Someone hacked my Yahoo account.  I was able to talk to them on Yahoo
Messenger, and had them follow a link to my website.  From the website
log file, I got their IP address: 12.43.119.95.  It appears to be a
permanent Cable Modem connection from Moffatt Communications, here in
Miami, FL - the same ISP that I use.

My question is, given the IP address (and the trace data I have
provided below), how do I find out who the person is who hacked my
account?  How do I get Yahoo to return my account to me?  I am able to
prove my identity to show that the account is mine, but cannot get
them to respond - they do not respond to email.


===================================================
=== VisualRoute report on 24-Sep-02 12:46:57 AM ===
===================================================

Report for 12.43.119.95

Analysis: '12.43.119.95'  was found in 15 hops (TTL=114). But, the
node is losing packets.

------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| Hop | %Loss | IP Address      | Node Name                     |
Location              | Tzone  | ms  | Graph      | Network
                              |
------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| 0   |       | 131.94.3.X     | mycomputer                    | *
                |        |     |            | Florida International
University FIU             |
| 1   |       | 131.94.3.8      | usrnetsrvr3.fiu.edu           |
?Miami, FL 33199      |        | 144 |  x         | Florida
International University FIU             |
| 2   |       | 131.94.2.1      | usr-gw.fiu.edu                |
?Miami, FL 33199      |        | 150 |  x         | Florida
International University FIU             |
| 3   |       | 172.25.97.209   | -                             | ...
                 |        | 287 |  -x-       | (private use)
                         |
| 4   |       | 205.152.144.139 | -                             | ...
                 |        | 243 |  -x        | BellSouth.net Inc.
BELLSNET-BLK1                 |
| 5   |       | 65.208.82.193   | 500.POS4-1.GW9.ATL5.ALTER.NET |
Atlanta, GA, USA      | -05:00 | 276 |  -x-       | UUNET
Technologies, Inc. UUNET65                 |
| 6   |       | 152.63.84.250   | 0.so-1-3-0.XL1.ATL5.ALTER.NET |
Atlanta, GA, USA      | -05:00 | 282 |  -x--      | UUNET
Technologies, Inc. UUNET-BACKBONE          |
| 7   |       | 152.63.82.197   | POS6-0.BR2.ATL5.ALTER.NET     |
Atlanta, GA, USA      | -05:00 | 290 |  -x-       | UUNET
Technologies, Inc. UUNET-BACKBONE          |
| 8   |       | 192.205.32.129  | uu-gw.attga.ip.att.net        |
Atlanta, GA, USA      | -05:00 | 287 |  -x-       | AT&T Bell
Laboratories NETBLK-ATT                |
| 9   |       | 12.123.20.250   | gbr3-p50.attga.ip.att.net     |
Atlanta, GA, USA      | -05:00 | 280 |  -x        | AT&T WorldNet
Services ATT                       |
| 10  |       | 12.122.2.182    | gbr4-p40.ormfl.ip.att.net     |
Orlando, FL, USA      |        | 260 |  -x        | AT&T WorldNet
Services ATT                       |
| 11  |       | 12.122.5.134    | gbr2-p100.ormfl.ip.att.net    |
Orlando, FL, USA      |        | 249 |  -x-       | AT&T WorldNet
Services ATT                       |
| 12  |       | 12.123.200.226  | ar1-p3110.mamfl.ip.att.net    |
Miami, FL, USA        |        | 267 |  -x-       | AT&T WorldNet
Services ATT                       |
| 13  |       | 12.125.29.146   | -                             |
?Parsippany, NJ 07054 |        | 774 |      -x--  | AT&T WorldNet
Services ATT                       |
| 14  |       | 24.142.218.13   | -                             |
?Miami, FL 33178      |        | 768 |      -x--  | Moffat
Communications - Doral DORAL-9-20-ISPCHNL |
| 15  | 10    | 12.43.119.95    | -                             |
?MIAMI, FL 33173      |        | 843 |       -x-- | MOFFAT
COMMUNICATIONS MOFFAT-C618-119            |
------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Roundtrip time to 12.43.119.95, average = 843ms, min = 690ms, max =
1004ms -- 24-Sep-02 12:46:57 AM


12.43.119.95:
Location  = MIAMI, FL 33173
lat/lon   = 25.42n, 80.21w
source    = NET whois.arin.net
type      = guess
geo-key   = 33173 -> .\data\geo.vdb




OrgName:    MOFFAT COMMUNICATIONS 
OrgID:      MOFFAT-3

NetRange:   12.43.119.0 - 12.43.119.255 
CIDR:       12.43.119.0/24 
NetName:    MOFFAT-C618-119
NetHandle:  NET-12-43-119-0-1
Parent:     NET-12-0-0-0-1
NetType:    Reassigned
Comment:    
RegDate:    2001-10-23
Updated:    2001-10-23

TechHandle: ZS149-ARIN
TechName:   Sherwood, scott 
TechPhone:  +1-281-360-7500
TechEmail:  ssherwood@moffatus.com 

# ARIN Whois database, last updated 2002-09-23 22:15
# Enter ? for additional hints on searching ARIN's Whois database.

OrgName: MOFFAT COMMUNICATIONS
OrgID:   MOFFAT-3
Address: 10171 NW 58TH STREET MIAMI, FL 33173
Country: US
Comment: 
RegDate: 2001-07-13
Updated: 2001-07-13

Since the address was probably allocated dynamically by Moffat, that
IP address is probably used for many different people. Your best bet
would be to contact Moffat, provide them with the IP address and the
time it was in use, and hope that they have this information in their
logfiles. They may not provide it to you without a court order
though...

With out the copperation of their isp there is noway find out who they
are from their ip.  Though you might be able get some infomation about
them by determing how they got control of your account.
Based totaly on the fact that the person is in the same area as you
would lead me to belive that it might very well be someone you know,
cause the odds of a hacker from your same city hitting your account is
prettly low.
You might compare the ip of some of your "friends" to this one and see
if any of them match.