Ok now I am pissed (cadcam)

[cadcam]

Someone thought it was ok to use this boards FTP to put up Crack version of AutoCAD 14.

 

I have asked in the past not to make other folders in the main Directory and I am still finding them.

 

Today I moved one of the folders that contained unfamiliar files to find crack software.

I will be looking for this persons IP address up and forwarding it to who ever is going to need it along with my self.

 

I keep a log of all ftp data that includes IP addresses.

 

This is not cool by any means

 

As James would say OUT

 

[ 03-16-2003, 05:25 PM: Message edited by: cadcam ]

[Guest CNC Apps Guy 1]

Not cool IDOT!

 

Jay, out of the kindness of his heart has made his ftp server available for the use of the forum and some nimrod has the audacity to do this?

 

Jay, put up this guy's IP address and we'l launch a trojan horse on this guy and REALLY let him have it.

 

OUT!

[cadcam]

quote:

---

Jay, put up this guy's IP address and we'l launch a trojan horse on this guy and REALLY let him have it.

---

As you Wish 80.224.187.203

 

This most likly a Dynamic IP I am searching now.

 

[ 03-16-2003, 05:27 PM: Message edited by: cadcam ]

[Bullines]

Unless he's knowledgable about how to cover his tracks, I think he may be running with the bulls.

 

We should keep in mind that if this came from a personal computer, then it's likely that the IP is a dynamic one. Even most broadband ISPs' DHCP servers (ISPs who don't use DHCP should should be given a stern talking to, but that's another rant) expire IPs in a decent amount of time (2-6 months). So unless this guy uploaded the file recently, the IP, which is from Spanish ISP Auna, possibly now belongs to someone else.

[Fig sign]

Jay !

Anybody can use anonymous proxy and some other stuff to mask it`s IP adress or MAC number .

There are so much stuff like this ...

BUt you have a pool of board`s user names and passwords.

So it will be not hard to allow only to registered users to enter ftp under their board`s users name and password to make logging of events simple and clear.

[MACHINEMASTERG]

uncool!!! get him!!

[fboike]

James,

for what it matters that IP is from

Amsterdam and is a dynamic address.

Releasing a trojan to the internet makes

you no better then the person who posts

cracked software.

I would have hoped for better from

a knowledgable person such as yourself.

 

[ 03-17-2003, 09:27 AM: Message edited by: fboike ]

[cadcam]

quote:

---

James,

for what it matters that IP is from

Amsterdam and is a dynamic address.

---

This is what I found too.

 

Please folks jsut help me help you.

if you see some thing like this on the FTP please inform me as soon as possiable.

 

thanks jay

[Allan]

203-187-adsl.red.retevision.es [80.224.187.203]

 

http://www.vkham.com/Info/internet_suffixes.html

 

ES Spain

 

Looks like Spain to me, how are you guys getting Amsterdam? Are you using a visual tracert, if so the geographical location has been entered wrong. Make no mistake this ip add is in Spain.

 

Allan

[cadcam]

Allen this what I have:

dns 80.224.187.203

 

80.224.187.203 has valid reverse DNS of 203-187-ADSL.red.retevision.es

 

whois -h magic 80.224.187.203

Trying whois -h whois.arin.net 80.224.187.203

 

OrgName: RIPE Network Coordination Centre

OrgID: RIPE

Address: Singel 258

Address: 1016 AB

City: Amsterdam

StateProv:

PostalCode:

Country: NL

 

NetRange: 80.0.0.0 - 80.255.255.255

CIDR: 80.0.0.0/8

NetName: 80-RIPE

NetHandle: NET-80-0-0-0-1

Parent:

NetType: Allocated to RIPE NCC

NameServer: NS.RIPE.NET

NameServer: AUTH62.NS.UU.NET

NameServer: NS3.NIC.FR

NameServer: SUNIC.SUNET.SE

NameServer: MUNNARI.OZ.AU

NameServer: NS.APNIC.NET

NameServer: SVC00.APNIC.NET

Comment: These addresses have been further assigned to users in

Comment: the RIPE NCC region. Contact information can be found in

Comment: the RIPE database at whois.ripe.net

Comment:

RegDate:

Updated: 2002-09-11

 

OrgTechHandle: RIPE-NCC-ARIN

OrgTechName: RIPE NCC Hostmaster

OrgTechPhone: +31 20 535 4444

OrgTechEmail: [email protected]

 

and this to:

Do not contact either Los Nettos (ln.net) or Centergate Research Group

(centergate.com) based on the results of this traceroute.

3 130.152.180.21 7.565 ms isi-1-lngw2-atm.ln.net [AS226] Los

Nettos origin AS

4 198.172.117.161 9.239 ms ge-2-3-0.a02.lsanca02.us.ra.verio.net

[AS2914] Verio

5 129.250.29.126 9.901 ms ge-6-2-0.r00.lsanca01.us.bb.verio.net

[AS2914] Verio

6 64.86.173.133 9.293 ms DNS error [AS6453] BCE Teleglobe

Canada Inc.

7 64.86.83.133 8.792 ms if-3-0.core1.LosAngeles.Teleglobe.net

[AS6453] BCE Teleglobe Canada Inc.

8 207.45.223.61 9.914 ms if-5-0.core2.LosAngeles.Teleglobe.net

[AS6453] BCE Teleglobe Canada Inc.

9 64.86.83.173 78.253 ms if-5-0.core3.NewYork.Teleglobe.net

[AS6453] BCE Teleglobe Canada Inc.

10 64.86.83.157 78.335 ms if-6-0.core2.NewYork.Teleglobe.net

[AS6453] BCE Teleglobe Canada Inc.

11 66.110.8.130 78.247 ms if-4-0.bb8.NewYork.Teleglobe.net

[AS6453] BCE Teleglobe Canada Inc.

12 216.6.119.18 185.022 ms DNS error [AS6453] BCE Teleglobe

Canada Inc.

13 195.22.192.46 203.618 ms retevision-17-es-mil5.seabone.net

[AS6762] Internet backbone

14 62.81.25.66 207.267 ms BARC-R16.red.retevision.es [AS8761]

Spain

15 62.81.24.7 204.231 ms BARC-R15.red.retevision.es [AS8761]

Spain

16 62.81.18.51 209.496 ms BARC-R25-NRP4.red.retevision.es

[AS8761] Spain

17 *

 

[ 03-17-2003, 10:52 AM: Message edited by: cadcam ]

[cadcam]

Now I see were some of what you are saying comes from thanks for that link.

[Guest CNC Apps Guy 1]

I'm not talking about releasing it on the net, I'm just talking about infecting and disabling his box. Nothing truly viscious, just enough to send a message that this type of behaviour is not tolerated here.

[Bullines]

quote:

---

BUt you have a pool of board`s user names and passwords.

So it will be not hard to allow only to registered users to enter ftp under their board`s users name and password to make logging of events simple and clear.

---

The forum and the FTP site are two separate entities, operated by two separate parties and in two separate countries

 

quote:

---

I'm not talking about releasing it on the net, I'm just talking about infecting and disabling his box. Nothing truly viscious, just enough to send a message that this type of behaviour is not tolerated here.

---

Refer to mine and plasttav's posts about the possibility of this IP belonging (or now belonging) to an innocent bystander.

[fboike]

I have to agree with bullines and plasttav

your chance of hitting the right box is very

slim 255 to 1, the last time I pinged that address it was inactive.

you would probably shut down some kid doing ther homework.

Why not focus on it not happining again.

sounds like a better solution.

[iowajim62]

Hi all,

Agreed that fixing it so it doesn't happen again is better than sending viruses out. As far as the FTP server goes ....

 

Jay,

How much work for you to have Registered MC users

logon with usernames and passwords ? Maybe Sim # could be password ? Just thinkin' out loud.

[MACHINEMASTERG]

quote:

---

? Maybe Sim # could be password ? Just thinkin' out loud.

 

---

i hear yea good idea i have to login at work if im away from computor for 5min i come back i have to log in again pain in the xxxx but this way no one does things at work on my computor we had a guy checking out semi illegal sites from other guys boxes the reborn christian guy was shocked when the IT guy showed the sites that he was supposedly on>>> sorry for the rant butiowa jim i hear you

[McRae]

Sim Number - Bad Idea. I don't like the thoushgs of my Sim Number being the password to an FTP sight that I don't know about or control the secutiy on... If there is a kid that can hack our Sim Numbers from a database like that - imagine all the cracked software that a dealersim number would precipitate. Just get a signup for the FTP and then Authorize its use thru the Administrator.

 

Thanks for you work here Jay - although this is an instance for Abuse - perhaps it is just some kids using your open space as a place to park their junk for a while.

[iowajim62]

Hi Andrew,

Sim # bad idea ?

You need activation code to use the sim, so what good does a bunch of sim #'s do without the activation code ? I'm not following your thinking, could you elaborate ?

[Toolfab]

Or Jay could just not let us use his server, he is doin this as a service to us at no charge. So I really dont think a debate about what Jay should do or not do is relavent. Maybe just a THANK YOU, and a "dude that sucks" is inorder.

[cadcam]

I say we look at this time as this sucks.

The MC FTP folder is passing worded of course that is why you can not get into the other 20 folders out side that one.

 

But the person of course has to join here to get the password and user.

 

I am going to take a little more time and mod the FTP.

 

Please enjoy it as you have.

I do not need any more thanks you all have said it a million time's and I no you like having this option. I do too.

 

If thinks keep happening I will deal with as it comes.

 

If we have to go to passwords for every person it will not include the Sim # but I would need the info for my side to make sure that you are who you say you are and if I had to run it thru CNC I can.

 

But till then all have a good day, as for me had to put my favorite cat down today so I am bummed enough as it is.

 

Oh ya thanks you all for your support and help you all have given me.

[cadcam]

Please review the FTP instructions at the top of this board for standerd rules. thanks all

[Brendan P]

Sorry to hear about the cat Jay,that's

a real bummer.

That has to be one of the hardest thing to do.

I love my animals.

[Scott Bond]

Bummer Jay

I have a loaner cat,, if you need it.

[DrewG]

That sucks!!!! I have to admit, I love my two cat's, also!!! I will be real bummed when that day comes. Just curious, how old was he/she???

[cadcam]

DrewG got spencer in 94. The vet told me it was a bad cancer in his chest.