Forums: Find out an IP from MSN Messenger - Forums

hi dear's sir and friend all
i am a new member of this site i need help any there help me ?
i want to find the parsone online with me ip and port and i can if any can or have any sotware please

Edited by GSecur: Don't post the classic hacking hotmail question. Even if you are offering to teach someone. Also don't ask to be answered at an e-mail account. People post answers on the board so everyone can see and learn.

bye
and thankx :rolleyes: :lol: <_< :( :ph34r: :blink: :unsure: B) :)

First thing don't post this in the <file Downlods Section> it has nothing to deal with downloading. Besides all that welcome.

OK, bare with me because your english is difficult to understand.

You want to find out someones IP address. Who's? Do they connect to your system? From an e-mail?

Answer to the question is. To find out a persons IP when you are chatting with them on MSN Messenger you must be currently chatting or transfering a file the goto the command prompt and typ netstat. The look for port 1863.

This is a general method. MSN Messenger can also use port 80

err how do i find it? im really clueless so plz dont flame me or whatever lol.

anyways thats cool but what can you do with an ip adress of someone else? :huh:

Quote

That is how ;) To get to the command prompt just hit start- run then type "cmd" or "command" if you are using windows 95 or 98.

Then type netstat.

When you type netstat you will see a list of DNS names and ports. This shoes who is connected to your box and by what port.

Quote

Well masood_afg probably had nothing good in mind but I'm not one to judge.

A person's IP is pretty much equivilent to someones phone number. You can use someones IP address to contact that computer (most of the time unless the IP reported is a proxy, router or firewall in which case their actual machine is probably NAT'd)

From there most people will attempt to exploit a machine since most likely they have some sort of petty spat with the person they are chatting with. This is a prime example why you should be running a firewall.

On one of my machines i run xp and use the inbuilt firewall but everytime i want to send files to a friend using MSN messenger i have to turn the firewall off which i find rather stupid. :angry: Is there a way around this ?

The only way would be to allow just port 1863 through. Besides that you will have to turn off your firewall

Thanks for that. Didn't realize that you had the option for confiquring the firewall.

Yeah, you will need to set up a file transfer in order to see their IP address, otherwise you get the IP of the server its been routed through. (Some M$ Server) If you really want to know their IP and other such info, run a packet sniffer and initiate a file transfer. In order for the files to be transfered quickly without flooding Microsofts .NET network and such, the transfer will go pretty much direct to the other persons computer. In order for this, the packets need a valid IP address and port number. If you run a packet sniffer, you will be able to gain lots of valuable information about that persons computer.

Yes, the netstat way works, however, you will need to have an actual transfer in progress, if I am correct. Using a packet sniffer, you only have to send a request, and their computer will respond. (Using ICMP, and then TCP with the SYN ACK flag set) With that TCP SYN ACK packet, you will have the persons IP address, port number, etc etc. Good stuff. (BTW, although I am currently in Windoze, I normally run Linux and using AMSN and Ethereal, I can do this very easily) If I am wrong, please let me know, correct me! I am certainly no expert, but this is my understanding of the subject. :)

Oh, one more thing. As already pointed out, this may not be the IP of that persons actual box. I myself run a router with a hardware firewall, and someday will add another router with another *nix box using Iptables. If this is the case, you will get the WAN IP of some sort, usually the one from the ISP, the persons actual computer may be subnetted or somethin behind a router or firewall using NAT or something of that sort, so be carefull! (And don't do nothin illegal! :) )

Good luck!

Dave

Quote

I believe you are right on this dstevens1958 thanks for the correction and welcome to the board ;)

Even if you don't have a current transfer in progress, can't you just look in the ARP table to see who you've connected with during chat?

c:> arp -a

Im not sure about the ARP table idea, but from what I know, when communicating through ICQ, you can use netstat to discover the other persons IP address.

MSN messenger and yahoo messenger all route through their own servers so it is this IP you see using netstat (apart from during FTP).

Well after reading the above, I was curious to try it. Therefore I sent my friend (on msn) a file that was 8KB but I couldn't pick up his IP. At first I was disappointed, but then I tought of sending him a bigger file so that it does not get routed through M$ servers and a direct connection is established to his PC. Voila ! .... a connection to his PC was established as soon as he accepted a file transfer that was 3190KB in size. So if the size of the file is bigger than 1024 KB, then a direct link is established between the two PC's and U can pick up the recipient's IP through 'netstat'. Now why 1024KB? then I just 'presumed' it to be so as hotmail does not allow attachments of more than 1024KB, hence I applied the same algo here as M$ wouldn't want to overload their servers.
:rolleyes:

I'll try to confirm on the 1024KB thing ;)

digger,

good point about the 1024kb thing. When I found the IP of the person, I was transfering a song that me and some old friends recorded downtown, so it was a few MBs. It was intersting to see it in Ethereal, because when I was chatting with this person, the IP showing up was a Microsoft server somewhere down east (I'm in western Canada) and when I set up the transfer, I got his real IP. That was the only time I ever used Ethereal to find an IP on MSN. (Though, I was using AMSN, an MSN client in RedHat 9.0, but I think its still the same when it comes to connections.)

I like how this method can be used to track down script kiddies, lol. "So, mister, how do I hack hotmail, I want to be 31337 H4x0R!!!" "Well, take this file (some tar-zipped file that is a few megs)" find his IP, and report him to his ISP abuse desk.

Anyways, take care,

Dave

yo wazaa look how your gonna do this, u only can see the ip by a program that i dont remember the name or by the command prompt.

The command prompt: just use this while u have an active connection with that person, i mean a file transfer, an voice conversation or a camera conversation.


go to start>run and then type command

then put on the command prompt netstat -n and check out where it says foreign address the port 80 or another i dont remember with 1 is the another, but there will say under foreign address the person ip.