Needs some help for tracking or tracing an ip

Red Rose · Post by **Red Rose** » Mon Apr 22, 2002 10:07 pm

I know I have seen something along these lines, but can anyone tell me where I can find a site or program that will help me trace or track an ip?
Thanks in advance

MadDoctor · Post by **MadDoctor** » Mon Apr 22, 2002 10:10 pm

http://www.arin.net/whois/

free version

blebs · Post by **blebs** » Mon Apr 22, 2002 11:55 pm

Neotrace express freeware and decent.

http://www.webattack.com/get/neofree.shtml

Red Rose · Post by **Red Rose** » Tue Apr 23, 2002 10:39 am

Thanks everyone! They all helped alot*s*
Now another question, sorry to be a pain

I have traced the ip to the persons server, is there any way that I can get past the server to find out where the person is, not just their server?

SeedOfChaos · Post by **SeedOfChaos** » Tue Apr 23, 2002 12:59 pm

I am not quite sure what you mean. In case you meant it as "Now I know who their provider is, but I can't find any info about the end user".

Well, that's intended that way. Because if it were easily possible to trace the exact address, nobody would be safe in the internet anymore. IP's are easy to get, physical addresses aren't.

If you look closely at the whois output, there is usually a "abuse contact" mentioned, like "abuse@abc.com". If said person did something to you which violated his/her Terms of Service (spam, harrassing you, trying to hack your computer, etc.), email them with the IP and the time when you got the IP, and describe what said person did. Include any kind of proof, like firewall logs (if said person tried to hack you), chat histories, as text or screenshot, whatever. See how things go from there.

If it's just for fun, I doubt you'll be able to get the exact physical address of said person. Unless you know their real name, then you can get the area by looking at the whois output and check a phone book or something.

Cheers,
Ronald

MadDoctor · Post by **MadDoctor** » Tue Apr 23, 2002 1:46 pm

Right.

IP numbers can be loosely associated to Social Security Numbers. I can peace together any number of IP numbers but without a tie to “who” has that IP I’m wasting time. If I have an SSN but no name, or date of birth, I’m stuck with a 9 digit number.

Red Rose · Post by **Red Rose** » Tue Apr 23, 2002 10:45 pm

Thanks for the info *s*
I basiclly wante dto find out if it could be done, although someone was harassing my daughter and was wondering what if anything could be done.

Will use that abuse@ thing.
Thanks Again!

Kip Patterson · Post by **Kip Patterson** » Wed Apr 24, 2002 5:47 am

To explain just a bit more, blocks of IP's are issued (sold) to ISPs. They then allocate them to their end users, sometimes through another ISP or agent.

For most home users, the IP assignment is not permanent. That's why it is important to have precise date and time info so that the ISP can figure out who was using the IP at the time of the harrassment.

There can be further complications. The offender may have been using a proxy, that is, a server with which he commmunicated which then passed on the traffic to your IP.

If you have any reason whatsoever to think that this is more than a casual kid thing, please call the police. There are a lot of real sickies out there creating tragedies.

Kip

Croc · Post by **Croc** » Wed Apr 24, 2002 7:58 am

A chance to post some links to sites that deal with Children and the Internet should never be missed so here is a list I found:

http://www.cyberangels.org/

http://www.disney.go.com/cybersafety/

http://www.ed.gov/pubs/parents/internet/

http://www.getnetwise.org/

http://www.microsoft.com/info/safeonlinedefault.htm

http://www.missingkids.com/html/ncmec_d ... safty.html

http://www.nchafc.org.uk/internet/

http://www.netparenting.com/

http://www.rcmp-grc.gc.ca/html/websafety.htm

http://www.safesurfin.com/

http://www.theguardianangel.com/

If only one of these sites helps then it's reason enough to have the list bookmarked.

Apologies for broken link (if any). I haven't checked them.

On the subject of IP addresses, if the IP is a static one then you will see a result in the person is online. What you will see is the name of the computer (see "Log Off, ##### after pressing the start button).
Of course, what has been said about proxy servers is right and the computer will be masked.

Is the abuse in the form of emails or chat?

If you were to break down the info on the header of an email if that is how this is happening, you will find a number of IP's in there.
To do that: Right click the message in "Inbox" and select "Properties". You should see a button named "View Source" or similar. Open that and read from the top down to where the addresses finish. There will be 3 or 4 IP addresses there to check out.
Again, this will not give a result if it is through a proxy.

I did this recently and found the computer name and the ISP using the NeoTrace Express program Blebs linked. It solved a puzzle that had been going on for a number of months.

Once you have the info, then use the abuse@ option.

Hope this helps.

Croc.

fanta · Post by **fanta** » Wed Apr 24, 2002 8:15 am

And to add what was previously said.

You can somewhat trace ips, if you can resolve them to their host. Then you can break down the IP. First by provider, then state, city. Usually they are shortened. @home does this with their ips.

Email the admins of their isp, as was said ^

Red Rose · Post by **Red Rose** » Wed Apr 24, 2002 11:19 am

Thanks for all the links and stuff everyone. The problem is being looked into and it is being taken care of

I do not think this person will bother my daughter again any time soon *evil laugh* thanks again for all the help

SeedOfChaos · Post by **SeedOfChaos** » Wed Apr 24, 2002 1:12 pm

I'm glad we could help you. Stick around, mmmmkay?