Curious about the origin of the following IP's.

Page 2 - Seeking answers? Join the AnandTech community: where nearly half-a-million members share solutions and discuss the latest tech.

Kadarin

Lifer
Nov 23, 2001
44,296
16
81
Originally posted by: Alptraum
The one thing that generally NEVER changes is the MAC address. This is hardcoded to almost every net work card. I have seen equipment that has a changeable MAC address but that stuff is very rare (and VERY pricey). The only stuff I have seen like that is hardware monitoring pods (for ATM switches in my case) and stuff of that nature.

Not exactly true. Many home NAT routers, for example the standard Linksys BEFSR41, have a changeable public MAC address.
 

ebaycj

Diamond Member
Mar 9, 2002
5,418
0
0
Originally posted by: Alptraum
Originally posted by: Dezign
Okay, here I go shamelessly asking questions... does every computer have a specific IP number? And is it true some people use ID-blockers/scramblers? Blah. *feeling stupid, but hoping for an answer*

Sort of. When on an IP based network (internet or whatever) every computer will have at least one unique IP (usually only servers will have more then one, and even then its not terribly common). However, changing an IP is easy. The one thing that generally NEVER changes is the MAC address. This is hardcoded to almost every net work card. I have seen equipment that has a changeable MAC address but that stuff is very rare (and VERY pricey). The only stuff I have seen like that is hardware monitoring pods (for ATM switches in my case) and stuff of that nature.

Depending on the resources you can bring to bear you can match an IP to a person most of the time. Or at least a location. Granted to do that you generally either need to be a government agency (FBI, police and so on) and request it from an ISP, or a very knowledgeable hacker in order to compromise the ISPs network to check their logs.

It is possible (and not very hard) to either spoof an IP or redirect it through multiple proxies. However, if you have some of the resources I already mentioned it just comes down to if you want to take the time/trouble to track it down.

About the only thing that comes close to being untraceble on the internet is to use a laptop with a stolen/cloned cell phone. Even then if say the feds are after you they can figure out where you are down to under a square mile.


actually just about any network card will allow you to change the MAC address. in winXP, its start->settings->control panel->network connections->right click on your ethernet card->hit the configure... button->hit the advanced tab at the top->enter a valid MAC address in for the value of 'network address'. MAC changed. i personally like 00 00 DE AD BE EF.

other OS's will do this differently, but most will let you do it.

ebaycj

 

richardycc

Diamond Member
Apr 29, 2001
5,719
1
81
wow I live 2 town over from chicopee, MA. I can't someone from my area is stalking her. its a small world after all! maybe someone I know? ;)
 

NogginBoink

Diamond Member
Feb 17, 2002
5,322
0
0
Dezign: an IP address can be used to identify one particular computer (or rather, network device) on an IP network.

However, IP addresses do change.

For instance, modem users, when they dial their internet service provider, get an IP address from the ISP using a protocol called DHCP. When they hang up, the ISP gives that IP address out to another caller. When caller #1 dials up again, he'll most likely get a different IP address from the ISP's pool of addresses.

The ISP probably keeps a log of who got which IP address from DHCP when, but you'd need a court order to get that information from them.

Then there's what Alptrom said. Many computers on a local network can "hide" behind one IP on the Internet. This is called a proxy server or a NAT device (both do essentially the same thing). So a school or business, for instance, can put hundreds or thousands of computers on their internal network, and have all of that traffic go to the Internet through one IP address. You'll see that one IP address, not the internal network, in your network traces.

Short story: unless you've got the resources of law enforcement, there's not a whole lot you can do to find the 'owner' of a particular IP address... not without LOTS of work.
 

Ciber

Platinum Member
Nov 20, 2000
2,531
30
91
Don't tell me you're wasting your time with this crap just because people are calling you names on your guestbook... lol...



Seriously, you have no way of tracking these people, unless you can show police proof of something illegal being done. They can then get a warrant and demand the info from the ISP.
 

Norrlands

Member
Oct 6, 2003
197
1
71
This may be a little off-topic, but I was also curious about this because my firewall picks up port scan attacks, as well as other attacks. I use McAffee firewall, and the trace program on that uses the whois search. What good does this do me? Not like I can do anything about it. Or is there?
 

simms

Diamond Member
Sep 21, 2001
8,211
0
0
Originally posted by: Norrlands
This may be a little off-topic, but I was also curious about this because my firewall picks up port scan attacks, as well as other attacks. I use McAffee firewall, and the trace program on that uses the whois search. What good does this do me? Not like I can do anything about it. Or is there?

Eh... not really. It's put there to give you a false sense of security.
 

shuan24

Platinum Member
Jul 17, 2003
2,558
0
0
But isnt that the whole point of a firewall? //to prevent people from locating or accessing you?