finding out who someone is by their IP address can it be done and how

[lesch2k]

i was the butt end of an online joke, however the person doing the joke did not cover their tracks and i was able to look up their IP, (he/she, most likely he, linked pornography on my birthdate on a calendar i administer for a school group)

is their a way to look up informatiopn about someone if all i have is their IP address.

please help, joking is more fun if you an oneup someone.

 

[ZeroBurn]

check out NeoTrace, fun proggie

should give you more info about it, or at least find out what ISP they're on

 

[BA]

You can figure out what ISP they're on. And one time I managed to track down someone DL-ing off me in Napster to someone in my dorm. And there was some cable provider that had stuff named after streets, so I knew a general location once...

 

[InFecTed]

If it's the real IP and not some anonymous proxy than you maybe got a chance

 

[NuHir]

Do an NSlookup on the IP to get their hostmask. Once you have that, do a whois on the domain. You'll then get the Name and address of the Administrative Contact for that Domain. Give them a call or just send an E-Mail to abuse@<ispnamehere>

 

[Bozo Galora]

(wrong forum - OT)

You are not going to find THE PERSON who dissed you by conventional lookups. You will find their provider. You will need to be the recipient of the contact, not your school, so you can give the providers abuse personnel the exact day and time of the contact and a printed record of same (zone alarm/blackice etc), then they MAY do the work of looking up who was actually involved at that time. Some ISP's are good at helping get rid of abusers, some could care less, and with todays economy, more and more care less. The better the abuser, the harder to track, like when they are using an anonymizer. It is actually a lot easier to personally track an emailer than a web poster. I have a program that is very good at tracking email and another that gets to the nitty gritty on ISPs in about 50% of the time. (But I dont give it out.)
However, its really best that it is difficult to find out which one of those 22 million AOL people (for instance) caused you anger. You sound like you want to stalk the person, and reciprocate, like maybe punching his face, or maybe even Glockin' it to him.
You have to get into the mindset that its just not worth the trouble to get mad at everyone who slights you. This is the rationale that gangs use every day to kill each other, but where does it get them?
Remember - a hundred years from now, you'll never know the difference.

 

[Jiggz]

www.WHOIS.com will give you the provider's address and other info. From there you can ask them for help.

 

[lesch2k]

whois.com does not seem to have any useful help

i suspect the person used their IP as neotrace gave me a city as well as a little info about the user but nothing that lets me know who it was. and most opf the peoplewho use the calendar are unaware of the IP tracing feature

oddly enough it was from the city of my disgrunteled ex-roomate, however a password is required to add events to the calendar, a password he did not know IMO.

i tried using the nslookup as described below:

C:\>nslookup 216.195.XX.XX
Server: my server
Address: my IP

Name: dhcp-xx-xx.townisp.com
Address: 216.195.XX.XX (last 4 digits removed to protect their identity for now)


C:\>whois 216.195.XX.XX
'whois' is not recognized as an internal or external command,
operable program or batch file.



How does the whois feature work

any other sufggestions

 

[Soybomb]

<< Name: dhcp-20-67.townisp.com
Address: 216.195.XX.XX (last 4 digits removed to protect their identity for now) >>


LOL you do realize that dhcp-20.67.townisp.com is what resolves to 216.195.20.67 right?

like the others said you're not gonna get the guys name. You can either email abuse@townisp.com and tell them what happenend and cross your fingers that they will go through their logs to help you out, or just get over it and change your passwords now. I recommend the later as getting an isp to help if you aren't law enforcement is like pulling teeth.

 

[lesch2k]

my bad, that is sort of funny though

 

[Platypus]

Target: 216.195.20.67
Date: Sun Jul 22 21:03:58 2001
Nodes: 13


Node Data
Node Net Reg IP Address Location Node Name
13 1 1 216.195.20.67 Worcester dhcp-20-67.townisp.com


Packet Data
Node High Low Avg Tot Lost
13 ---- ---- ---- 2 2


Network Data
Network id#: 1
SHREWSBURY ELECTRIC &amp; COMMUNITY CABLE (NETBLK-SHREWS-NET)
100 Maple Avenue
Shrewsbury, MA 01545
US

Netname: SHREWS-NET
Netblock: 216.195.0.0 - 216.195.31.255
Maintainer: SHRE

Coordinator:
Paika, Fran (FP158-ARIN) fpaika@townisp.com
508-841-8312

Domain System inverse mapping provided by:

NS1.TOWNISP.COM 216.195.0.133
NS2.TOWNISP.COM 216.195.0.132

ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE

Record last updated on 22-Jun-2001.
Database last updated on 21-Jul-2001 23:13:10 EDT.

The ARIN Registration Services Host contains ONLY Internet
Network Information: Networks, ASN's, and related POC's.
Please use the whois server at rs.internic.net for DOMAIN related


Registrant Data
Registrant id#: 1
The Data in Network Solutions' WHOIS database is provided by Network
Solutions for information purposes, and to assist persons in obtaining
information about or related to a domain name registration record.
Network Solutions does not guarantee its accuracy. By submitting a
WHOIS query, you agree that you will use this Data only for lawful
purposes and that, under no circumstances will you use this Data to:
(1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail
(spam); or (2) enable high volume, automated, electronic processes
that apply to Network Solutions (or its systems). Network Solutions
reserves the right to modify these terms at any time. By submitting
this query, you agree to abide by this policy.

Registrant:
SHREWSBURY ELECTRIC &amp; COMMUNITY CABLE (TOWNISP-DOM)
100 Maple Avenue
SHREWSBURY, MA 01545-5348
US

Domain Name: TOWNISP.COM

Administrative Contact, Billing Contact:
SHREWSBURY ELECTRIC &amp; COMMUNITY CABLE (E7893-OR) fpaika@ci.shrewsbury.ma.us
SHREWSBURY ELECTRIC &amp; COMMUNITY CABLE
100 Maple Avenue
SHREWSBURY, MA 01545-5348
US
1 508 841 8500 fax: 1 508 842 9419
Technical Contact:
WorldNIC Name Host (HOST-ORG) namehost@WORLDNIC.COM
Network Solutions, Inc.
505 Huntmar Park Drive
Herndon, VA 20170-5142
1-888-642-9675

Record last updated on 13-Mar-2001.
Record expires on 06-Dec-2010.
Record created on 06-Dec-2000.
Database last updated on 22-Jul-2001 11:29:00 EDT.

Domain servers in listed order:

NS1.TOWNISP.COM 216.195.0.133
_____

 

[Platypus]

now you got a phone number, good luck mate