Finding out someone's IP address?

[spot]

but how do u get the ip?

[Brian]

quote:Originally posted by spot
but how do u get the ip?

From ISPs (Internet Service Providers). Is that what you're trying to ask?

EDIT: Forgot to add... Different IP addresses are assigned to each computer. The IP addresses starts from 0.0.0.0 to 255.255.255.255. It is just like the telephone companies assign phone numbers 200-0000 to 999-9999.

[coolguyj2]

Well to get IP u need to have a direct connection with the person!! i.e either by sending/rec a file/photo/... or by webcam or any other way!!!! by just chatting it is no possible as it is thru server. also, if u r on a LAN conn like mine i.e. my IP which u can get will be of my modem which is not actually my IP!! (a lil bit confusing lang)!!! so, to trace some1's add/phone no from IP, u need his/her IP and not modems IP!!! there are many other ways of getting IP!!!

[DJHyperbyte]

quote:Originally posted by spot

but how do u get the ip?

You don't, unless you got a good reason to do so - which I doubt.

Read the Forum Policies.

quote:

• Warez, Hacking and Cracking
  Don’t ask for us to help you crack a password, or hack into someone’s account. Don’t request illegal software. Any such requests or discussions will be summarily deleted by the forum staff. There are plenty of sites out there that discuss these topics; BigBlueBall isn’t one of them.

[Fish Fingers]

There is a way you can get past the msn server's ip address and thats as follows: 1. Send the victim a file that will be transfering for at least 5 mins and open MS-DOS Prompt. 2. close all webpages and everything you are connected to (downloads, other transfers etc) but keep the victims transfer going. Type in MS-DOS 'netstat -n' but without the ''s and hit enter. A list of ip's should appear and, as long as you did step 2 well, the victims ip should be in the Forign coloum.

[smontgom]

quote:Originally posted by Brian

From ISPs (Internet Service Providers). Is that what you're trying to ask?

EDIT: Forgot to add... Different IP addresses are assigned to each computer. The IP addresses starts from 0.0.0.0 to 255.255.255.255. It is just like the telephone companies assign phone numbers 200-0000 to 999-9999.

An IP does not start with 0.0.0.0. You can't have a 0.X.X.X address! A full C IP scope would be like 10.1.1.1 through 10.1.1.254 (you cant use 0 or 255 on the end) with a subnet mast of 255.255.255.0. Or some people with routers or firewalls at home will notice a 192.168.0.1 address for their device. This provides an internal IP address range, while the outside interface has an address provided by an ISP. If ICMP (ping) is enabled, you can quite easily find an IP address. Solar Winds has a network browser where you can scan your little heart away. If someone has open ports, you can even see the USER that is logged on. Get a book and learn something.

[svMedia]

smontgom. You beat me to it. haha IP addresses do NOT start from 0.0.0.0 to 255.255.255.255. In fact, IP addresses do not even start with 0 or 255 OR end with 0 or 255. 255 in hex would equal FF, and in IP terms that would register as a 1 or "broadcast". 0 would of course be zero or in IP terms "the network". This all because of the mask 255.255.255.0. (telephone companies also do NOT assign numbers from 200-0000 to 999-9999, I used to work for a telephone company but I won't even get started on that). Ethernet addresses are assigned by the Internet Standards Organization (ISO) more or less. I forget which branch actually handles the first 24bit MAC (actually the first 2 bits). Local IP addresses are assigned according to your MAC address. Your MAC address is a UNIQUE, 48bit set of numbers (hex) attached to your Network Card or Integrated Interface. The first 24bits are assigned by the manufacturer of that Network Card. The first 2bits of the first 24bits are assigned by the ISO to specific manufactures. Are you following? ISPs are given a set of IP ranges in whatever class they are in. A, B, or C (D and E you don't need to worry about). Each of these classes have a range which you can determine by your mask. 255.255.255.0 is class C. Now when you take both of these sets of ranges you can see how unique an IP can get. If you're running on a router or switch or server of some sort then it possible and actually quite common for 2 people to have the same IP addresses, HOWEVER, you do not connect to THAT IP. You would be connecting to a WAN IP address. The IP address given to you by your ISP. Most IP addresses (localy) are 192.168.2.x or 192.168.1.x but you obviously cannot connect to these addresses since they are local IP addresses. But there ARE ways of obtaining the IP from someone reguardless of direct connections or file transfers. Hackers will use port sniffers or service scanners to check for open ports or unprotected services. IP addresses (WAN) can easily be obtained this way. If you're trying to obtain an IP from someone you're simply chatting to you could run Peeking programs such as EtherPeek (if you're willing to spend the big bucks). But this would also require you to know how to break apart individual packets and read HEX fluently. All in all, if this kind of stuff interests you so much... take Networking classes and obtain a degree. And DO NOT try to obtain an IP for revenge. IP addresses are traceable... even on wireless connections. Anything you do can be scanned, monitored, and traced to the very spot you are sitting.

[Nederfox]

Brian,

You are absolutely right, but note these tiny considerations:

"Your MAC address is a UNIQUE, 48bit set of numbers (hex) attached to your Network Card or Integrated Interface."
Wrong
Many NICs and routers have a highly user-configurable MAC address. So this does not have to be unique

"But there ARE ways of obtaining the IP from someone regardless of direct connections or file transfers."
True
It even can be far more simpler. All noobs can do it.
E.g. Miranda IM has a open-source, official "Tip info" plugin that uncovers ICQ user's both internal and external IP address. You don't even need to talk to that person...just silently add the ICQ# to your CL and move the mouse pointer to the nickname

"EtherPeek (if you're willing to spend the big bucks)"
No need to spend any bucks!
Use the excellent, FREE and open-source Ethereal instead

"Anything you do can be scanned, monitored, and traced to the very spot you are sitting."
In fact, yes. But using chained anon proxies can make tracing much more difficult.

Yours, Nederfox

[svMedia]

Nederfox:

"Wrong. Many NICs and routers have a highly user-configurable MAC address. So this does not have to be unique"

I'm afraid you're wrong. Have you studied Networking? Do you know who the ISO is? ALL MAC addresses ARE unique and I would gladly accept proof otherwise! It's a networking standard and MUST be true in order for networking to even be possible. Granted there may be an incredibly small chance that 2 people will have the same MAC address but the odds of getting struck by lightening 3 times in a row are greater than finding 2 people with the same MAC address. It's a Law, Standard, and Must Have function for networking. Any test you take will tell you this. MCSA, MCSE, MCP, Network+, Security+, etc. MAC addresses can be altered through routers and programs but when packets are sent, the burned MAC address is always the same to each NIC, regardless of alteration. Change your MAC address with whatever program you use and then do an ipconfig /all and tell me it's not the same. A MAC address is just like a social security number or VIN for your car. You need to do your research a little better on this issue. The address you are thinking of is a MAC clone address... not the MAC address. There is a BIG difference.

As far as chained proxies... yes it will make tracing more difficult but that's why we have computers. So we can let them sit and do all the work for us. Even through chained proxies, one can be traced in a matter of minutes if not less. I'm just basicly saying that it's not worth it.

[svMedia]

Nederfox: (This is for you to study...)

Physical Numeric Address (MAC Address):
This consists of a 6-byte numeric address, burned into firmware (on a chip) by network interface manufacturers. The first three bytes (known as the organizational [u]unique identifier,[/b] or OUI identify the manufacturer of whatever interface is in use; the final three bytes provide another [u]unique[/b] numeric identifier that causes any interface on a network to have a [u]unique[/b] physical numeric address. The physical numeric address functions at a sublayer of the Data Link layer in the OSI network reference model, called the Media Access Control (MAC) layer. For that reason, it's also known as a MAC layer address (or MAC address). Although there's more to it than this explanation suggests, it is the job of the Logical Link Control (LLC) sublayer in the Data Link layer software (usually at the driver level) to enable the network interface to establish a point-to-point connection with another network interface on the same physical cable segment. ARP (Address Resolution Protocol) is used to permit computers to translate numeric IP addresses to MAC layer addresses, and RARP (Reverse ARP) is used to translate MAC layer addresses to numeric IP addresses.

"Guide to TCP/IP", Laura A. Chappell. Course Technology 2002
ISBN: 0-619-18654-2
Pages 54 to 55

If you need more proof, go here...
http://www.webopedia.com/TERM/M/MAC_address.html

Now I'm not trying to be an ass about this by any means... I simply don't want anyone reading this thread to be misinformed.