Page 1 of 1

IP from disconnected user

Posted: Fri Feb 09, 2007 12:02 pm
by Ithron
Hi,
How can I get information (nick, host...) about an disconnected user if I only know the IP? (such as the whowas cmd).
thx, Ithron

Posted: Fri Feb 09, 2007 12:35 pm
by HITMAN
if you can say "why you want this" maybe we can help more easy..

why you want to know this? for what?

Posted: Fri Feb 09, 2007 2:10 pm
by Grunt
Check the ircd.log file (or any other log file you may have).

Posted: Fri Feb 09, 2007 5:35 pm
by Ithron
Hitman: I want it to identify a website spammer. i am sure that he was connected with the same IP on IRC and on HTTP and i logged the IP from HTTP... I don't think that this helps you more ;)

Grunt: In ircd.log file, i see only the hosts, not the IP's, eg:
[Thu Feb 8 15:52:43 2007] - Connect - NICK![email protected] [VHOST Prefix-3312C20F.versanet.de]
is there a way to display the IP's in the log-files?
Im using Unreal3.2.4

Ithron

Posted: Sat Feb 10, 2007 12:37 am
by Stealth
In mIRC:
/dns i3ED6DBD7.versanet.de

In a DOS window:
nslookup i3ED6DBD7.versanet.de

In a *NIX shell:
host i3ED6DBD7.versanet.de

Posted: Sat Feb 10, 2007 12:36 pm
by Ithron
Mh, it seems that you didn't understand me...
the log-line was just an example for Grunt that i can't see the IP's in the log-files.
My question was, how to get information about an user only knowing the IP...
Ithron

Posted: Sun Feb 18, 2007 3:55 am
by Bricker
well if all you have is the IP and your logs show the IP in them, then grep the logs for that particular IP...else figure smth out with a channel bot or smth

Posted: Sun Feb 18, 2007 11:59 am
by Jobe
If you only know the IP and the logs show the reverse host for the IP's why not just do a lookup on the IP to find its reverse host yourself?

mIRC:
/dns IPHERE

windows:
nslookup IP

*nix:
host IP

Having done that you can then search through the logs for the reverse host name instead.