Don't be stupid.

[Senoska]

unbeleavable dective work guys, you should send him a keylogger back roflmao, that would be great.

If anyone finds out this guys address or phone number please by all means post it, I wouldnt mind taking a few hundred dollers out of the bank to go pay this guy a visit.

[Carbon]

unbeleavable dective work guys, you should send him a keylogger back roflmao, that would be great.

If anyone finds out this guys address or phone number please by all means post it, I wouldnt mind taking a few hundred dollers out of the bank to go pay this guy a visit.

QFT

[aurik]

I was told this was a Parser.. and proceeded to download it.. yea.. you could guess i'm coming too... it happened today too... lets start spreading the word... i don't want my friends having to deal with this crude... and if there is any info on a Spintaru please could ya help me out?

Im sorry I just have to laugh at this. Today after server maitnence this guy (if he is on midgard) was going around TELLING people a link to mr.argus that was on a geocities site. If anyone is looking for an easy acount to steal its probably this guy the GM told me there were over 20 calls about this dude

Did you write down the link or screenshot it? if so PM it to me, aurik or taj.

I screenshotted all my logs today. >.> Anyways... PMed you.

This guy's new ftp is locked down pretty tight, upload onry, can't rm mv or passwd.

Need to get the police involved in this one.

[Carbon]

Curious, would his IP address happen to be 24.52.29.63?

BTW - this is the hackers IP address. He lives in Maine. :D (I forgot the actual city, but you can trace it) I've confirmed this because Fauxe was on my /flist and was weening out of a conversation with him and he said he lives in the middle of Maine.

[Zigma]

Curious, would his IP address happen to be 24.52.29.63?

BTW - this is the hackers IP address. He lives in Maine. :D (I forgot the actual city, but you can trace it) I've confirmed this because Fauxe was on my /flist and was weening out of a conversation with him and he said he lives in the middle of Maine.

Adelphia Communications Corp.
Main at Water
Coudersport, PA 16915
US

Domain Name: ADELPHIA.NET

Administrative Contact:
Admin, Domain mailto:[email protected]
Adelphia Communications Corp.
1 N. Main St.
Coudersport, PA 16915
US
888-512-5111 fax: 814-274-1508

Technical Contact:
Adelphia Communications Corp. mailto:[email protected]
Adelphia Communications Corp.
Main at Water Street
Coudersport, PA 16915
US
888-512-5111 fax: 814-274-0780

Record expires on 24-Apr-2009.
Record created on 23-Apr-1996.
Database last updated on 21-Jun-2006 00:59:59 EDT.

Domain servers in listed order:

NS1.ADELPHIA.NET 24.50.78.2
NS2.ADELPHIA.NET 68.168.224.177
NS3.ADELPHIA.NET 68.168.192.17



you sure it's not main st? doing a trace on that IP only got me his(?) ISP.


Does anyone (xavier etc) have the IP that the guy used to post the msg's here?

[anoush]

aaaaaaaah zigma you turn me on when you get al serious like that

[aurik]

C:\Documents and Settings\aurikan>nslookup logserver77.no-ip.org
*** Can't find server name for address 192.168.0.1: Non-existent domain
*** Default servers are not available
Server: UnKnown
Address: 192.168.0.1

Non-authoritative answer:
Name: logserver77.no-ip.org
Address: 64.222.233.156


C:\Documents and Settings\aurikan>tracert 64.222.233.156

Tracing route to pool-64-222-233-156.port.east.verizon.net [64.222.233.156]
over a maximum of 30 hops:

[snip]
9 26 ms 13 ms 20 ms tbr1011401.sffca.ip.att.net [12.123.12.122]
10 15 ms 14 ms 22 ms ggr2-p300.sffca.ip.att.net [12.123.13.190]
11 12 ms 34 ms 18 ms att-gw.ashburn.eli.net [192.205.32.74]
12 20 ms 19 ms 20 ms 0.so-2-0-0.XL2.SCL2.ALTER.NET [152.63.57.102]
13 87 ms 89 ms 85 ms 0.so-5-0-0.XL2.BOS4.ALTER.NET [152.63.16.126]
14 84 ms 87 ms 84 ms POS7-0.GW5.BOS4.ALTER.NET [152.63.25.57]
15 89 ms 87 ms 118 ms gnilink-gw.customer.alter.net [208.192.180.234]

16 88 ms 90 ms 84 ms so-0-3-0-0.BB-RTR1.BOS.verizon-gni.net [130.81.1
7.168]
17 119 ms 96 ms 103 ms 130.81.20.89
18 103 ms 105 ms 119 ms A3-0-0-1710.DSL-RTR1.PORT.verizon-gni.net [130.8
1.10.242]
19 116 ms 125 ms * pool-64-222-233-156.port.east.verizon.net [64.22
2.233.156]
20 134 ms 132 ms 121 ms pool-64-222-233-156.port.east.verizon.net [64.22
2.233.156]

Trace complete.

That's the FTP server.

[Senoska]

aaaaaaaah zigma you turn me on when you get al serious like that

I know right?

edit:

C:\Documents and Settings\aurikan>nslookup logserver77.no-ip.org
*** Can't find server name for address 192.168.0.1: Non-existent domain
*** Default servers are not available
Server: UnKnown
Address: 192.168.0.1

Non-authoritative answer:
Name: logserver77.no-ip.org
Address: 64.222.233.156


C:\Documents and Settings\aurikan>tracert 64.222.233.156

Tracing route to pool-64-222-233-156.port.east.verizon.net [64.222.233.156]
over a maximum of 30 hops:

[snip]
9 26 ms 13 ms 20 ms tbr1011401.sffca.ip.att.net [12.123.12.122]
10 15 ms 14 ms 22 ms ggr2-p300.sffca.ip.att.net [12.123.13.190]
11 12 ms 34 ms 18 ms att-gw.ashburn.eli.net [192.205.32.74]
12 20 ms 19 ms 20 ms 0.so-2-0-0.XL2.SCL2.ALTER.NET [152.63.57.102]
13 87 ms 89 ms 85 ms 0.so-5-0-0.XL2.BOS4.ALTER.NET [152.63.16.126]
14 84 ms 87 ms 84 ms POS7-0.GW5.BOS4.ALTER.NET [152.63.25.57]
15 89 ms 87 ms 118 ms gnilink-gw.customer.alter.net [208.192.180.234]

16 88 ms 90 ms 84 ms so-0-3-0-0.BB-RTR1.BOS.verizon-gni.net [130.81.1
7.168]
17 119 ms 96 ms 103 ms 130.81.20.89
18 103 ms 105 ms 119 ms A3-0-0-1710.DSL-RTR1.PORT.verizon-gni.net [130.8
1.10.242]
19 116 ms 125 ms * pool-64-222-233-156.port.east.verizon.net [64.22
2.233.156]
20 134 ms 132 ms 121 ms pool-64-222-233-156.port.east.verizon.net [64.22
2.233.156]

Trace complete.

That's the FTP server.

osnap

[Dezzimal]

The short answer here is, any IP address you get is only going to point you to his ISP, never his exact location. You would need to subpoena the DHCP logs to see what customer had what IP at what time to figure out what his address is.

[Carbon]

This is by far one of the best.threads.ever.

[divisortheory]

The short answer here is, any IP address you get is only going to point you to his ISP, never his exact location. You would need to subpoena the DHCP logs to see what customer had what IP at what time to figure out what his address is.

What are you waiting for?

[Shuemue]

[Sidetrack] Am I the only one who has ever misread divisor's sig as 'Atst. of Celery? [/Sidetrack]

[Senoska]

[Sidetrack] Am I the only one who has ever misread divisor's sig as 'Atst. of Celery? [/Sidetrack]

no I did but lets not get off topic..

So sum it up; what have you guys figured out so far?

[Dezzimal]

[Sidetrack] Am I the only one who has ever misread divisor's sig as 'Atst. of Celery? [/Sidetrack]

no I did but lets not get off topic..

So sum it up; what have you guys figured out so far?

Heres the summary thus far:

I have in my posession -

4 different IPs he's used
some chat logs from conversations he's had over AIM
his and one of his friend's AIM SN
I know his character's name on bahamut (which did get perma banned)
I know his first name is most likely Bill or Billy, his last name might start with a Z.
He will be working at something called "abe lincoln spring fair" sometime soon for a Mr or Mrs Torbin or a Mrs Thibedeau.
He uses Bulletproof FTPd 2.3.1 on a Windows box I believe (might be Unix) to upload all the accout information.


Current status -
He's still compromising accounts on midgard. The person that got Spintaru is the same guy.

[crakmunky]

http://www.no-ip.com/legal/tos.php

unlawful or illegal activities of any kind

If you guys have all this info, contact his ISP. The ISP should shut down the ftp site fairly fast and kill his acct.

[Dezzimal]

Any english majors want to write something up to mailto:[email protected]? Otherwise I will in the morning.

[AsuraAnonTroll]

Someone Should upload the shit outta something to him since its upload onry... kill his bandwith

[Dezzimal]

Don't do anything malicious to him, doing that could jeopardize any legal action that might be able to be taken against him.

[AsuraAnonTroll]

meh some people do it the "Legal" way other people find out where he lives and beat the fucking shit outta him.... i would prefer kicking his ass.... whats jail gonna do to him nothing..


A ass beating, might change his life

[crakmunky]

oops! just read the services bit at no-ip.com

they just handle dns services (but terminating his acct there would be dandy)

...should also contact his server isp (verizon, adelphia...i dunno!).