[Pmwiki-users] Hacked again.

Crisses crisses
Sun May 16 04:26:43 CDT 2004


I've reported a German-based hacker to their ISP for hacking my wiki 
repeatedly.  I think they've been back again and they spoofed my name 
so their IP isn't showing in the diff.  How do I add the IP to the diff 
permanently so that I can tell when it wasn't me?  (in this case I was 
asleep, but it was only a couple hours ago).

Thanks!

If anyone doesn't know how to report a hacker:  take the IP address and 
do a %whois IP

-- it's usually a dynamic IP from a cable modem, service provider, etc. 
  There's contact information there for the ISP, and in this case it 
specifically was noted that they wanted to have a report.  I used 
babelfish (Altavista) to translate my report to the ISP.  They want the 
time and time zone of the hack, the URL or IP that was hacked might be 
helpful to them, the IP of the hacker, and the content of the hack.  
They have to figure out who had that address during those hours.

Conversely, you could determine their IP range and block them all.  
That can be done in Apache's .htaccess -- that's going to be my next 
step for this particular guy.

Crisses




More information about the pmwiki-users mailing list