How can I find this hacker ?

[clarissa1996]

Someone has installed an exploit in my SuSE Linux PC.
Before shutting down the system I have saved the output of "ps -ef" and /var/log/*.

In the output of "ps -ef" there is the command:
"ftp motorbiene.kicks-ass.org"
... very strange.

Searching whit google I have found only the following two pages where the link motorbiene.kicks-ass.org exists:

http://cgi.saardamage.org/CGI/guestbook?page=6

http://volume1.lanfinity.de/active.php?inc=userview&userview_id=387

In both pages there is the email "cokazine@gmx.de".
I have written to this email to request eventual informations but ... no answer.

What I can do ?

Any help are appreciated.

Clarissa

 

[jtb]

Buy a better firewall, use enhanced security procedures, call the police, etc...

The sad fact is that _you_ can't catch these creeps. The odds are that Germany won't help you. If they get enough people complaining to the police, that particular URL might be blocked/dropped/taken away. But they'll be back.

I'd be in favor of some sort of mandatory prison time for hackers... hard labor, no access to any electronics including TV or radio...

JTB
Senior Microsoft Consultant
MCSE-NT4, MCP+I, MCP-W2K, CCNA, CCDA,
CTE, MCIWD, i-Net+, Network+
(MCSE-W2K in progress)

 

[chiph]

Funny answer: Check at his mom's house.

But otherwise, the only way you'll catch him is if he was stupid enough not to forge his IP address.

If you do attempt to follow the IP address from your logs, be gentle, as the person at the other end is probably not your perpetrator.

Chip H.


If you want to get the best response to a question, please check out FAQ222-2244 first

 

[rn4it]

Contact your ISP's abuse center, they'll work quicker then the police.