Tracing the Hack 2

(Finally Part 2)

We continue the story of Totoy the hacker
( http://itphonehome.blogspot.com/2006/08/tracing-hack.html) who succesfully hacked into his school's web server and defaced his school's official webpage for revenge on a school official. He used a commercial DSL account for this purpose.

At the ISP

Bagito found that the IP address used for the hack is assigned to an ISP in Manila. Armed with a search warrant, Bagito went to the ISP in question to look into their records corresponding to the time stamp he got from the server. Fortunately, the ISP was in very cooperative mood and more fortunately, the ISP has not yet deleted its logs pertaining to that time frame. Assisted by one of the ISP's topnotch system administrator, they were able to get to the log file and match the IP address with the time stamp from the server.