dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
7984
share rss forum feed


tori

@comcast.net

how to tell if an ip address is fake

i've figured out how to look up an ip address, but the problem is this. I think I've been talking to someone who is using a fake ip address, but they occasionally forget to hide their real one. Is there a way to tell if an ip address has been faked?


rlocone
Honor Our Heros, Our Armed Forces
Premium
join:2002-04-10
Kokomo, IN
Tracert will give you the location. That's if they aren't forwarding their traffic. If you're chatting with someone most of the time there is a relay server involved. If you can force a DIRECT connection. You have a better chance of getting their TRUE IP.


Fake_Address

@aol.com
reply to tori
said by tori :

I think I've been talking to someone who is using a fake ip address, but they occasionally forget to hide their real one. Is there a way to tell if an ip address has been faked?
Why do you care what someone's IP address is?

What is your definition of a "fake ip address".

If someone was actually using a spoofed or "fake ip address", it would be a one way conversation, since they could not receive your replies.

Do you consider the Compuserve/AOL proxy I am using to be a "fake ip address" ?


Real_Address

@bellsouth.net
reply to tori
How about now? Is this my "real IP address"?

Are you sure? Maybe I am using a "borrowed" WiFi connection?


Alcohol
Premium
join:2003-05-26
Climax, MI
kudos:4
reply to tori
You can't "talk" to someone who is using a fake ip address.

Try and ping their IP address.


Tori

@comcast.net
This is the deal. Maybe "talking" wasn't the right word. Emailing back and forth for 8 weeks, not including IM'ing. Says he's in one country, and some of the IP addresses show that to be the case, but they have also shown my hometown, and recently have shown the state where my EX went to on vacation. I'm very concerned about this because of his mental state, pending divorce, kids, and his pretending to be somebody he is not. I just want to know for sure if it is him, and he's gone so far as to hide or fake his address.


HA Nut
Premium
join:2004-05-13
USA
It's called using a proxy. Instead of the user's actual IP address, they connect using a server that routes their traffic via a different IP address. There are many, many proxies available, both paid and free.

IMO, if the communications seem like your X, then you probably should assume it is. Especially if there are "complications".


Veerzoon

@rr.com
reply to tori
are you sure?

i dont know if web emails put in the sender's real IP anymore(i think i checked yahoo one time)

and yahoo messenger or these things usually dont do direct connection when im'ing (maybe when sending files, but even then it sometimes goes thru yahoo's servers if it cant establish direct connection for file transfer)

did you check that the IPs dont belong to yahoo or google ?

they're actually ISP addresses?
also that is not always reliable because those with dynamic IPs can resolve to different states (such as i am right now in 2 states away!)

it would really strange for a "grown" person to be using proxy/or know how to use proxy, unless they're "good" with computers...


Fake_Address

@aol.com
said by Veerzoon :

are you sure?

i dont know if web emails put in the sender's real IP anymore(i think i checked yahoo one time)
Compuserve/AOL puts in the IP address of the webmail client, as does the OP's ISP Comcast.

said by Veerzoon :

it would really strange for a "grown" person to be using proxy/or know how to use proxy, unless they're "good" with computers...
OK, whatever you say.

reply to Real_Address
said by Real_Address :

How about now? Is this my "real IP address"?

Are you sure? Maybe I am using a "borrowed" WiFi connection?
I don't know what I'm talking about, just ignore me. I'm a would-be 1337 H4X0R

I found that spoofing is not the same as using another network or using a proxy.

See »students.cs.unipi.gr/pub/docs/sy···7/a8.htm



Tori

@arcor-ip.net

1 recommendation

reply to Tori
The sender of an email can spoof a source address, but the real one can be easily determined by examining the headers. However, the "real" address could be a TOR exit node or other proxy.

Don't open them except to view the email source. DO that by right clicking the email, click PROPERTIES, VIEW MESSAGE SOURCE. That way you don't trigger any tracking bugs in the email. Also don't respond. Harassers live on responses. Save the emails. You may need them if you need to file harrassment or threat reports.