Nico Hacked yet again.

[[Zero-S]]

Fred or Greg, give me these guy's IP addy. Please.

[SmithSR]

I say we do

[Nathan]

Sic em' Rob!!!!

[w1ngzer0]

i sent a nice email to the FBI

[[Zero-S]]

And they're gonna do...what? Nothing.

[w1ngzer0]

glade i can be of service.

[[Zero-S]]

Thanks, sorry for not saying it before:D

[IvoryJ30t]

post his ip address.

i have 20Mbit/sec of upload bandwidth as long as im on this network [until sunday]

[w1ngzer0]

DAMN YOU BASTARD THAT POSTED CHOCO PARTY I CAN"T GET THAT IMAGE OUT OF MY HEAD "CHOCO PARTY GOOD GOOD AHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH

[[Zero-S]]

Why would you want that image out of your head?

[w1ngzer0]

because i want to be sane agian. I haven't seen an asian woman in movement in YEARS . YES YEARS clothes or not

[crzycav86]

What's the deal with NICO getting hacked all the time?

Who's doing it? What do they want? How can we stop them? ....etc.

[w1ngzer0]

r35forums.com guy.... i honestly think its him.

[crzycav86]

Why do you think it's him?

[w1ngzer0]

because he is from that United Arab country. Kind of funny how he shows up right after the hack and he disapears right before the 2nd hack.

[IvoryJ30t]

united arab emerates

[crzycav86]

United Arab what? You mean United Arab Emirates?

I thought the last hack came from someone in Kuwait.

[SmithSR]

Arabs, all kidding aside. Greg can make the call on what info to post about em

[IvoryJ30t]

come on, i have an open VPN connection to an unnamed server with an OC-1 connection.

and i can back it up with 1Mbit/sec up from my personal connection

i think everyone on nico with a good connection should participate in a DDoS attack.

[[Zero-S]]

well if I had an IP addy I WOULD

[Cold_Zero]

how do you know the IP wasnt spoofed or a zombie.

[[Zero-S]]

Even a spoofed IP can be traced.

But yes, I have thought about that.

[AZhitman]

Phil - Please feel free to post all the hacker's info for our members to peruse.

Teksolvers has found the loophole used to gain access to the site and closed it promptly. Their team acted swiftly and aggressively, and is currently patrolling up some other potential openings.

Big props to our webmaster team!

[IvoryJ30t]

did you guys get any information about his browser/OS?

[SmithSR]

IP ADDRESS 212.138.47.29

[IvoryJ30t]

nope, its not him.

heres why

[IvoryJ30t]

Country: SAUDI ARABIA

ARIN says that this IP belongs to RIPE; I'm looking it up there.

Using cached answer (or, you can get fresh results).Hiding E-mail address (you can get results with the E-mail address).

% This is the RIPE Whois server.% The objects are in RPSL format.%% Rights restricted by copyright.% See http://www.ripe.net/ripencc/pu....html

inetnum: 212.138.47.0 - 212.138.47.255netname: ISU-5descr: Internet Service Unit ISUcountry: SAadmin-c: KR6046-RIPEtech-c: KR6046-RIPEstatus: ASSIGNED PAmnt-by: KACST-ISU-MNTmnt-lower: KACST-ISU-MNTremarks: ------------------------------------------------------remarks: Part of this IP block has been used for proxy/cacheremarks: service at the National level in Saudi Arabia. Allremarks: Saudi Arabia web traffic will come from this IP block.remarks: remarks: NOTE: If you experience high volume of traffic fromremarks: IP in this block it is because your site is veryremarks: popular/famous of Saudi Arabia community.remarks: ------------------------------------------------------changed: ******@saudinic.net.sa 19991005changed: ******@saudinic.net.sa 19991212changed: ******@saudinic.net.sa 20010707source: RIPE

route: 212.138.0.0/16descr: Saudi Arabia backbone and local registry address spaceorigin: AS8895holes: 212.138.64.0/22holes: 212.138.68.0/23notify: ******@isu.net.samnt-by: ISU-NOCchanged: *********@isu.net.sa 20000114changed: *********@isu.net.sa 20011112changed: *********@isu.net.sa 20040607source: RIPE

role: KACST ROLEaddress: Saudi Network Information Center, ISUaddress: King Abdulaziz City for Science and Technology,address: P.O.Box 6086, Riyadh 11442, Saudi Arabia.phone: +9661 481 3932fax-no: +9661 481 3254e-mail: ******@saudinic.net.satrouble: ******@isu.net.saadmin-c: ZOM1-RIPEtech-c: RA705-RIPEtech-c: ANAS1-RIPEnic-hdl: KR6046-RIPEremarks: This Role object is for handling and maintaining allremarks: IP Blocks registered by SaudiNIC(LIR) in Saudi Arabia.mnt-by: KACST-ISU-MNTchanged: ******@saudinic.net.sa 20010701source: RIPE

[IvoryJ30t]

unless the saudis want to tell us who was connected to that ip at the time of the attack, we are SOL.

[Cold_Zero]

Let me get right on that.bud

[IvoryJ30t]

also, somewhere along the line, unsolicited ICMP,UDP, TCP packets get blocked

[firewall, big suprise...]