AE-BOW NeedS Help With an Hacker!!!!

[.DareDevil.]

Hey guys my friends of the AE-BOW Squad are having trouble with an hacker in there server any ideas on how to help them keep him out i received the following message from one of them!

hello visor,

good to see you again. been looking for you cause i lost your email.
yes we still host (american members do) the bhd and bhdts games.
but we have a serious problem lately. a guy named VIRUS hacked into one of
our members computer twice while he was running the server.
we caught him cheating in the game and now he likes to hack into and shut
down our server.
we do have IP adresses from him but it keeps changing one digit.
82.95.110.176 and 177, 178,179.
any ideas to kick his butt in any way ??

I told them the only thing i could for right now and i know some people can host with firewalls i have before!! But it may not work to well but its better than getting hacked thats the only idea i had for the time being besides banning the name VIRUS from there server!

I dont think banning by ip range would be an good idea!!!!

Isnt it possible to find out who he is and report him to the police for hacking?

[Lucky]

look up his ip.. and then call up his isp and tell him what hes doin. they'll take care of it

[EDGE]

You can trace him IP back to his ISP. Report him and they will take care of it. Also, send the IP to Novalogic and tell them to keep an eye out for him. Nova still cares about BHD so they will probably do something to keep him from playing.

[katana*GFR*]

http://sunny.nic.com/cgi-bin/whois
Or use www.nic.com and select Whois.

Use this for looking up the IP.
Ive looked into it and it is a Dutch IP from XS4All.
Info for contacs are on that page also when you submitted a IP.

[Jeff]

It's sad that that's all a person has to do in a run of a day.

[zaitsev]

if they havent got a firewall there asking for trouble, get them to install one and only open the ports that they need, also check for virus's and programs he may of installed on the server, if it were my server i would do a total format and reinstall of the os as you dont know what files he has modified

[Rankor]

I am the one who has been getting hacked, yes I am running a firewall, and yes I did a full reinstall. It hasnt happened in a couple of days now but it did happen twice before that. This person keeps shutting down my cable modem so that it needs to be power cycled. I did trace the ip back to Denmark, but I really don't think that it is this Virus guy who is doing it. We have an idea who it is but unfortunaltly its hard prove it at this point. It is so easy to mask your ip that it could really be anyone, and that is where we stand unfortunalty. I am gratelful for the responses and welcome any suggestions you have. We have also filed a complaint with the local authorities of where we think this is originating from.

[katana*GFR*]

ok... what IP you traced... the IP Visor gave here was from Holland..

Indeed its easy to hide yourself behind another IP if you know what you do.. but it gives you lots off work to accomplish that, and erase youre traces afterwards..

Well anyway good luck on it.

[.DareDevil.]

The one i put on here is what Badger gave me!!!

Thanx Guys for helping them out i knew you could trace him i just forgot how!!!!

[katana*GFR*]

Google or
Ask Jeeves

theres so much information on that stuff .i always use the whois from nic.com to trace something to a certain point. Only if it goes further you have to dig into the material and have to be less legal ( Notice Less Legal not illegal... because illegal isnt allowed )

[bow]

i know you guys think its me Hammer but i can assure you it is not why dont you just get a new router or keep router firewall on

Ive got better things to do than to fall out with people over a squad disagreement i resigned and thats all there is to it no need for all this crap saying uve been hacked and i know you are blaming me because i was told and u admitted that u had told people rankor about me doing it i was the one that traced ip for u u also put on forum u had told people and shouldnt have u are two faced and a control freak and should get a life instead of annoying others

[Hellfighter]

% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Note: the default output of the RIPE Whois server
% is changed. Your tools may need to be adjusted. See
% http://www.ripe.net/db/news/abuse-pr...-20050331.html
% for more details.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '82.92.0.0 - 82.95.255.255'
inetnum: 82.92.0.0 - 82.95.255.255
org: ORG-XIB1-RIPE
netname: NL-XS4ALL-20031125
descr: PROVIDER Local Registry
descr: Xs4all Internet BV
country: NL
admin-c: XS42-RIPE
tech-c: XS42-RIPE
status: ALLOCATED PA
remarks: Please send email to abuse@xs4all.nl for complaints
remarks: regarding portscans, DoS attacks and spam.
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: XS4ALL-MNT
mnt-routes: XS4ALL-MNT
source: RIPE # Filtered
organisation: ORG-XIB1-RIPE
org-name: Xs4all Internet BV
org-type: LIR
address: Xs4all
Eekholt 42
1112 XH
Diemen
phone: +31 20 3987654
fax-no: +31 20 3987604
e-mail: local-ir@xs4all.nl
admin-c: CB127
admin-c: OD45
admin-c: EB76-RIPE
admin-c: KAI11-RIPE
mnt-ref: XS4ALL-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
role: XS4ALL Internet NOC
address: XS4ALL Internet BV
address: Postbus 1848
address: 1000BV Amsterdam
address: The Netherlands
phone: +31 20 3987654
fax-no: +31 20 3987604
e-mail: netmaster@xs4all.nl
admin-c: CB127
tech-c: CB127
tech-c: OD45
tech-c: EB76-RIPE
tech-c: RZ2757-RIPE
tech-c: KAI11-RIPE
nic-hdl: XS42-RIPE
mnt-by: XS4ALL-MNT
source: RIPE # Filtered
% Information related to 'ORG-XIB1-RIPE'
route: 82.92.0.0/14
descr: XS4ALL networking
origin: AS3265
mnt-by: XS4ALL-MNT
source: RIPE # Filtered
===========================================
i would e-mail to: abuse@xs4all.nl
these are the people he paying to use to connect to the internet for.

source info: http://www.ripe.net/whois?form_type=..._search=Search

they would need:
your time it happen:
Date:
your Location:
ISP:
DNS:
and if you have a security log- with other info on him going into your router thats be a plus.