أخبار

[ahmedEGYPT]

Warning Victor and KingLi

Hi, I think this might not be related with pservers at all, but I think I should announce it here for avoid more people get cheated by those guys.

About KingLi:
This little kid deserves a whole website only for enumerate his failures. But forgetting about the past, I will explain his most recent failure.
Since yesterday, my mail was getting spammed from a mail bomb.
I started researching about it, first looking at the header of the mails:

عفوا ,,, لايمكنك مشاهده الروابط لانك غير مسجل لدينا [ للتسجيل اضغط هنا ]

What a surprise! Spam from my own host? Gamerzcorp? Worried about it, I asked Cybernatus for look from where the mails come from, here is the chat log:

Spoiler:
Synx says:
btw can you also explain this? Im getting spammed since yesterday
Synx says:
عفوا ,,, لايمكنك مشاهده الروابط لانك غير مسجل لدينا [ للتسجيل اضغط هنا ]
Synx says:
from gamerzcorp
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
عفوا ,,, لايمكنك مشاهده الروابط لانك غير مسجل لدينا [ للتسجيل اضغط هنا ] <- it comes from a website using PHP script (Such as Newslesters or forum contact forum).
Synx says:
can you find any spam script on your host?
Synx says:
so we can see who is doing thos
Synx says:
this*
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
Ok
Synx says:
srstats is now down?
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
Jun 27 16:49:18 gcweb postfix/smtp/www-data/web-404 [17457]: 85F19BAC43B: to=<[email protected]>, relay=mx1.gmx.net[213.165.64.102]:25, delay=92551, delays=92530/21/0.16/0.6, dsn=4.3.2, status=deferred (host mx1.gmx.net[213.165.64.102] said: 450 4.3.2 Too many mails (mail bomb), try again in 1 hour(s) 5 minute(s) and see ( GMX - FAQ - Was mssen Administratoren anderer Mailserver beachten? ) {mx101} (in reply to RCPT TO command))
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
It's the logs of Postfix (MailServer). And you clearly see from where it comes.
Synx says:
king li?
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
KingLi is kidding with us.. This little bastard got a second chance from me since the last time and it seems that I was wrong.


So was him who was spamming my mail, funny, what a surprise, huh?
What else... oh yeah, why did he left EliteSRO?
Well, that can be easily explained, chat log from EliteSRO Admin (QQ):

Spoiler:

EliteSRO 5:41:09
hi
SRStats is your server?
Synx 5:41:26
yup
EliteSRO 5:42:13
KingLi is member in your team?I saw he has the gamerzcorp also
Synx 5:42:31
no, we are enemies in fact, he tried to buy our page files
Synx 5:42:43
but we are hosted on the same host, cybernatus gave us an space
EliteSRO 5:43:07
got it
EliteSRO 5:43:24
cybernatus is gamerzcorp?
Synx 5:43:32
yeah, he is the owner of gamerzcorp
Synx 5:45:09
why Elite1 is currently down?
EliteSRO 5:45:29
fixing,maybe network issue.
EliteSRO 5:46:02
KingLi wanna be GM in game
Synx 5:46:22
he is always looking for powerful ranks everywhere >_>
Synx 5:46:35
he left elite because zszc team made him GM on ZS retro
EliteSRO 5:46:45
After I refused, he went to ZSZC
EliteSRO 5:46:51
yes.


So that's all, for those asslickers, better you go find a more clean ass to lick. <--- Engrlihshhf ftw XD

Now, the Victor part:

Fact: Victor and company are the people who are DDoS'ing EliteSRO.

Why I'm saying all of this? Easy.
Together with KingLi, they used an exploit on the Gamerzcorp site for get our web files (from SrStats) without we noticed about it. Luckily, our CharDB program and the capacity program weren't hosted on the gamerzcorp hosting, but on a different place, so he can't make the website works. Yesterday he was asking me for give him the CharDB tool for record the characters and make his own statistics page.
And again some chat logs for prove my point.
Cybernatus log (ID's censored for security reasons):

Spoiler:

Synx says:
do you know how victor accessed the FTP? with a shell or with the ID and pw of the FTP account?
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
I've alredy checked that and there is no scripts misusing the configuration found. For the ID, it's not complicated to find ***** cause it alway begin by **** for WebHosting.
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
Anyway, the same IP accessed ****404 & ****srstats the same hour.
Synx says:
and the pw?
Synx says:
victor confirmed it to us, now he is saying it doesnt matter because it doesnt works
Synx says:
thats because he dont got our tools
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
It also confirm that KingLi is an attared. He is currently trying to spam&hack me now that I've blocked him and his accounts.
Synx says:
he is self-destroying, lol
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
The PW has been sended to you by mail.
Synx says:
got it, thx
Synx says:
the mysql and mail pw changed too?
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
I hate that, feeling betrayed by someone using your own services..
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
Yes
Synx says:
wrong pw on the ftp
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
Wait till it's updated, it take some times.
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
The problem still that I don't know how he got your password without using any recognized script on the host, and I'm quite sorry for that..
Synx says:
victor said the problem wasnt on our site, but on gamerzcorp host
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
All his websites have been deleted of course. He broke every rule and it's better like this.
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
Do you know Shell99?
Synx says:
and he recommended us to switch host
Synx says:
heard about it
Synx says:
they can access the whole root of the server with it?
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
To be honest, I must agree with him. We're not a professionnal hosting and you files doesnt worth our services.
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
1 year ago, he used this script released on the web to hack Swift-Project. Since that, we have of course fixed the configuration of PHP (wich was in fault) to prevent this.
[b] ·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
But I heard that there is something like more than 20 different of the scripts using others problems on Apache2
Synx says:
why you gave him a second chance?
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
I'm not a security expert and since I'm alone on what I'm doing, you really must change host.. I can't handle your security with what has been done again by him.
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
He helped me on VPS services we were offering last summer. And since it was a good experience, that's why he got a new chance.
Synx says:
we will get a new host once we get paid from ads, we have enough for a decent server
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
Okay then.
Synx says:
can I post some parts of this conversations for a post on epvp? for avoid more people get tricked by those two guys
·$6*-*CyBeRn@TuS*-* ·$5-=[GamerzCorp.com]=-·$7>> In-Extremix 19H-21H says:
Of course.
Synx says:
Thanks


He tried to make the website works on his host, but he just don't have the most important files, so he failed miserably.
He already changed the website, but we made pics from the new design we are making of the web, hosted on his site, sro8.us.

عفوا ,,, لايمكنك مشاهده الروابط لانك غير مسجل لدينا [ للتسجيل اضغط هنا ]
عفوا ,,, لايمكنك مشاهده الروابط لانك غير مسجل لدينا [ للتسجيل اضغط هنا ]
عفوا ,,, لايمكنك مشاهده الروابط لانك غير مسجل لدينا [ للتسجيل اضغط هنا ]

So that's it. Do not trust on those guys, instead of start their own projects or work on something, they prefer steal the hard work that other persons made.

Again, sorry for this unrelated post to this section.

PS: For Victor, if you release the web files, more stuff and chat logs will be released, and you know what it is.

هى مشكله مع kingLi و Synx
ipHost = 64.186.131.157

الترجمه بعد قليل 10 دقايق

[™~Mc®mÒra~™]

أنا مستنى الترجمة عشان عامل زى الاطرش فــ الزفة
و النبى بلاش ترجمة جوجل
الواحد مش ناقص شلل
دا اللى فيا مكفينى :@

[max4ever]

[Muhab]

انا مستنى الترجمة اهو

[shref2010]

انا كل اللى فهمتو ان سرفر EliteSro_5 هاينزل دة اللى فهمتو من كل الكلام دة

[stoncold]

بص انا مش فاهم وفتحت جوجل خلانى حمار اكتر