I need an IP “Expert”

Torn Rose · 2003-12-05, 04:49 PM

Can someone please tell me what the chances are that these 2 IP’s are from the same person/pc

I know what I see when I look, but I’m no where near an expert.

63.138.223.69

65.48.137.218

I can not get into too many details or "whys" but this is VERY important to know if this is one and the same or not

Thanks

Jim · 2003-12-05, 05:01 PM

Unless you have static IPs, it is almost impossible not to have 2 people with the same ips.

Cleo · 2003-12-05, 05:10 PM

They both trace back to the same ISP

IP Location: Canada - Ontario - Toronto - Rogers Cable Inc. Ktgc
address
Rogers Cable Inc. ROGERS-CAB-8 (NET-65-48-0-0-1)
65.48.0.0 - 65.50.175.255
Rogers Cable Inc. KTGC ON-ROG-1-KTGC-2 (NET-65-48-137-128-1)
65.48.137.128 - 65.48.137.255

Torn Rose · 2003-12-05, 05:21 PM

Yeah thats what I see, and I'm sorry I can't say why I need to know, but what do you think the odds are that this is the same person?

Really sorry I can't go into more details, but its not a "small issue"

RawAlex · 2003-12-05, 06:46 PM

it could be the same person, but it could also be any number of other Roger's clients. That is a major cable modem network, millions of potential subscribers. I would not use this as the only reason for going after someone.

However, if you have an issue of hacking or other problems, you might use it as "partial proof" that both situations started on the same network.

They are not even in the same class A, so there is no bet that they are being used on the same part of their network.

Alex

Torn Rose · 2003-12-05, 06:55 PM

Thank You all.

as "for going after someone" this is just #3 on that list.

Once more thank you!

Tommy · 2003-12-06, 10:56 AM

Torn

somehow you came up with those two ip numbers
they must have something in common
and they both trace back to the same isp

its the same person
when in doubt.... throw em out

Steamy · 2003-12-06, 12:08 PM

For extra 10$ Rogers will give you extra IP number. You can have up to 5 IP numbers with 1 modem.

This is good for girls that do live shows on few computers at once on sites such a Ifriends or similar sites.
Instead of having few accounts you have only one and using hub you feed up to 5 computers with 1 modem but 5 different IP numbers. This numbers are not static and they can start with
63 or 65 or 67 or 24.
So it is very possible that those IP numbers are from the same person !

SirMoby · 2003-12-06, 07:14 PM

It is possible that those IPs are from the same physical location but it's not likely. The reason is that most network administrators will try to keep IP addresses grouped together for troubleshooting and tracking purposes. If you suspect that this person is using a computer with a redundent connection at NOC then it's more reasonable but someone sitting in a home or office is not very likely.

Since both of these are seperate Class A Subnets and there are only 64 available in the entire world I don't think that one physical connection could get both of those IP addresses.

63.138.223.69

65.48.137.218

Rogers is a backbone and is probably providing services for other networks. When I do a trace route it takes very different paths so I think the physical locations are not even close.

urb · 2003-12-07, 06:59 AM

Every ISP is different. Anything is possible.

In the past I've banned a whole ISP's range just to nail one message board spammer.

Dynamic IPs with *some* ISPs can change dramatically with each dial-up.

lassiter · 2003-12-07, 03:49 PM

Quote:

Originally posted by urb

Dynamic IPs with *some* ISPs can change dramatically with each dial-up.

Quite true. SBC/Yahoo DSL does some very odd things, including sending my outgoing mail via an SMTP server in the UK while I'm located in TX. I also can end up with dynamic IP from very different ranges each time I reboot.

Best way to do detective work like Torn is talking about is to check the raw access logs for browser version info. If you have reason to think 2 different IPs may be the same person, see if their browser data is identical on both IPs. Still far from a 100% guarantee, but it will give another hunk of circumstantial evidence. Of course that's only good if yer checking web access, not things like gallery submits.

2003-12-05, 04:49 PM	#1
Torn Rose "Faith is believing what you know ain't so." ~ Mark Twain Join Date: Aug 2003 Location: Portland, Oregon Posts: 4,806	I need an IP “Expert” Can someone please tell me what the chances are that these 2 IP’s are from the same person/pc I know what I see when I look, but I’m no where near an expert. 63.138.223.69 65.48.137.218 I can not get into too many details or "whys" but this is VERY important to know if this is one and the same or not Thanks

2003-12-06, 12:08 PM	#8
Steamy Rock stars ... is there anything they don't know? Join Date: Aug 2003 Location: Canada Posts: 13	For extra 10$ Rogers will give you extra IP number. You can have up to 5 IP numbers with 1 modem. This is good for girls that do live shows on few computers at once on sites such a Ifriends or similar sites. Instead of having few accounts you have only one and using hub you feed up to 5 computers with 1 modem but 5 different IP numbers. This numbers are not static and they can start with 63 or 65 or 67 or 24. So it is very possible that those IP numbers are from the same person ! __________________ <p><a href="http://steamy-b.com">http://steamy-b.com</a> (content)</p> Last edited by Steamy; 2003-12-06 at 12:10 PM..

2003-12-07, 06:59 AM	#10
urb All the way from Room 101 Join Date: Aug 2003 Posts: 3,557	Every ISP is different. Anything is possible. In the past I've banned a whole ISP's range just to nail one message board spammer. Dynamic IPs with some ISPs can change dramatically with each dial-up. __________________

2003-12-05, 05:01 PM	#2
Jim Banned Join Date: Aug 2003 Location: Mohawk, New York Posts: 19,477	Unless you have static IPs, it is almost impossible not to have 2 people with the same ips.

2003-12-05, 05:10 PM	#3
Cleo Subversive filth of the hedonistic decadent West Join Date: Mar 2003 Location: Southeast Florida Posts: 27,936	They both trace back to the same ISP IP Location: Canada - Ontario - Toronto - Rogers Cable Inc. Ktgc address Rogers Cable Inc. ROGERS-CAB-8 (NET-65-48-0-0-1) 65.48.0.0 - 65.50.175.255 Rogers Cable Inc. KTGC ON-ROG-1-KTGC-2 (NET-65-48-137-128-1) 65.48.137.128 - 65.48.137.255 __________________ Free Rides on Uber and Lyft Uber Car: uberTzTerri Lyft Car: TZ896289

2003-12-05, 05:21 PM	#4
Torn Rose "Faith is believing what you know ain't so." ~ Mark Twain Join Date: Aug 2003 Location: Portland, Oregon Posts: 4,806	Yeah thats what I see, and I'm sorry I can't say why I need to know, but what do you think the odds are that this is the same person? Really sorry I can't go into more details, but its not a "small issue"

2003-12-05, 06:46 PM	#5
RawAlex Took the hint. Join Date: Mar 2003 Posts: 5,597	it could be the same person, but it could also be any number of other Roger's clients. That is a major cable modem network, millions of potential subscribers. I would not use this as the only reason for going after someone. However, if you have an issue of hacking or other problems, you might use it as "partial proof" that both situations started on the same network. They are not even in the same class A, so there is no bet that they are being used on the same part of their network. Alex

2003-12-05, 06:55 PM	#6
Torn Rose "Faith is believing what you know ain't so." ~ Mark Twain Join Date: Aug 2003 Location: Portland, Oregon Posts: 4,806	Thank You all. as "for going after someone" this is just #3 on that list. Once more thank you!

2003-12-06, 10:56 AM	#7
Tommy NYC Boy That Moved To The Island Join Date: Apr 2003 Posts: 2,940	Torn somehow you came up with those two ip numbers they must have something in common and they both trace back to the same isp its the same person when in doubt.... throw em out

2003-12-06, 07:14 PM	#9
SirMoby Jim? I heard he's a dirty pornographer. Join Date: Aug 2003 Location: Washington, DC Posts: 2,706	It is possible that those IPs are from the same physical location but it's not likely. The reason is that most network administrators will try to keep IP addresses grouped together for troubleshooting and tracking purposes. If you suspect that this person is using a computer with a redundent connection at NOC then it's more reasonable but someone sitting in a home or office is not very likely. Since both of these are seperate Class A Subnets and there are only 64 available in the entire world I don't think that one physical connection could get both of those IP addresses. 63.138.223.69 65.48.137.218 Rogers is a backbone and is probably providing services for other networks. When I do a trace route it takes very different paths so I think the physical locations are not even close.