How can we find real attacker Ip in all zombie ip's ?

jazzloverjazzlover TR
edited February 2010 in Science & Tech
Some people attacking to my friend's site with zombie ip's through 7 days. How can we find the real attacker. Please If you have any knowledge contact me. Thank you. :respect:

Comments

  • kryystkryyst Ontario, Canada
    edited February 2010
    You can't you'd need to be able to hack through the zombie sites. Despite what the movies would have you believe it's relatively easy to the point of extremely easy to hid yourself by only passing through 1 hop. Unless you have some kind of way to get past that hop that's where your trail ends. However IP banning is still pretty effective since they can only hop through so many places.

    What kind of site is it? If it's a forum or wiki you can tighten up security authentication for new members. If it's a static site and you've got things setup correctly then they in no way should be able to do anything to it.
  • ThraxThrax 🐌 Austin, TX Icrontian
    edited February 2010
    If you live in the United States and you legitimately believe that your friend's website is being attacked over the Internet, it's best to file a report with the FBI's cybercrime division: http://www.ic3.gov/default.aspx
  • jazzloverjazzlover TR
    edited February 2010
    Thanks for answers. I live in Turkey. My friend talked with cybercrime division in Turkey, but they said it is hard to find if they use zombie ip's. That site is just a general healthy living portal. www.xprodoksit.com
    Server said the attack like 1500 visit in a second. What can we do, if we cant find the attacker?
  • ThraxThrax 🐌 Austin, TX Icrontian
    edited February 2010
    In that case, it might be best to contact to the registrant of the site. You can see here that the information is publicly available. The owner might not even know that his site is infected.
Sign In or Register to comment.