My website was exploited (don't worry about how) and the result was there were several WebShells installed in various locations. The exact web shell is just like the one listed in this question here on StackOverflow.
I deleted the shell file, obviously, and did my best to resolve the exploit. In the meantime, I caught an IP address in my site's error logs trying to access said shell file. The IP is coming out of Waterloo, Ontario from a Rogers Cable IP address. This appears to be a residential IP.
So, besides blocking the IP, is there anything else I can do with this? Report it to Rogers - would they believe me, would they bother? Is it possible that it's just a zombie computer proxying the request for the real attacker?