Friends computer was hacked, what can I do with this IP# he gave me?

[Yzzim]

My friend said his computer was hacked and the mouse started moving weird along with controlling the computer and having it make weird noises. He said that this IP# was hacking him:

38.163.226.133

He tried to connet to them using Remote Administrator but it asked for a password so he couldn't connect.

He's going crazy right now trying to figure out who it is. And no, it's not me

 

[notfred]

Apparently, you can't do jack sh!t w/ that address, or you would have done something by now

 

[Yzzim]

This is the program they used to connect to my friends computer.

 

[BeauJangles]

Well, Remote Administrator is damn easy to run through a proxy and it looks like the computer you're friend is trying to connect to is part of Performance Systems International Inc, which means they probably have a hacked box on Performance Systems' network and used it to connect to your friend. The only possible thing you could do would be to hack 38.163.226.133, and hope they either still have logs or they turned on remote administrator logging. They probably deleted the log files, so your just out of luck ( at least i think so)

Edit: arin.net is how i found out who owns that ip, btw.

 

[narzy]

Originally posted by: Yzzim
This is the program they used to connect to my friends computer.

which means your friend had it installed and active, and didn't take the proper security measures to protect himself. Some kiddie found the open port, probably brute forced his password and got access to the program.

what can you do with the obtained IP? run it through arin.net , find out what ISP owns it, and report the intrusion. but to be frank, their not going to do anything about it.

 

[Mystified]

Sounds fishy....anyone who can get the IP of the person who hacked them shouldn't have gotten hacked in the first place....

 

[Yzzim]

Originally posted by: Mystified
Sounds fishy....anyone who can get the IP of the person who hacked them shouldn't have gotten hacked in the first place....

Finding out who's connected to you isn't hard. A simple netstat command works quite well

 

[Jmmsbnd007]

Originally posted by: Yzzim
This is the program they used to connect to my friends computer.

He wasn't hacked, he's just stupid for leaving something like that on and with no password.

 

[Mystified]

So the person who hacked him just let him goto dos and type the command in.