Re: [newbie] How do I turn in a hacker?

1999-10-08 Thread Shannon M. Johnston

Don't worry about contacting his ISP. Contact the FBI.

"Eric L. Damron" wrote:

 My secure log showed the following entries:

 Oct  6 16:45:12 C287853-A ipop3d[11229]: connect from 193.137.8.223
 Oct  6 16:45:12 C287853-A ipop3d[11229]: error: cannot execute
 /usr/sbin/ipop3d: No such file or directory

 nslookup 193.137.8.223
 Name:oboe.dsi.uminho.pt
 Address:  193.137.8.223

 He's running an apache webserver and his name is Jorge Figueiredo .

 Even with all of this information I'm not sure how to contact his ISP.

 Any suggestions?

 Thanks



Re: [newbie] How do I turn in a hacker?

1999-10-08 Thread Darin

On Fri, 08 Oct 1999, you wrote:
 Don't worry about contacting his ISP. Contact the FBI.
 
Ummm.. The .pt is for Portugal.. I really doubt the FBI can do a whole lot
there..  If thats where the person in question is actually located.. Who knows?
The college student's system may have been hacked already and was just a point
where they could anonymously try thier exploits from..

   nslookup 193.137.8.223
  Name:oboe.dsi.uminho.pt
  Address:  193.137.8.223

-- 
Cthulhu for President in 2000 - Why settle for the lesser evil



Re: [newbie] How do I turn in a hacker?

1999-10-08 Thread John Aldrich

On Fri, 08 Oct 1999, you wrote:
 Here You Go My Friend...  I queried him for you all the info i have
 found is below, i suggest emailing the following person with your complaint:
 [EMAIL PROTECTED] (the admin from which he subscribes "ripe.net")
 
Actually, the person you need to email is
"[EMAIL PROTECTED]" 
This is a university computer, so it sounds like someone
has hacked their mainframe and is using it to find "open"
redhat boxes. :-)
John



Re: [newbie] How do I turn in a hacker?

1999-10-08 Thread John Aldrich

On Thu, 07 Oct 1999, you wrote:
 My secure log showed the following entries:
 
 Oct  6 16:45:12 C287853-A ipop3d[11229]: connect from 193.137.8.223
 Oct  6 16:45:12 C287853-A ipop3d[11229]: error: cannot execute
 /usr/sbin/ipop3d: No such file or directory
 
 nslookup 193.137.8.223
 Name:oboe.dsi.uminho.pt
 Address:  193.137.8.223
 
 He's running an apache webserver and his name is Jorge Figueiredo .
 
 Even with all of this information I'm not sure how to contact his ISP.
 
 Any suggestions?
 
Try "whois [EMAIL PROTECTED]" It will come back
with a BUNCH of info, including the fact that the address
is assigned to a university in Portugal. :-)
John



RE: [newbie] How do I turn in a hacker?

1999-10-08 Thread Ken Wilson

Or it's possibly an university student testing all the things he's
learning about tcp/ip, sockets and ports and it's really quite harmless.
From what I saw in the log report did not really demonstrate anything I
would be inclined to call a serious attempt at hacking.

Ken Wilson
First Law of Optimisation: The speed of a non-working program is
irrelevant
(Steve Heller, 'Efficient C/C++ Programming')

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of John Aldrich
Sent: Friday, October 08, 1999 10:01 AM
To: [EMAIL PROTECTED]
Subject: Re: [newbie] How do I turn in a hacker?


On Fri, 08 Oct 1999, you wrote:
 Here You Go My Friend...  I queried him for you all the info i
have
 found is below, i suggest emailing the following person with your
complaint:
 [EMAIL PROTECTED] (the admin from which he subscribes "ripe.net")

Actually, the person you need to email is
"[EMAIL PROTECTED]"
This is a university computer, so it sounds like someone
has hacked their mainframe and is using it to find "open"
redhat boxes. :-)
John



[newbie] How do I turn in a hacker?

1999-10-07 Thread Eric L. Damron

My secure log showed the following entries:

Oct  6 16:45:12 C287853-A ipop3d[11229]: connect from 193.137.8.223
Oct  6 16:45:12 C287853-A ipop3d[11229]: error: cannot execute
/usr/sbin/ipop3d: No such file or directory

nslookup 193.137.8.223
Name:oboe.dsi.uminho.pt
Address:  193.137.8.223

He's running an apache webserver and his name is Jorge Figueiredo .

Even with all of this information I'm not sure how to contact his ISP.

Any suggestions?

Thanks




Re: [newbie] How do I turn in a hacker?

1999-10-07 Thread Steve Philp

"Eric L. Damron" wrote:
 
 My secure log showed the following entries:
 
 Oct  6 16:45:12 C287853-A ipop3d[11229]: connect from 193.137.8.223
 Oct  6 16:45:12 C287853-A ipop3d[11229]: error: cannot execute
 /usr/sbin/ipop3d: No such file or directory
 
 nslookup 193.137.8.223
 Name:oboe.dsi.uminho.pt
 Address:  193.137.8.223
 
 He's running an apache webserver and his name is Jorge Figueiredo .
 
 Even with all of this information I'm not sure how to contact his ISP.
 
 Any suggestions?
 
 Thanks

Unless this is happening frequently, I'd cool my jets on the "hacker"
(BTW, the term is cracker, not hacker).

One probe does not a hack make.  

As for contacting his ISP, use whois to lookup InterNIC information on
the domain, find out who his providers are, then contact them.

-- 
Steve Philp
Network Administrator
Advance Packaging Corporation
[EMAIL PROTECTED]



Re: [newbie] How do I turn in a hacker?

1999-10-07 Thread Eric L. Damron

Thanks Steve,

I have a zero tolerance for probing.  One person pointed out to me that
because this guy has a fixed IP address and would therefore have to be a
moron to try cracking into other computers from his IP address, it is likely
that the computer with this address has been cracked and is being used by
the "Dark Side."

Anyway, I didn't have any luck with whois, so I have no way of turning him
in or warning him.


-Original Message-
From: Steve Philp [EMAIL PROTECTED]
To: [EMAIL PROTECTED] [EMAIL PROTECTED]
Date: Thursday, October 07, 1999 8:07 PM
Subject: Re: [newbie] How do I turn in a hacker?


"Eric L. Damron" wrote:

 My secure log showed the following entries:

 Oct  6 16:45:12 C287853-A ipop3d[11229]: connect from 193.137.8.223
 Oct  6 16:45:12 C287853-A ipop3d[11229]: error: cannot execute
 /usr/sbin/ipop3d: No such file or directory

 nslookup 193.137.8.223
 Name:oboe.dsi.uminho.pt
 Address:  193.137.8.223

 He's running an apache webserver and his name is Jorge Figueiredo .

 Even with all of this information I'm not sure how to contact his ISP.

 Any suggestions?

 Thanks

Unless this is happening frequently, I'd cool my jets on the "hacker"
(BTW, the term is cracker, not hacker).

One probe does not a hack make.

As for contacting his ISP, use whois to lookup InterNIC information on
the domain, find out who his providers are, then contact them.

--
Steve Philp
Network Administrator
Advance Packaging Corporation
[EMAIL PROTECTED]