I am a small business owner. My website was recently hacked, although no damage was done; non-sensitive data was stolen and some backdoor shells were uploaded. Since then, I have deleted the shells, fixed the vulnerability and blocked the IP address of the hacker.

Can I do something to punish the hacker since I have the IP address? Like can I get them in jail or something?




  This question was featured as an Information Security Question of the Week.
  Read the Feb 05, 2016 blog entry for more details or submit your own Question of the Week.


You don't punish the hacker. The law does. Just report whatever pieces of information you have to the police and let them handle it.

However, it is very unlikely that the attacker will be caught. The IP address you posses most likely belongs to another system that the attacker has compromised and is using as a proxy. Just treat it as a lesson learnt and move on.
