Page 1 of 1

urgent help needed to locate IP address

PostPosted: Thu Sep 14, 2006 3:28 pm
by jackie6
I wonder if anyone can offer me some help as I need to locate the exact owner of IP address From my investigations so far (and I must add I'm pretty computer illiterate) I know it comes under RIPE, but can only get the range covered by Telefonica de espana. It concerns a serious crime committed against me and so need to find exact computer used to trace owner. Any help very appreciated.

PostPosted: Fri Sep 15, 2006 7:18 am
by robocoder
The level of information needed to support an allegation of a serious crime, requires that you direct your inquiries to the appropriate law enforcement agencies and the ISP contact (in this case, [email protected]), with the date/time and IP address of the incident. You should also contact your ISP's customer service ... for example, they may be able to coordinate the investigation, and/or corroborate your findings.


PostPosted: Fri Sep 15, 2006 9:00 am
by jackie6
Thanks for response. Without going into too much detail (although willing to do in private message), the case in question has now been ongoing for 5 months with both Microsoft USA ( crime committed via hotmail) and UK police intervention. However I have now become desperate as police have come up against bureacracy in tracing the exact IP address due to international barriers, and the level of crime ( serious intimidation and harassment) cannot be covered by Interpol. I sent an email to that telefonica address yesterday so hopefully something will come of that, but failing that do you know any other way this IP address can be traced precisely. I am willing to pay a service to do so.
Alos just so I am clear as to how far this can go, in layman's terms, will exact tracing produce a real person, i.e is each IP address unique to one pc. Apologies if I sound totally ignorant but I know little about this stuff. Thanks.

PostPosted: Fri Sep 15, 2006 10:06 am
by robocoder
That ip address resolves to:, which implies that it is dynamically assigned. How "sticky" the IP address address is to a given subscriber depends on the ISP. Even if a subscriber leaves their modem on and connected, there is no assurance that a renewal will return the same IP address. In other words, tracing that IP address today may not lead to the same person who used that IP address 5 months ago. This is why you need the ISP's cooperation.

A traceroute doesn't return sufficient information (i.e., routers along that path not responding to queries).

If it'll help, there is more contact info in the whois record:
Code: Select all
Domain Name................
  Creation Date............ 14/09/2001
  Expiry Date.............. 14/09/2007
  Last Update Date......... 22/08/2006
Organization Contact Id.... PROP-1052-00039049
  Organization Name........ TELEFONICA, S.A.
  Organization Org......... TELEFONICA, S.A.
  Organization Street...... GRAN VIA, 28
  Organization City........ MADRID
  Organization State....... MADRID
  Organization PC.......... 28013
  Organization Country..... ES
  Organization Phone....... +34.915844680
  Organization e-mail...... [email protected]
Administrative Contact Id.. 1052-00136019
  Administrative Name...... JUAN GRAGERA GALLARDO
  Administrative Org....... TELEFONICA S.A.
  Administrative Street.... GRAN VIA 28
  Administrative City...... MADRID
  Administrative State..... MADRID
  Administrative PC........ E-28013
  Administrative Country... ES
  Administrative Phone..... +34.91.584.46.80
  Administrative Fax....... +34.91.584.46.89
  Administrative e-mail.... [email protected]
Technical Contact Id....... 1230-00022295
  Technical Name........... Ventanilla Unica
  Technical Org............ TELEFONICA S.A.
  Technical Street......... GRAN VIA 28
  Technical City........... MADRID
  Technical State.......... MADRID
  Technical PC............. E-28013
  Technical Country........ ES
  Technical Phone.......... +34.917548900
  Technical Fax............ +34.915840589
  Technical e-mail......... [email protected]

Domain servers in listed order:

   Name Server............. RSDMNO1-06.RIMA-TDE.NET
   Name Server............. RSDBET1-06.RIMA-TDE.NET
I don't know if that means there's a lawyer at the other end of that email address, but I believe "propiedad industrial" (industrial property) corresponds to intellectual property (e.g., patents), in English.


PostPosted: Fri Sep 15, 2006 12:35 pm
by jackie6
I'm at a bit of a loss here as a lot of what you have written is just over my head, but I trully appreciate your knowledge input. I'll try to get it to the police but gotta tell you I have had some serious mistakes there too (hence my own research here as useless as I am with IT knowledge) so would really like to hand over something concrete.The ISP is telefonica, right? So I've emailed the abuse address there and am still waiting for a response. I also emailed the RIMA abuse site but had great difficulty getting it to send, lots of automatic reponses sending me all over the place and have no idea if anything will come of that. Do you think I should now ask this propiedad address? I have the offending email still so can give exact time and date of usage. Was interesting to know what you said about the IP changing over time, but will they ( Telefonica I guess?) still have a log of who it was on that date? We are talking May. Thanks alot.


PostPosted: Fri Sep 15, 2006 12:39 pm
by jackie6
Sorry not RIMA, but RIPE. is correct IP

PostPosted: Fri Sep 15, 2006 12:54 pm
by jackie6
slight error in first given here but same ISP

PostPosted: Fri Sep 15, 2006 12:56 pm
by jackie6

PostPosted: Fri Sep 15, 2006 3:34 pm
by robocoder
Yes, still Telefonica. Same email addresses apply.

As for Telefonica's logs, the existence and ease of retrievabilty for such data would depend on Telefonica. Certainly in Canada, in the context of proposed lawful access legislation, various ISPs have expressed concern (i.e., burden) over the indefinite retention of log data.

PostPosted: Sun Sep 17, 2006 1:36 pm
by jackie6
really appreciate your info. I have now emailed telefonica site myself and requested that the police team do so too, I guess there's little else I can do but if you know of anything at all please let me know as I am desperate to keeping being proactive due to many many police errors throughout the investigation