Getting an IP from an MSN conv.

[jonny912]

Ever wanted to get someones IP adress from an MSN converstion? Its easy!
Simply send them a file over 1024kb (1mb). I recommend an MP3 as those arnt suspicious and are ussually over 1mb. Now go to the command line (Start > Run > cmd) and type 'netstat' (no quotes) then press enter. You will see a list of IP's connected to your computer like this one

C:\Documents and Settings\Jonny>netstat

Active Connections

  Proto  Local Address          Foreign Address        State
  TCP    upstairs:1223          localhost:1224         ESTABLISHED
  TCP    upstairs:1224          localhost:1223         ESTABLISHED
  TCP    upstairs:1231          localhost:1232         ESTABLISHED
  TCP    upstairs:1232          localhost:1231         ESTABLISHED
  TCP    upstairs:1634          localhost:1635         ESTABLISHED
  TCP    upstairs:1635          localhost:1634         ESTABLISHED
  TCP    upstairs:1642          localhost:1643         ESTABLISHED
  TCP    upstairs:1643          localhost:1642         ESTABLISHED
  TCP    upstairs:1245          ar-in-f83.google.com:http  ESTABLISHED
  TCP    upstairs:1729          by2msg1104005.phx.gbl:1863  ESTABLISHED
  TCP    upstairs:2200          ar-in-f99.google.com:http  ESTABLISHED
  TCP    upstairs:2217          207.68.178.61:http     CLOSE_WAIT
  TCP    upstairs:2278          by2msg1161902.phx.gbl:1863  ESTABLISHED
  TCP    upstairs:2287          72.14.253.93:http      ESTABLISHED
  TCP    upstairs:2288          ar-in-f83.google.com:http  ESTABLISHED
  TCP    upstairs:2290          26-277-134-148.dhcp.aldl.mi.charter.com:4274 SYN_SENT

Alright now look under the state colum for SYN_SENT the matching IP is the IP of the person you sent the file to! you may get the IP or their name server. You should be able to find out the IP/nameserver from all those DNS stuff websites and Nmap.
Well thats that! thanks for reading, hope its useful!

[borat_sagdiyev]

its easier to do netstat -b cuz then it tells you what program is connected to that ip so its easier to find the ip

[DJ-CHRIS]

and SYN_SENT means that your computer has not recieved a reply from the other persons computer

[RewtGuy]

Borat: when using the -b flag one might want to pipe the output to a file they can view later as, if they have tons of executables or open connections you'd miss out on some information that scrolls up.

One can do this by using > to pipe information. Example:

netstat -b > netstat-2-19-07.txt

There's plenty of methods of getting IPs. It's not that big of a deal, so don't get too paranoid if someone gets it.

[^Mike^]

Nice guys, I'm guessing this works for AIM aswell.

[freestyler105]

Originally Posted by ^Mike^

Nice guys, I'm guessing this works for AIM aswell.

Yeah, it's basically the same for AIM.

[ArrizX]

I don't know how smart this is to let go here....

But whatever.

Yeah, it works the same for all IM's.

[LA061]

Nice... most of them when people ask they respond saying "you can't".

[RewtGuy]

I wouldn't say it works for all IMs. Seems it works for a majority of them.

It would only work if the data you're transferring is sent directly to the person receiving. Else if it's piped to the server, you'd just receive the server's IP.

[joxley1990]

Originally Posted by RewtGuy

I wouldn't say it works for all IMs. Seems it works for a majority of them.

It would only work if the data you're transferring is sent directly to the person receiving. Else if it's piped to the server, you'd just receive the server's IP.

Which is why you have to send them a file, because once that connection is open, the connection is PC2PC, not through the servers.