[OT] Re: [Pmwiki-users] Hacked again.

[Thomas -Balu- Walter]

On Sun, May 16, 2004 at 06:25:52AM -0400, Crisses wrote:
> If anyone doesn't know how to report a hacker:  take the IP address and 
> do a %whois IP

Ah that was fun some time ago when I tried to track down a cracker that
broke into one of our campus servers using a stolen login... He deleted
nearly all of the users data (backups rule ;) and did a lot of different
mess.

It was luck that we somehow found a trace to him - he put his nick on
the website before deciding to delete everything. And we were able to
recover that and the IP-Range he was getting from (which was even
located somewhere in our area). 

A few days later I spoke to some colleagues and one of them remembered
that nick :). He remembered that he had a guy in one of his
Computer-Crash-Course classes that always used the nick on his papers
and stuff - being 31337. 

So later that day we went to his home. He was not there, but his parents
were. So we sat down, drunk some coffee and had a nice conversation with
his parents.

Damn. Looking at his face when he suddenly walked into the room was
worth all trys to track a hacker down 8-)

     Balu