IP Address owner

ak97127

Member
Joined
Feb 17, 2018
Messages
12
Good day,

I am not sure if this is the right forum to ask, but here goes:

How can I prove that an IP Address belongs to someone that I am taking to court? What is required? Is it even possible to prove that an IP Address belongs to one person?

Any advice would be appreciated.

Regards
 

gregmcc

Honorary Master
Joined
Jun 29, 2006
Messages
21,673
Will need more information on the IP
Is it a private IP (person at work) or public IP? Static or dynamic?

If its a public IP you will need to contact their ISP as they own the addresses. If its an overseas IP they are unlikely to reveal this info without a court order which will be almost impossible to get. Actually any ISP will want a court order for this info.

Again depends what they did, a hacker could hide behind proxies so its almost impossible to trace without logs.
 

ak97127

Member
Joined
Feb 17, 2018
Messages
12
Its an ip address that was logged on an email server. Its a private IP im assuming. Think its dynamic.

Logs? What do you mean by this?

Will need more information on the IP
Is it a private IP (person at work) or public IP? Static or dynamic?

If its a public IP you will need to contact their ISP as they own the addresses. If its an overseas IP they are unlikely to reveal this info without a court order which will be almost impossible to get. Actually any ISP will want a court order for this info.

Again depends what they did, a hacker could hide behind proxies so its almost impossible to trace without logs.
 

gregmcc

Honorary Master
Joined
Jun 29, 2006
Messages
21,673
You will need to do a whois for that IP address and find the ISP that owns the IP range.

Then give them a court order to hand over the info.
 

Ryansr

Expert Member
Joined
Jul 22, 2012
Messages
3,623
You will need to do a whois for that IP address and find the ISP that owns the IP range.

Then give them a court order to hand over the info.
Better hope they didn't use a VPN.
 

ak97127

Member
Joined
Feb 17, 2018
Messages
12
You will need to do a whois for that IP address and find the ISP that owns the IP range.

Then give them a court order to hand over the info.
Thank you. But there is no other way of proving it was that person without a court order? Trying to use it in court without would be pointless?
 

EasyUp Web Hosting

EasyUp Web Hosting
Company Rep
Joined
Mar 18, 2008
Messages
8,465
The log files.

Also, you are wasting energy on this. Rather find some tangible proof.
 

MickeyD

RIP
Joined
Oct 4, 2010
Messages
139,117
Go to SAPS.

Obtaining the information from any other source means you and the source has then also committed a crime.
 

WAslayer

Expert Member
Joined
May 13, 2011
Messages
3,195
if you want to prove that this person did whatever they have allegedly done, you need a chain of events that proves he/she has done this.. since this is an email server he/she logged on to, you start with the mail server logs where connections from various clients are logged.. It would also count in your favour if there are log files that detail the alleged offense and ties it to your suspect IP address.. if this person is tech savvy enough, they could have used any number of means to try and disguise themselves and hide their actual IP address.. if this is the case, you will need someone that knows what to look for in the relevant log files to try and trace back to the actual source IP address..

How do you know he/she was trying to disguise themselves..? The whois lookup will tell you.. You are looking for the details of a SA based ISP on the whois lookup and a description that states the IP address is for DSL or ADSL or Dynamic use, which means the person connected from their home internet..

Provided that he/she has connected to the mail server from his/her home over the internet, you can then do a whois lookup of the suspected IP address.. Once you have the ISP(if they weren't disguising themselves) who owns the IP address, you take that information along with all your, hopefully tangible, evidence and ask SAPS to issue a subpoena to the ISP who owns the IP address.. The ISP will then provide you with the details of the person who the IP address was assigned to at the time the alleged offense was committed..

Also, if you are going to court, do you have an attorney..? Any attorney worth his/her salt should know the procedure to obtain details of IP address owner etc..
 
Top