kalphiter: both of you are guilty Kalphiter: you 2 guys are literally blaming each other Pacnet2012: that's not true Pacnet2012: look he just said pac is innocent and i realize i was wrong Pacnet2012: i know that Pacnet2012: join.me Pacnet2012: want a screenshot ? i got it. Kalphiter: I got all the screenshots Pacnet2012: nope Pacnet2012: you want this one Pacnet2012: just a minute Kalphiter: Let's jump back to the beginning of Clinr121's chat Pacnet2012: he just said that i was innocent Pacnet2012: okay Kalphiter: "yes" "i did" "guilty" "so" Kalphiter: in response to my first message to him, "Pacnet claims you spammed me" Kalphiter: Seriously, grab some consistency and plan it out better next time. Pacnet2012: he said i'm controlling him Pacnet2012: actually Kalphiter: mhm Pacnet2012: i'm telling him what i hope he does Pacnet2012: but he doesn't have to listen to me Pacnet2012: it's his fault Kalphiter: yeah, no Kalphiter: you're at fault Kalphiter: he's at fault Kalphiter: Both of you are to blame, and now you're trying to get at each other. Pacnet2012: fine just make a drama topic but please do not report to isp Pacnet2012: we will never do it again Pacnet2012: i swear Pacnet2012: i mean he will never do it again Pacnet2012: and i will not cheer him Pacnet2012: or support him Pacnet2012: make a drama and we're done Pacnet2012: deal Kalphiter: been working on it Pacnet2012: okay just please don't make me lose my internet Kalphiter: it's a very long drama, backed by a ton of evidence Kalphiter: those kinds of topics are hard to make Pacnet2012: i don't care Kalphiter: actually you're in the clear, for now Pacnet2012: a drama is way better than an isp ban Kalphiter: Clinr's ISP gets reported Pacnet2012: thanks Kalphiter: but if Clinr has a say, he must say where the security breach is Kalphiter: and he would have to point to you Kalphiter: but we know that's not true, Clinr is directly involved as well as you. Kalphiter: in fact, most ISPs have a "no breach" policy Pacnet2012: i may be key banned but i get to enjoy steam Pacnet2012: no breach? Kalphiter: if breached, it's treated the same as you doing it yourself Kalphiter: at least except the legal part of it Pacnet2012: okay just i hope he doesn't Kalphiter: by the way, do you know when I Kalphiter: nevermind Pacnet2012: i see 3 occurences of breach on verizon's policy Kalphiter: I'm just taking a shot Pacnet2012: oh Pacnet2012: i hope it doesn't happen Kalphiter: they normally have "if breached, client's at fault" Kalphiter: yeah but the logs don't lie Pacnet2012: because i can't live without my internet Pacnet2012: then i have to use 4G hotspot Kalphiter: Probably won't, depends on what Clinr is doing Pacnet2012: okay i hope he doesn't know how Pacnet2012: i am worried though Pacnet2012: he knows alot of php and maybe understands that Kalphiter: I really don't have to torture little kids who did almost nothing to me Pacnet2012: thanks. Pacnet2012: also i may buy your service if i get enough cash Pacnet2012: i'm not poor its just that i spend on important stuff Pacnet2012: anyway a drama topic and that's it i hope Pacnet2012: bye Kalphiter: Goodbye. | Kalphiter: Pacnet claims you spammed me Clinr121: yes Clinr121: i did Clinr121: guilty Clinr121: so Kalphiter: Not buying it Clinr121: what you want me to do? Clinr121: not to trust him? Kalphiter: Pacnet revealed who did it with his words Kalphiter: "hey all your servers are pretty much lagging" Clinr121: oh Kalphiter: they weren't laggy, he thinks he was lagging them though Clinr121: but hey, what isp you reporting? Kalphiter: he didn't readily admit that there was a seperate instigator Kalphiter: um Kalphiter: the one pacnet hosts from Clinr121: see Clinr121: let me tell you Clinr121: 67.8.249.47 is my ip Kalphiter: 67.8.249.47 Clinr121: yes Kalphiter: How are you related to pacnet Clinr121: so do you want me to NOT Trust him. Kalphiter: How are you related to pacnet? Kalphiter: whose IP is 67.8.249.47 Clinr121: i think i was friendly and when then i was sorry for his hosting. and mines sorry. Clinr121: so Kalphiter: Who is 67.8.249.47 Clinr121: disfriend him? Clinr121: mines Kalphiter: haha this is a pile of bullstuff Kalphiter: I'm looking right at this etherpad script Pacnet sent to me Kalphiter: there's a syntax error Kalphiter: caught Pacnet red-handed Clinr121: oh Clinr121: so, are we cool? Kalphiter: how about this Kalphiter: if you admit innocence, I won't mention your name Clinr121: and report my isp Kalphiter: I caught Pacnet lying, I know he did it himself Kalphiter: it's not your ISP Kalphiter: wait, who owns what Clinr121: 67.8.249.47 is my ip Kalphiter: Why would Pacnet have access to 67.8.249.47 Clinr121: get it? Kalphiter: what do you do on it Clinr121: wait Kalphiter: what is done at this address Kalphiter: is it just your home, and that's it? Clinr121: yes... Kalph, can i just not friend him Kalphiter: funny Kalphiter: I have every single master-server list, minute-by-minute, since September Kalphiter: there were multiple servers hosted Clinr121: and? Clinr121: aslo Clinr121: also* Kalphiter: You said it was your home Clinr121: yea, but i not friending him anymore Clinr121: he sucks Clinr121: he tells me to do that Kalphiter: What is your relation to Pacnet? Clinr121: he was a good freind that i wanna trust Clinr121: but now Kalphiter: Why were you hosting servers of random people (who happened to associate themselves with Pacnet's hosting) Kalphiter: ? Clinr121: it's because my uh network i am on is really fast Clinr121: want the proof? Kalphiter: right, I do however see that this is your IP Kalphiter: noticed it was so random name of yours some time ago Kalphiter: Here's the problem Clinr121: ok Kalphiter: Why was Pacnet able to run a script? Clinr121: wait, i could not understand... sorry Kalphiter: Why was Pacnet able to run a script? Kalphiter: This script to spam my server Clinr121: oh Clinr121: well you see Clinr121: i scripted a php ddos shell then i attack your uh server because i was really sorry for pacnet but now, i am on your side and i shouldn't do that Clinr121: hope this is not a drama Kalphiter: See I know both of you had a part, but I'm trying to nail who did exactly what Clinr121: what? Clinr121: did what? Kalphiter: Both of you are involved, but I must figure out who did what Clinr121: sorry Clinr121: oh i guess i did that spamming thingy script... Clinr121: theres the truth! Clinr121: is that? Clinr121: damn pacnet who tells me that. Clinr121: so, you want me to never do this again Kalphiter: of course I do Kalphiter: but I must get a drama together Kalphiter: this isn't acceptable behavior Kalphiter: I do remember noticing the presence of other people's servers at your address Kalphiter: I do understand that Pacnet relates to you Clinr121: also i did delete the ddos scripts and from mediafire Clinr121: because i don't accept that Kalphiter: um Kalphiter: You were involved in this Clinr121: ok... Kalphiter: Directly, not just innocently hosting another user's malicious scripts Clinr121: I don't like pacnet anymore, i was sorry for him but now, he just a bitch. Kalphiter: I'm happy you realize this, but what you did has already been done Clinr121: oh Clinr121: ok Clinr121: also kalph, i am proud that you post the portInit function some kinda topic Clinr121: because i was banned Clinr121: from forums Clinr121: are you gonna report his ISP? Kalphiter: excuse me Kalphiter: your ISP Clinr121: also Kalph Pacnet and i are innocent, i just wanna mind you that i am 11 Kalphiter: I don't care how old you are Kalphiter: at the least, a drama topic Clinr121: we are innocent because we don't want a isp reporting or key ban Kalphiter: innocent? Kalphiter: after all this stuff? Clinr121: i mean pac was innocent but i relize i was wrong and i won't do it again Kalphiter: both of you are guilty Clinr121: Kalph, i mean will you report him than me, he is controling me again Clinr121: i know he just begs, but how about you report him, but not me Clinr121: deal? Clinr121: i know he controls me. and i didn't mean to do this. so please, report him Clinr121: Kalph I know i am guilty, but, how about you and me truce and you'll get pacnet in drama topic Kalphiter: 24,463,949 web requets Clinr121: woah Clinr121: that's... not good Clinr121: what i have to do to pay this damage? Clinr121: or else? Clinr121: I know, do you use XAMPP? Clinr121: or.. else? Clinr121: wait, can you show me your uh servers desktop to order to see the damage. or private? Clinr121: sigh Clinr121: are you still reporting my ISP? or no? because what will happen? Kalphiter: Yes Kalphiter: you'll find out Clinr121: Kalph, please, can this be over with, i hate getting my internet gone Clinr121: i'm begging you Clinr121: It was a mistake! |
I'll explain a little of the logs. First, Pacnet doesn't realize that he didn't cause any damage. Second, he puts the blame on Clinr121, his host. I realized some inconsistencies between the two chats which allowed me to reach the conclusion that they're both responsible.
As far as the PHP script goes, there are syntax errors which shows Pacnet made it on-the-fly. This just gets out of control and shows how poorly planned the scheme was.
Key revocation of both of them or at least Pacnet is long overdue.