[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 379
  • Last Modified:

Calling All Experts - IP Trace

Hello all, points to the first person to give me a detail info on the person that stole my laptop.  I have an IP adress of 83.100.158.98.  I know the basic info, that thorugh a trace route.  But need moer info to pin this person down.  Much help appreciated, even down to a post code, district telephone number any thing to tie this to one person.
Please help as much as can.
Thanks
0
dann47
Asked:
dann47
  • 11
  • 7
  • 7
  • +2
1 Solution
 
Pete LongConsultantCommented:
Tracing IP addresses and Domain Names


*****Europe*****


Europe - Ripe (Whois) Database - IP Search
http://www.ripe.net/perl/whois

The RIPE Network Management Database (the RIPE Database) contains information about

Allocations and assignments of IP address space
Internet routing
Reverse DNS
Related objects.

The data is put into the database by those who operate IP networks
within the RIPE region. The RIPE NCC supports the operation of the
RIPE Database, but it is not responsible for its contents.

The data is accessible by a whois service (whois.ripe.net).  Thus, the RIPE
Database is sometimes called the RIPE Whois Database.


*****Americas, Caribique and Africa*****


ARIN Whois
http://www.arin.net/tools/whois_help.html


ARIN's WHOIS service provides a mechanism for finding contact and registration information for resources registered with ARIN. ARIN's database contains IP addresses, autonomous system (AS) numbers, organizations or customers that are associated with these resources, and related Points of Contact (POC).


*****Asia & Pacific Region*****


APNIC Whois  
http://www.apnic.net/apnic-bin/whois.pl

APNIC is one of four Regional Internet Registries currently operating in the world. It provides allocation and registration services which support the operation of the Internet globally. It is a not-for-profit, membership-based organisation whose members include Internet Service Providers, National Internet Registries, and similar organisations. APNIC represents the Asia Pacific region, comprising 62 economies


*****Domain Name Tracing*****


NSI Whois Domain-names
http://www.networksolutions.com/cgi-bin/whois/whois

SamSpade
http://www.samspade.org/ssw/

DNSstuff.
http://www.dnsstuff.com


*****Tracing Software*****

VisualRoute® Personal Edition
http://www.visualware.com/personal/products/visualroute/index.html

Command line Tracer TRACE.BAT
http://www.pc-help.org/trace.htm
0
 
Pete LongConsultantCommented:
That IP address is registered to these guys in Hull

inetnum:      83.100.158.0 - 83.100.158.255
netname:      ADSLMODEMPOOL-KCOM
country:      GB
descr:        KarooADSL
admin-c:      KR2955-RIPE
tech-c:       KR2955-RIPE
rev-srv:      ibex.kcom.com
rev-srv:      bison.kcom.com
remarks:      infra-aw
status:       ASSIGNED PA
notify:       ripe@as12390.net
mnt-by:       KINGSTON-MNT
changed:      haroon@nospam.ipnoc.kcom.com 20041103
source:       RIPE
route:        83.100.128.0/17
descr:        KINGSTON-NET004
origin:       AS12390
mnt-by:       KINGSTON-MNT
changed:      gareth@nospam.ipnoc.kcom.com 20040220
source:       RIPE
role:         KINGSTON ROLE
address:      Kingston Communications
address:      Telephone House
address:      Carr Lane
address:      Kingston-upon-Hull
address:      HU1 3RE
phone:        +44 800 138 4858
fax-no:       +44 113 384 2468
remarks:      **********************************************
remarks:      *** Do NOT send abuse reports to any other ***
remarks:      ***   address EXCEPT abuse@as12390.net     ***
remarks:      **********************************************
e-mail:       ripe@as12390.net
trouble:      Send ABUSE REPORTS to abuse@as12390.net
admin-c:      GW2558-RIPE
tech-c:       GW2558-RIPE
nic-hdl:      KR2955-RIPE
notify:       ripe@as12390.net
mnt-by:       KINGSTON-MNT
changed:      gareth@nospam.ipnoc.kcom.com 20030919
source:       RIPE
0
 
Pete LongConsultantCommented:
They are a technical service provider http://www.kcom.com/
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
Pete LongConsultantCommented:
ring them on this number  +44 800 138 4858 (0800 138 4858 inside the UK) and tell then the person on that IP address has your laptop
0
 
pseudocyberCommented:
From Pete's post - this is the abuse report email address:  abuse@as12390.net.  Best bet might be to send them an email with the IP and the date and time.  However, I would say that it's slim to none that you'll get any money, your laptop, or satisfaction out of this.  I would think best bet is to file an insurance claim.
0
 
dann47Author Commented:
Hi lads, thanks for quick response.  The point is this person was a trusted contractor, so we really need to trace who this person is.  As this is a case of not the computer, but the data stored on it is vital.  I have done all the above.  But before i inform the service provider, i would be requiring to narrow donw far enough to confront the suspected person.  I have narrowed down to the hull area, just need a bit more than that.
0
 
pseudocyberCommented:
You can't narrow it down more than that.  It sounds like they're an Internet Service Provider.  It sounds like they use DSL.  Depending on their config, they probably have dynamic IP addressing.  So, that address may have been Joe yesterday and it might be Jane today - in different cities or towns.  So, you have to get with them and give them the IP and the time and day.  If they even log it, they can tell you which account received that IP on that date.

However, depending on their loyalty to their customer's privacy, they may not even help you without a court order.
0
 
dann47Author Commented:
Joy.  Is there no where to trace to location at least? As in an area or aprox area?  Would not have this if the bloke backed up his data on a reg basis.  But he didnt so now gotta go thorugh all this.  The only thing i can hope is that he on static IP and the laptop emails me again tonite, but could be too late by then.  Hope fading quickly
0
 
pseudocyberCommented:
IP addresses aren't street addresses.  They're logical ... virtual.  Maybe with IP6 they'll be tied to geography, but right now they're not.
0
 
dann47Author Commented:
But i thought a trace should take me right back to there modem??
0
 
pseudocyberCommented:
It might, depending on if the ISP lets ICMP through their network.  But what does that get you?
0
 
_iskywalker_Commented:
The provider will know who connected with which ip when, so you must contact them to get your laptop, at best you could call the police, since they are also responsible for this thief...
0
 
dann47Author Commented:
It gets me an aprox of where this person lives, then at least can find out which contractor responsable
By the time the police get off thier butts it prob be too late.
0
 
pseudocyberCommented:
Maybe it does with DSL - IF they put DNS names on their routers that correspond to a city in a language you can understand.  But it might just be their next hop is something like A3-34c4-rtr12-e2 ... which means something to the provider, but not to us.

Now, if they were dial up, the IP address could have absolutely nothing to do with a geographic location - I can dial into a city on the other side of the US if I want to - we have a global dialup ISP.
0
 
luv2smileCommented:
Well the police can't get off their butts and help you if you don't file a police report to let them know it is stolen. If they don't know about it then there is no way they can help you.

Your best bet as said above is to have law enforcement get involved and if they think you have enough evidence then they can get the legally protected personal data from the ISP on the person and then take the appropriate legal action.
0
 
pseudocyberCommented:
It depends on the country where the owner of the IP address is - as to their legal system.  They might not "legally protect personal data".  
0
 
dann47Author Commented:
England and the police have already been envolved, but still
0
 
luv2smileCommented:
That's true...under US law it is legally protected, not sure about other countries :)
0
 
dann47Author Commented:
Not too sure about legality over here, think data just data
0
 
pseudocyberCommented:
Well if the data is worth it, then I would get police involved in both countries, and a lawyer or two.  I still think you're going to have to go to the ISP and get them to match the IP, Date and time with a subscriber account to get to the person on the other end.  
0
 
pseudocyberCommented:
... and if I were to buy a "used" laptop, I would probably reformat the drive and reload the OS and my software.  I guess you can tell they haven't done that since it's still phoning home to you.
0
 
Pete LongConsultantCommented:
See what happens when you post at work and dont get mail notifs till you get home - pah war and peace!

Ive just scanned through the above comments and agree though Im pretty sure KC dont offer ISP services? they are a solutions company like Xpert systems or BlackBox :)

0
 
pseudocyberCommented:
Is it me, or did the points drop on this question?
0
 
Pete LongConsultantCommented:
Dunno I never look :)
0
 
pseudocyberCommented:
Pete I was just scrolling up to see where you came in and glimpsed it.  
0
 
Pete LongConsultantCommented:
OIC :)
0
 
dann47Author Commented:
In one, i have the email notifications to work and home, so there goes that idea.  In two points can only go up not down.
Thankyou all for comments, no need for the insults
0
 
pseudocyberCommented:
Hey Dann, I didn't mean it as an insult.  I'm sorry if I gave offense.
0

Featured Post

Get quick recovery of individual SharePoint items

Free tool – Veeam Explorer for Microsoft SharePoint, enables fast, easy restores of SharePoint sites, documents, libraries and lists — all with no agents to manage and no additional licenses to buy.

  • 11
  • 7
  • 7
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now