up vote 0 down vote favorite
share [g+] share [fb]

A friend of mine recently fell victim to a hybrid keylogger+remote access virus. The creator of the virus was kind enough to hard-code his/her IP address into the virus itself.

Is it possible to report the virus creator to his/her ISP, and if so, how would I go about doing it?

link|improve this question
You think that ip address is a personal address of the hacker? or a remote ip to a server they have also hacked, that is owned by someone else? Smart enough to infect that PC but not smart enough to cover their tracks?, I don't think so. – Moab Apr 18 '11 at 0:02
@Moab: No, I don't think it's the personal address of the hacker. It's where victims' account details are sent. Or so Wireshark and a disassembly have led me to believe. – robinjam Apr 18 '11 at 0:34
@Moab: Personal address or no, I still think I owe it to the ISP to let them know their services are being used for illegal activity. – robinjam Apr 18 '11 at 0:42
Do what you think is right, Wil posted the information you need to contact them. – Moab Apr 18 '11 at 0:57
feedback

1 Answer

up vote 1 down vote accepted

It is...

Go to www.whois.sc and type the IP address.

It should allow you to find out the country of origin, ISP and abuse contact details as well as a few other bits of information.

However, I doubt this will go anywhere.

(depending how technical you are) In addition, you may want to do your own information gathering - try connecting over HTTP default ports (I wouldn't recommend further than this as you do not want to get in to hacking) and just see if it responds - you may get lucky and see "enough" information if they are hosting any websites.

link|improve this answer
The IP doesn't seem to be in use for anything other than harvesting account details. It may even be a proxy, I'm not sure. I'll contact the ISP, although I don't hold much hope. It's frustrating that this guy is probably going to get away with it thanks to the anonymity of the internet. – robinjam Apr 18 '11 at 0:37
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.