[RS25.com]

Some wanna-be hacker is trying to spoof his IP address in an attempt to (undoubtedly) screw around with the RS Club. So how do you track a MAC address? :devil:

00.30.80.C9.80.70

Come on you network wizards, do your thing!

 

[kaboom]

once you figure it out i got some hard hittin' friends that can go to work on him:boxer: :flame:

 

[TMRRALLY]

Thanks kaboom for offering up MY services!!!

 

[RS25.com]

It's nice having friends.... anyway, apparently it's pretty difficult to trace a MAC address, so I don't care. I've been online for so long it's about time someone hacked me, huh?

Okay, time to do some backups and then patch the server. Which means a re-boot. Sorry!

 

[Warp3]

00.30.80.C9.80.70

According to http://www.coffer.com/mac_find/,
00:30:80 is the MAC prefix code for Cisco. So the network device (whether it be a router, switch, NIC card, etc.) is a Cisco device. Guess that doesn't really narrow it down that much though, eh? :lol:

 

[Warp3]

FYI:

http://www.sans.org/newlook/resources/IDFAQ/mac_address.htm

Sounds like the MAC address you have may be from the last router the data packet passed through.

 

[tbradshaw]

The MAC address will do you know good. The MAC address will be of the last network device that the traffic traveled through proir to the RS Web site machine. If you can get the IP address then there is a way to trace it back.

 

[RS25.com]

Nah, he was spoofing his IP - he used a fake internal IP, but my firewall caught it, so I thought I might check it out.

No worries.

 

[ellsworth]

Sorry James, but unless that dude has a static connection, his MAC address/ IP Address changes everytime he signs on. So for an amatuer, it's gonna be super hard.