hi scene,
some idiots opened a new site called 'hld' and added legit racers but it's a hacked site!!!
TIME TO PURGE SOME IDIOTS ON YOUR SITE!!!!
One of the first trader who were there was "Paranoia" and "outlaw" (fucking hacked retards!)
[1] holyland.zapto.org => 79.136.101.29
IP Information for 79.136.101.29
IP Location: Sweden Sweden Stockholm Bahnhof Internet Ab
ASN: Sweden AS8473 BAHNHOF Bahnhof Internet AB (registered Sep 18, 1997)
Resolve Host: h-79-136-101-29.na.cust.bahnhof.se
IP Address: 79.136.101.29 [Whois] [Reverse-Ip] [Ping] [DNS Lookup] [Traceroute]
Whois Server whois.ripe.net
[1] 257 "/_ARCHIVE/XVID/You.Only.Live.Twice.1967.UE.iNTERNAL.DVDRip.XviD-iNCiTE/CD1" is current directory
[1] PRET RETR incite-yolt.ue.xvid.cd1.***
[1] 200 OK, will use Arch.05 for upcoming transfer
[1] CPSV
[1] 227 Entering Passive Mode (5,9,1,45,192,191).
[2] PORT 5,9,1,45,192,191
[2] 200 PORT command successful.
[2] STOR incite-yolt.ue.xvid.cd1.***
[2] 150 Opening BINARY mode data connection for incite-yolt.ue.xvid.cd1.***.
[1] RETR incite-yolt.ue.xvid.cd1.***
[1] 150 File status okay; about to open data connection from Arch.05.
IP Information for 5.9.1.45
IP Location: Germany Germany Nuremberg Hetzner Online Ag
ASN: Germany AS24940 HETZNER-AS Hetzner Online AG (registered Jun 03, 2002)
Resolve Host: eupenerkarting.com
IP Address: 5.9.1.45 [Whois] [Reverse-Ip] [Ping] [DNS Lookup] [Traceroute]
Whois Server whois.ripe.net
oh, an archive slave with a website on it? A .de slave on a .se site? - how secure.
Yea, insecure hacked site -> purge the users on your site!
Clean the scene, dudes. Time to start now!
Thanks,
iND