IP Taceing

Dear AO members,

i am recieving threats from some person who says he is a friend of a friend of a friend of mine, and that he is paying me back a favour. but i have no idea what he is talking about. he rambles on about virus's and then stabbings ect. this all goes on through messenger, but i have him blocked from both messenger and email.

is there any programs that i can get an ip trace through messenger and pick up some info on his location or anything. just so i know where abouts he is. and is there anything else that i can use to get some information on this person?

plz help

TN123

[edit] i looked at similar threads but they seem to be knowing the ip address and using it just through windows. this needs to be done through messenger and i dont know the ip address [edit/]

There are many trace programs available on the internet, and some plot the location on a map to make it easier (eg; Neotrace). However, there is no program to my knowledge that would narrow it down to a specific town/street address. Try some basic social engineering, who knows - he sounds like a deranged script kiddie, hes bound to screw up somewhere.

As for getting IP's through MSN, i believe there are numerous cracks/bugs/exploits/whatever's available. Just search on google. or perhaps even this site.

Cheers,

Zenith.

thanks, i will look around :)

If you can initiate a file transfer to him, you can get his IP using the command netstat -an.
Cheers,
cgkanchi

wouldnt a connection be opened between the two if they were chatting on messenger anyway? you wouldnt necessarily have to do a file transfer, just simply keep talking to the guy... then do a netstat -a, i thought that would have worked... i may be wrong....I have seen it done in ICQ but not messenger....

To get a aim members ip address you have to initiate a direct file transfer with them because it seems like aim uses some sort of proxy while just having a normal chat session.

Are you getting these threats via email? Messanger? Its probley some borde kid as Zenith put it. But if it is someone you know, you wanna find out. People are strange beings, with even stranger motives. If you get the threats via email, check the header for information. Or even paste the email here, for us to look at. Perhaps the email address is from a local ISP, that would indicate a higher possibility that it was someone you know. More information could be checking to see if the messages are coming from an AOL account. There, with a little social engineering CAN get you a name and an address.

But more than likely, its some kid. Update your virus definitions, go through your MSCONFIG start up utility. Find out what ports are [LISTENING]. You can even find a registry scanner @ google.

If you are an Windows based system user.Then yes NEtstat-a should give you an indication of the persons connection IP depending if is not run true cache server or Proxy.If that happends then your ISP ip will be only shown.If that is an MSN messenger then it will only show MSN's DNS Proxy.If you want the source IP for that person then you have to get access to an Full Routing table that shows you where his Connection is sending packets from.If you dont have an software on your system allready installed.That shows your netstat info in more clear,there is several software programs that are out there.One that is very useful in many cases that uses an GUI.Then try an software called AAtools.Which you can find at
www.glocksoft.com/aatools.htm
It also checks many other things for you that are usefull.Type Email,Proxys,etc.etc..
Have fun.....

If you have a firewall set up and you're on dial up, and he's just a script kiddie, I wouldn't worry about him hurting you. Even if you're just on AOL without a firewall, you're safe behind AOL's proxies and he can't find out your IP address (if it is possible, then its surely not easy for him).

And if he's threatening you, his ISP might care. If you do happen to find his IP address, drop his ISP a note with his IP, the time he was threatening you and maybe an e-mail he sent you (complete with headers). ;)

i'm not really worried about him hurting me. and dr toker, i'm not sure if i directly no this person, how ever, it must be someone who know me and is leaking information to this person. he knows my name and address and all that "personal" information. i just want to know who it is.

i have tried netstat with someone and a dcc chat over irc, and i have pin pionted their ip address (home or isp i dont know) and i have another program that does the same and more. its called ip tools.

thanks for your input guys,

duely appreciated

TN123, im just wondering where you get the ip tools program. Something similar to this happened to me but i was able to social engineer some people to telling me who this guy was. You should ask around.

i have been asking around, asking people if they know the email. but i have a good memory.

this guys said that it was someone i got pissed at. and there was only one person and that was jess. now, if memory serves, along time ago she said this guy she knew, his email was [email protected] (that the email the threats are coming from). but when i asked her the onther nite it took her like 10min to answer and it was something that could be easily made up... it was (if memory serves) blue_cigar[number here] or something like that.

hey, there his email there, if you guys wanna have a go at him be my guest. i have him blocked through email and messenger so i will wait for him to come online and then get his ip.

one question though, what do i do with his ip once i get it??

Trust_Not_123;->

Great! try Spade.org and get Sam Spade it's a great program.
Maybe he's not a threat but it's better to be safe than sorry.
Ftp> to archive or verionca to farther info gather about him
ftp> to rs.internic.net : login as whois no pass.

hope this helps
the few the proud techno riders

Why don't you print out all the threats and call somebody for help?If this person knows your adress it's someone close to you. Might be one of your friends. Take the print outs and show it to all your firends, somebody is gona say something if they recognize it.Maybe another friend is in the same situation. If somebody else received the same emails don't hesitate to go to the police before somnething more serious happens.Don't take my advice lightly,bad things happened to me because I trusted close friends and never believed there are crazy people on the internet.I was wrong!!!!

Quote:

---

Originally posted by Trust_Not_123
one question though, what do i do with his ip once i get it??

---

Well, for starters, dont attempt denial of service or even threats of.. this would make you no better than him, and would give him something to use against you.

Try resolving his IP, so it displays his host, within which (hopefully) is his ISP. After that, email
[email protected]/[email protected]/whatever with the date/time of these threats, the threats themselves, the ip you resolved them to, and any threatening emails *with headers* he has sent you. Also, if you are running a firewall which has picked up DOS attempts from his IP, it wouldnt hurt to attatch these logs. Remember to be polite and not 'lose your temper' when writing such a complaint, otherwise you run the risk of not being taken too seriously.

ok. i will unblock this person and save all the things he sends me. i will post them around, but that might make things worse.

but there was one thing i found weird. after out last chat. i tried to look at his profile. but he didnt have on period. i dont mean that he didnt display any information in his profile, i mean that the profile didnt exist. is this unual or just me??

[edit] o yeah, and if i seem to go missing for a while, you all know whats happened to me... [edit/]

just a thought, if this person is on dial up, which i think he/she is. then wouldnt their ip addy change everytime they connect. so, how can we go about getting all this info when they are constantly different ip addy's??

just a thought

yes, on dial up their IP will change.
Thats why you must be *prescise* when emailing the users ISP about the date and time of the threats/attacks, so they can check logs and figure out who had what IP at what time.

you say "ok i will post them around" .. what do you mean by that? dont go posting them to other people on MSN, just try what i said - email [email protected] with logs and relavant information.

Zenith.

i dont literally mean post them around, i just might tell a few people about them and see what comes up like trinity said. but i aslo wondered if it might make things worse?

How can it possibly get worse? As i said earlier, its probably just a deranged scirpt kiddie. the worst he can probably do is *gasp* denial of service .. if your really frightened of that, download zonealarm or something.

There lots of ip tracer in the net you just have to dig it up , i can only give you some info, one is trying to send him some file thene use the netstat command after typing the netstat you can see the ip address of that person then typr netstat/n or netstat\n <-- im confuse on the slash .... another thing is the NEO TRACE ive found it on the mcafee site itis free and im sure you'll like it it gives the (geographical) location of the computer you want to know and the best it's for free and it also have different features on it pretty cool i'll try ro pm you if i found the exact url address hope this little information help you

www.msnshit.net

go there and u will be able to find all sorts of MSN tools to do what u r asking.

Hope that helps.

http://www.ks-soft.net/ip-tools.eng/

Thats where u can find IP Tools.