View Single Post
Old 08-19-2003, 11:21 AM  
EZRhino
Confirmed User
 
EZRhino's Avatar
 
Industry Role:
Join Date: Jul 2003
Location: couch
Posts: 6,258
Quote:
Originally posted by SplitInfinity
Want to catch him?

Heres a tip.

Compose an email in html with a 1x1 transparant pixel image
embedded inside the email. Make this pixel the first thing to load
but make sure it is hidden and fully transparant.

Next, MAKE SURE THIS IMAGE LOADS FROM YOUR WEB SERVER
not from the email itself. Also, make sure it has a GOOD name
that is unique so you can spot it later....

Now, keep an eye on your web servers logs... perhaps with:

tail -f /var/log/http/access_log | grep NameOfFileHere.gif

Or just scan through them looking for the image name.

The theory here is simple...
When the hacker checks his anon email account, the image loads in his browser
and the ip that shows up in the logs is his home computer if he isnt smart.

:-)

I have put 12 hackers in jail using that trick since 1997.

-Chris Jester-
SplitInfinity Web Hosting

Need security work done? Ring me. Or ICQ...
I would go with Jester's idea asap.
EZRhino is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote