Whois to find IP reddit / irc ---------------------------------------------------------------------- dorisfrench · 2012-06-15 01:09 When you do a whois on a user and it shows this: 108-67-130-249.lightspeed.cicril.sbcglobal.net How do you find their IP. Is it the numbers in front? ---------------------------------------------------------------------- Hello71 · 2012-06-15 01:22 $5 says he's trying to LOLDDOS someone. ---------------------------------------------------------------------- masta · 2012-06-15 01:56 hahah ---------------------------------------------------------------------- flotwig · 2012-06-15 03:20 That's the reverse IP, basically the domain name that corresponds to their IP address. To find their IP you just have to find out what IP address the domain points to [like so](http://za.chary.us/projects/web tools/index.php?page=getips&domain=108-67-130- 249.lightspeed.cicril.sbcglobal.net). That being said don't be a little skiddie doucher and try to packet or DoS them. Settle your personal conflicts with words not bandwidth. ---------------------------------------------------------------------- farded · 2012-06-15 11:00 Is that pretty much the only reason to get somebody's IP? And what happens if some kid does try one of these attacks on me? ---------------------------------------------------------------------- meeb · 2012-06-15 12:11 Almost all IRC networks provide cloaking or registered user accounts vhosts (typically via a Q/NickServ/X whatever account and the usermode +x) which prevents anyone other than the network administrators from knowing your host or IP. ---------------------------------------------------------------------- [deleted] · 2012-06-15 13:39 [deleted] ---------------------------------------------------------------------- farded · 2012-06-15 14:36 I'm just not convinced that I have any real reason to hide it other than "just in case". Not that there's any reason to leave it visible that I can think of... ---------------------------------------------------------------------- meeb · 2012-06-15 14:39 Information should be private by default, there's no reason exposing any information (and IP addresses are personal information) unless you have to. It's mostly just common sense to keep everything private. ---------------------------------------------------------------------- TehZomB · 2012-06-15 15:59 It used to be (and still is to some extent) on the networks without masking, if you REALLY pissed someone off, you would get packeted or flooded if they were childish enough. edit: tenses ---------------------------------------------------------------------- farded · 2012-06-15 16:08 If that happens, can I just restart my modem for a new IP and try to be less of an asshole? Edit: Not that it'll be an issue, i'm just a curious lurker mostly. ---------------------------------------------------------------------- Anthaneezy · 2012-06-15 16:12 > That's the reverse IP Hostname\*. Or the human-friendly way to address a device. > To find their IP you just have to find out what IP address the domain points to like so. Not exactly. You have to resolve the address. The quickest way is to simply *ping* the hostname. You can't ping a hostname so *ping* will resolve the DNS hostname into a numerical form (IP Address). ---------------------------------------------------------------------- flotwig · 2012-06-15 16:41 A [hostname](http://en.wikipedia.org/wiki/Hostname) doesn't necessarily have to resolve to the machine's IP address and the hostname doesn't necessarily have to be the [reverse IP](http://en.wikipedia.org/wiki/Reverse_DNS_lookup) either. The reverse IP/reverse DNS is obtained via a PTR record found within the in-addr.arpa domain for that IP address, so 249.130.67.108.in- addr.arpa [contains a PTR record which contains the text "108-67-130- 249.lightspeed.cicril.sbcglobal.net"](http://imgbbq.org/qL7.png). Modern IRC servers find this information upon connection and display it as the user's host name as long as the domain contained within the PTR record points to the corresponding A record, resolving both forwards and backwards. This prevents people from faking their hostmasks. Resolving the domain name's A record is the same thing as "finding out what IP address the domain points to", just with simpler words. Ping does indeed do that. ---------------------------------------------------------------------- TehZomB · 2012-06-15 16:49 Well, yeah, but then you would reconnect, they'd /whois again... rinse and repeat. Not that this happens often anymore, especially since (like meeb said) most networks provide at least limited masking (i.e. for me, instead of 1-2-3-4.client.mchsi.com they see NETWORK-a87s9d8.client.mchsi.com). ---------------------------------------------------------------------- dorisfrench · 2012-06-16 02:24 No I wasn't trying to DDOS anyone. This person was trolling me and I was trying to find out if it was someone I knew or not. But I couldn't tell what the location was of the person trolling me. ---------------------------------------------------------------------- liquoranwhores · 2012-06-21 03:29 Also, you can change the A record after you connect. Some IRCds work around this by displaying the IP you connected with in the /whois information but it's not always the case. ---------------------------------------------------------------------- teklord · 2012-08-08 20:49 > Settle your personal conflicts with words not bandwidth. I like the cut of your jib. ---------------------------------------------------------------------- flotwig · 2012-08-08 21:52 ;)