Thursday, October 31, 2013

Victim # 29 in Potwin, KS Farmhouse Cyber-Attacks Comes Forward

Aerial View of Mysterious Kansas Farmhouse Serving As Hub For Cyber-Attacks

Numerous people have voluntarily contacted Spencer C. Young, indicating: (1) their social website or email account had been hacked; (2) their identity was stolen; (3) they were the victim of electronic harassment; or (4) were subjected to other forms of cyber-crimes . . . ALL of which emanated from the SAME IP (Internet Protocol) ADDRESS, which was then traced to the SAME PHYSICAL LOCATION of a rural farmhouse in Potwin, Kansas, which appears to have various addresses, such as:
  1. 8652 NW 120th St.,  Potwin, KS 67123
  2. 8653 NW 120th St.,  Potwin, KS 67123
  3. 8689 County Road 576, Potwin, KS  67123
  4. 8635 NW 120th St., Potwin, KS 67123  
The property is owned by Joyce M. Taylor, who in turn has made arrangements in advance to transfer title to this property jointly to Fred Whitmore and Mary Ann Mercado upon her passing.

Below is another instance of notification -- in fact, the TWENTY-NINTH KNOWN VICTIM . . . and there are obviously MANY more.

-----Original Message-----

Date: Thu, 31 Oct 2013 07:39:50 -0400
To: James Daniel <>

James --

I would be happy to chat with you.  Forward your phone # and convenient time 
for you to speak.

All the best,


From: James Daniel <>
Date: Thu, Oct 31, 2013 at 4:07 AM
Subject: Contact by IP from Farm House in Potwin, KS

Dear Spencer,

I'm currently a freshman in college studying computer science and security research, and this evening my roommate was contacted by a Facebook account that I identified to be a social engineer. The purpose of the contact was that the "girl" was a model in Florida and after flirting with my roommate she explained she was in a modeling contest and asked him if he would vote for her. 

After he received an Evernote link with the instructions on how to vote, I began doing basic information gathering on the website. Once I had the IP of the site, I soon found out that the whois server lacked information on the IP address listed, and decided to check the geophysical location of the IP. 

The location was the Farm House in Potwin KS. I have never heard of the issues that have transpired there until this evening, and eventually I stumbled across your blog, and then you. The site itself was a honeypot, and after running a couple vulnerability assessments, I found out that the site is not publicly hosted, but rather being run off a Linux based server most likely in a private location such as that house.  I have saved all the information I have gathered, and no response has been made to the account following having the link sent. 

I would like to talk to you about the information I have found out and possibly come one step closer to solving this mystery. I look forward to your response.

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.