Some people attacking to my friend's site with zombie ip's through 7 days. How can we find the real attacker. Please If you have any knowledge contact me. Thank you.
You can't you'd need to be able to hack through the zombie sites. Despite what the movies would have you believe it's relatively easy to the point of extremely easy to hid yourself by only passing through 1 hop. Unless you have some kind of way to get past that hop that's where your trail ends. However IP banning is still pretty effective since they can only hop through so many places.
What kind of site is it? If it's a forum or wiki you can tighten up security authentication for new members. If it's a static site and you've got things setup correctly then they in no way should be able to do anything to it.
If you live in the United States and you legitimately believe that your friend's website is being attacked over the Internet, it's best to file a report with the FBI's cybercrime division: http://www.ic3.gov/default.aspx
Thanks for answers. I live in Turkey. My friend talked with cybercrime division in Turkey, but they said it is hard to find if they use zombie ip's. That site is just a general healthy living portal. www.xprodoksit.com
Server said the attack like 1500 visit in a second. What can we do, if we cant find the attacker?
In that case, it might be best to contact to the registrant of the site. You can see here that the information is publicly available. The owner might not even know that his site is infected.
Comments
What kind of site is it? If it's a forum or wiki you can tighten up security authentication for new members. If it's a static site and you've got things setup correctly then they in no way should be able to do anything to it.
Server said the attack like 1500 visit in a second. What can we do, if we cant find the attacker?