My name is Bryan Hanner and I am investigating a bomb threat that was made to our regional airport on 10/27/2020. The number 772-934-4150 made a number of other threatening calls to other agencies and governmental entities. I obtained call logs and IP address logs which contained the hostname “Courvix.com”. The IP addresses associated with Courvix are 18.104.22.168 and 22.214.171.124
The telephone number is from a VoIP application. Based on this information, would you be able to determine a location or actual IP address of the suspect user? Of course I would obtain the required legal process to obtain any information/records from Courvix. The date range I am looking at is 10/25/2020 to 10/28/2020.
Thanks in advance for your assistance and if there are any questions or you require additional information, please feel free to contact me at this email address or at my office number listed below.
Detective Bryan Hanner #12091
McLean County Sheriff’s Office
Criminal Investigations Division
104 W. Front St.
Bloomington, IL 61701
Thanks for contacting me today.
Courvix.com is a selection of free services - currently this includes a VPN service and an email service. The IP addresses you mentioned belong to our Atlanta and New York VPN servers respectively.
Based on the information provided, there isn't any possibility of locating the real user responsible for this act. Our servers don't keep any kind of activity log containing information relating to any user's activity. The possibility of having useful logs in matters like these is already very low even if we were to make a conscious effort to start logging internet traffic.
It's worth noting that our VPN servers only have a single public login configuration as well, so all of our users share the same login credentials. We do have a list of connected IP addresses in real time, but when a user disconnects from the server, that IP address is removed from the log. Therefore we wouldn't be able to locate complete logs from a specific time frame.
Additionally, we wouldn't be able to identify the user in question as the full list of IP addresses would be the only information that we would have. We'd have no way of knowing which one was responsible for the threat.
I wish you the best of luck in your investigation and if there are any further questions you'd like to ask feel free to do so via this email address. Furthermore, I'll be sure to keep a look out myself and I'll contact you if I find anything of worthy note.
Courvix Network Administrator.
NOTE: OFFICIAL COURVIX MAIL ADDRESSES ARE ONLY THE FOLLOWING: