Friend getting harassed over AIM

pseudonympseudonym Michigan Icrontian
edited January 2007 in Science & Tech
My sisters bro is getting bugged by some A-Hole over AIM. Its nothing severe, but they are crazy and annoying as hell. I'd like to help him out in some way, i.e. either get em back or figure out if he knows who it is. Is there any way to trace an IP over AIM (Load up my visual trace software and have it somehow trace the AIM connection, don't know if thats even possible, etc) or is there some prog I can run that will find that IP, or a different version of AIM that will pick it up?? Any ideas will help, I'd prefer to exact revenge in some form (report to isp, get him back if its a buddy from school) before blocking the d-bag, or making him change his sn. Any ideas or experiences?? Thanks guys..
«1

Comments

  • EMTEMT Seattle, WA Icrontian
    edited January 2004
    Yes, you can get his IP, but you have to get him to accept a direct connection or file transfer first... regular chatting goes thru AIM servers.

    If/Once you direct connect to him:
    open a command prompt and type either...
    netstat -n
    netstat -n | find "4443"
    (correct me if the port number is wrong, it's been a while)
    The second option is better if you have a lot of connections.

    Anyway, port 4443 should be involved in any direct connection (not sure on file transfers) so look for his IP there. Then you can visualroute it, nslookup to find domain and tell ISP... whatever.
  • pseudonympseudonym Michigan Icrontian
    edited January 2004
    Ahhh, very cool. Thanks!!
  • TheSmJTheSmJ
    edited January 2004
    He could also not accept messages from people not on his buddy list.
  • BudBud Chesterfield, Va
    edited January 2004
    is there a way to get the ip address if you cant get them to do a direct connect?
  • pseudonympseudonym Michigan Icrontian
    edited January 2004
    TheSmJ wrote:
    He could also not accept messages from people not on his buddy list.

    Yeah, I'd rather have some fun first if possible though :) I can't believe he hadn't done it as of yet and was going to tell him, until I thought of this.
  • JonseyJonsey Microsoft Corporation
    edited January 2004
    No, not really bud.

    Aim text chat goes through AIM servers first.
  • Straight_ManStraight_Man Geeky, in my own way Naples, FL Icrontian
    edited January 2004
    Well, you can file an abuse report with AIM ID and some cut-n-pasted conversation sniplets to abuse@aol.com in email-- AOL knows the routings used and can do an ID ban (they will probably not reply, but they will stop it if they get a lot from one inward IP or a bunch ganging up from one little IP subnet), if they are really out of hand. But, this is often a local-to-local thing also, especially if this is a teen thing-- rival group.

    Keep sending abuse reports, AOL will take some action. If your sister's friend is in fact made lastingly angry by this, that is the way to go. Include time, date, and verbatim quotes of abuse and verbatim quotes of his replies. Those servers probably log the IPs already, of both ends, as they route them. Those logs can be datamined by AOL.

    John.
  • ArmoArmo Mr. Nice Guy Is Dead,Only Aqua Remains Member
    edited January 2004
    Jonsey wrote:
    No, not really bud.

    Aim text chat goes through AIM servers first.

    a packet sniffer can
  • WuGgaRoOWuGgaRoO Not in the shower Icrontian
    edited January 2004
    how about u post the SN over here, on SM, and well take care of the rest...mwahhahaha
  • BudBud Chesterfield, Va
    edited January 2004
    no a packet sniffer just gives you the ip off that server remember armo I found that out on you.
  • ArmoArmo Mr. Nice Guy Is Dead,Only Aqua Remains Member
    edited January 2004
    works for me
  • EnverexEnverex Worcester, UK Icrontian
    edited January 2004
    WuGgaRoO wrote:
    how about u post the SN over here, on SM, and well take care of the rest...mwahhahaha

    Agreed.
    Bud wrote:
    no a packet sniffer just gives you the ip off that server remember armo I found that out on you.

    The packet still needs to contain information on who/where it is going, although it may only be the users name, not IP (as the server deals with translating where that user is logged on.
  • GobblesGobbles Ventura California
    edited January 2004
    the packet should contain origin and destination. it all depends on if the server is just bouncing the packet or actually creating the packet and sending it.

    Im in a simular situation as ive agreed to help a young lady being harassed by several people. I really dont tolerate that kinda of thing so I have agreed to shadow them. Impersonating her in aim and other chat programs. You cannot hide on the internet...

    Gobbles
  • ginipigginipig OH, NOES
    edited January 2004
    You can do it without the direct connect. But I can't really tell you how.

    In any case, get rid of Aim; use Miranda instead. <-- there are certain plugins that enable packet sniffing/graphical traceroutes.

    Remember, you didn't get this info from me.
  • TemplarTemplar You first.
    edited January 2004
    the packet should contain origin and destination. it all depends on if the server is just bouncing the packet or actually creating the packet and sending it.

    I would imagine for security reasons, AOL would attempt to hide the original IP address from the sender by rebuilding packets along the way.
  • ginipigginipig OH, NOES
    edited January 2004
    Both Aim and Icq were supposed to be hack-proof back in 95 when I started using Icq. 9 times out of 10, the client that you use does what it's supposed to do (hide octets.) Problem is (as the changelogs for Aim and Icq can attest from 9x' to 0x',) they never really addressed the issue. Sure, there have been less nukes available for Icq, but Aim isn't really that hard to reverse engineer.
  • LincLinc Owner Detroit Icrontian
    edited January 2004
    I would think the easiest way is link him to a site that grabs his IP that you would have access to. AIM profile quizzes usually do this, like over at imchaos.com. You might be able to make your own or find a similar, better alternative.
  • EnverexEnverex Worcester, UK Icrontian
    edited January 2004
    Ill make a fake page on my site with a catchy name, and you direct him to it, I look at my logs and tada, we have his IP address (as no-one else will have been to this page).
  • ginipigginipig OH, NOES
    edited January 2004
    My sisters bro is getting bugged by some A-Hole over AIM

    .. wait, wouldn't that be you?
  • csimoncsimon Acadiana Icrontian
    edited January 2004
    pseudonym wrote:
    My sisters bro is getting bugged by some A-Hole over AIM
    :Pwned:
    ginipig wrote:
    .. wait, wouldn't that be you?
    the A-Hole? j/k ;D
  • Josh-Josh- Royal Oak, MI
    edited January 2004
    I have a php script to determine and log IP's and Screen names. I'll get it to you later.
  • croc_croc_ New
    edited January 2004
    The direct connect works BTW, I used it last night ;)
  • McBainMcBain San Clemente, CA New
    edited January 2004
    ginipig wrote:
    .. wait, wouldn't that be you?

    I was thinkin the saaame thing.
  • EMTEMT Seattle, WA Icrontian
    edited January 2004
    Glad direct connect worked for ya :)

    So AIM really knows the IP address? I'm sure packet sniffers won't get it. And yes, giving a link to something you control is a VERY effective way to get the IP. Easier to convince them to click it than direct connect, if they think they know what they're doing on AIM. Hmmm... Miranda...
  • pseudonympseudonym Michigan Icrontian
    edited January 2004
    lol, I missed some stuff here.

    Yeah, I noticed that typo too after I did it, never went back to fix it though :)

    Enermax/Keebs, that sounds like the best idea to me. If you could set something up, that would be greatly appreciated. Logging it off the page would work great. We've been trying to get the direct connect to go, but it's hard to catch them when I'm around to do it.

    As per Wuggs request, GO NUTS!!!

    rUne mOnKeY 64

    I'm sure they are ub3r l337 with a name like that :)
  • pseudonympseudonym Michigan Icrontian
    edited January 2004
    Josh- wrote:
    I have a php script to determine and log IP's and Screen names. I'll get it to you later.

    Thatd be neato too. You'd have to teach me though. :wave:
  • EnverexEnverex Worcester, UK Icrontian
    edited January 2004
    Direct him to - http://atomnet.co.uk/ripsaw.php

    NO-ONE ELSE GO THERE.
  • pseudonympseudonym Michigan Icrontian
    edited January 2004
    Ok, told him about the page, I'll tell you when we get in contact with the loser again. Thanks Enverex
  • kanezfankanezfan sunny south florida Icrontian
    edited January 2004
    Enverex wrote:
    Direct him to - http://atomnet.co.uk/ripsaw.php

    NO-ONE ELSE GO THERE.


    of course I couldn't resist... so you can strike 68.219.32.169, that's me.
  • primesuspectprimesuspect Beepin n' Boopin Detroit, MI Icrontian
    edited January 2004
    Must....not.....click......
Sign In or Register to comment.