IP address tracing - How specific ?

[silverspear]

Ok - so we have an IP address we want to trace.. but wanted to ask how specific the trace can be ?

like from the IP can we dedcipher where the person posted from on that particular forum?
like state, or maybe even city... or can it be as specific as the company or exact location.

any kind of information would be helpful. the detailed the better


thanks.

 

[Colebert]

take the IP address (xxx.xxx.xxx.xxx) and go into a DOS prompt.

type (w/o quotations) "tracert xxx.xxx.xxx.xxx" <enter>

it will say "TRACING ROUTE TO x.x.x.x"

oftentimes it will say something like LR.AR.COMCAST.NET. then you can see I'm probably posting from Little Rock, Arkansas on Comcast's network.

Of course, if the poster was using a proxy address to post, this ip address could be completely unrelated to his location.

 

[DannyBoy]

You can use any number of programs to determine where the location of the ISPs proxy is located (the machine that the person connects to the internet through), that's a fairly simple proceedure and anyone can do it.

To get the exact location of someones whereabouts you will need the necessary legal documents / powers to contact the ISP of said person, to get their home address.

 

[skyking]

The IP address is in a block of addresses that are owned by the ISP. The ISP will need a warrant or other proper documentation before they will release you any other information. Ostensibly, they can provide you with the individual's or business's account information.
Keep in mind that an IP address can be spoofed.

 

[Rogue]

http://www.arin.net

Enter the IP address and it will tell you who is registered for that IP or block of IP addresses, from there you can subpoena the information from the ISP or owner of the IP address and hope they will assist you with detailed log files, etc.