Apparently I cannot ask 'who is hacker "s8ldier"?' I'm hoping I *can*
ask how to *find out myself* who he/she is... This hacker has damaged
one of my sites and a quick google search shows that I am not his /her
only victim. How can I identify this hacker and can he/she be punished
for his/her vandalism?

Hello silvercaribou--

Years of experience in being hacked dictates that you should take the
following approach:

1) Investigate if your hosting provider (should you use one) has some
kind of logging system. Report the activity to them. They should be
able to report back with an access log. Usually hackers use some kind
of brute force password discovery process, so a log will pick it up.
This may not work if they were crafty enough to have deleted the log.

2) Lock down your hosting solution. Again, if remotely hosted, this is
something you'll need the hosts help for. What you can do up front is
frequently change passwords and make them as complex as possible. If
you own your own hosting solution, then use IIS Lockdown (for Windows)
and any other lockdown tools for Apache, etc.

3) Be patient. You can't always do something to the person. You just
have to make sure you're secured enough so it doesn't happen again.
Work with a local consultant or research online how to effectively
secure against hackers. And if you want a walk on the wild side,
research hacker sites and learn the tricks and tools they use. Find
methods to counter those tools with your new found knowledge.

Hope this helps
-pcpalct

Hello silvercaribou--

Do you find any information about this script kidy ?
He deface some of my sites yesterday, and i also want to find him...

Contact me if you want to share your information (ans access to mines of course)...
Maybe we can find him together...

--
Puyb

There sure are a bunch of sites. I saw on
http://www.zartravel.com/buceo/ an IRC address...
Irc: /server irc.brasnet.org | /join #h4ck3rsBr

hope this helps, doubt it will
-Fractl

Search Google for the hackers name. It could possibly be a virus that
hacks sites. Your ISP should have logs of who accessed the site and
there may be seperate IIS logs (possibly in a folder called W3scv).
Once you have found an IP address you can find out who owns it using
ARIN or RIPE. It is quite likely that the hacker is from outside your
country meaning there is nothing much you can do about it.