My site got hacked, I know the IP can we do something

[AjiNIMC]

My site got hacked, I know the IP can we do something about it. The ip is 80.6.113.190 (can be a proxy as well).

Lets take a step to punish hackers.

AjiNIMC

[mike]

Um. No.

You want to turn around and hack the hacker?

For one, that's not what the security discussion forum is for.

Secondly, aside from being juvenile, it's just asking for trouble. They hack you, you hack them - then what? They're gonna say 'oh we learned our lesson' and rethink their lives? Riiight.

Not to mention the fact that unless they're complete morons, you aren't going to be able to even track them down and you're just going to attack some poor chump whose machine has already been compromised.

[AjiNIMC]

I was not keeping it updated, thank God I had a recent backup :), things are back on track.

thanks,
aji

[mike]

Save early, save often.

You can never have too many backups. Glad you're all fixed up. Now make sure you look for any rootkits and be sure to change any and all passwords.

I'd also suggest you keep and extra sharp eye on that machine for the next couple of weeks and look for any unusual activity in the logs.

[AjiNIMC]

If I launch a complain with the respective ISP will it help? Since this is just a small forum I can play with it. But I am going to keep it updated.

[mike]

I don't see any problem with informing the isp. If one of their subscriber's machines is being used for shenanigans and misdeeds, I think they'd be interested sure.

[AjiNIMC]

According to the ip mapping this ip belongs to "NTL CAMBRIDGE - CABLE HEADEND". I searched the web for some contact us but could not fetch one. Is there a way I can find some contacts. I want to contact the ISP.