+ Post New Thread
Results 1 to 12 of 12
General Chat Thread, Tracing IP Addresses in General; Morning Guys, We need to trace an IP address from a Virgin Media account - would anyone have advice on ...
  1. #1

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,309
    Thank Post
    973
    Thanked 326 Times in 194 Posts
    Blog Entries
    11
    Rep Power
    170

    Tracing IP Addresses

    Morning Guys,

    We need to trace an IP address from a Virgin Media account - would anyone have advice on how to do this? I very much doubt Virgin Media will give us the details under the DPA but I thought I'd ask anyway.

    A pupil has written some nasty stuff on Wikipedia about another pupil. We have the IP address from the Edit History (and the text they wrote) and it maps back to Gorseinon but from there we cannot trace any further.

    The offending material has been removed but we have a very upset pupil here.

    Cheers

    Gareth

  2. #2

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,374
    Thank Post
    906
    Thanked 1,811 Times in 1,559 Posts
    Blog Entries
    12
    Rep Power
    468
    Even if you found the student, what could the school do? It was outside of school time...

  3. #3

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,309
    Thank Post
    973
    Thanked 326 Times in 194 Posts
    Blog Entries
    11
    Rep Power
    170
    There is slander of a teacher there as well. Can we take this further?

    Gareth

  4. #4

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227
    It's libel, not slander. It's a civil offence and therefore nothing to do with the school so the people who believe they have been the victim of libel should go talk to a lawyer and go to civil court if there's sufficient grounds for a successful prosecution. The school could get dragged into court if such a thing went ahead though.

    The school could act on its own if this falls under the remit of your anti bullying policy. However as you've already said, you don't have sufficient evidence to point fingers. Plus Virgin probably wont tell you anything about that IP without a court order.

    On a more technical note, do you have any internet facing services uses by your staff/pupils that requires login and records ips? Such as a web server or email system? You might already know who was behind that IP at the time and not realise it?

  5. Thanks to Geoff from:

    garethedmondson (14th June 2012)

  6. #5

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,309
    Thank Post
    973
    Thanked 326 Times in 194 Posts
    Blog Entries
    11
    Rep Power
    170
    Thanks Geoff - got my terms mixed up there.

    And regarding your last point - yes we do.

    Gareth

  7. #6


    Join Date
    May 2009
    Posts
    3,395
    Thank Post
    301
    Thanked 917 Times in 684 Posts
    Rep Power
    346
    Quote Originally Posted by Geoff View Post
    On a more technical note, do you have any internet facing services uses by your staff/pupils that requires login and records ips? Such as a web server or email system? You might already know who was behind that IP at the time and not realise it?
    I was going to suggest this but great care is needed. Virgin operate IP leasing so there is no grantee that an IP address is associated with a login other than at the time the login was done. This could be a minor risk (in terms of accusing the wrong person) or if several pupils live next door to each other on the same network segment, a huge risk. The only sure way is records from the ISP - "this IP was designated to this device on this specific date and time", and you will only get that with a court order.

  8. #7

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227
    It depends what level you are dealing with. The times would have to match (plus some records either side too for good measure) for it to stack up in court (although civil courts requirements are less than a criminal court). Preferably with an independent expert backing up the methodology and conclusions (I offer reasonable rates btw. )

    To chase the issue internally (anti bullying policy) as long as you are satisfied yourself with the reliability of the information I don't think there would be an issue. No doubt you could ask for a second opinion from your LEA.
    Last edited by Geoff; 14th June 2012 at 11:44 AM.

  9. #8
    januttall's Avatar
    Join Date
    Sep 2010
    Posts
    227
    Thank Post
    17
    Thanked 28 Times in 28 Posts
    Blog Entries
    1
    Rep Power
    14
    Quote Originally Posted by garethedmondson View Post

    A pupil has written some nasty stuff on Wikipedia about another pupil. We have the IP address from the Edit History (and the text they wrote).

    Gareth
    Just a small but good point are you definite that it was another student, that wrote the comments (If you don't know who). the other way round is to hold your ear to the floor and see if there are any murmurings somebody must know who did this if in your school and are likely talking about it (long shot but easier than a court order).

    and virgin IP addresses do change but not normally any where near as regular as bt or any provider that i know off, unless there are problems of course.

    you could also try a tracert to see the ip of the nearest routing device it might narrow it down a little further than just the town and this sometimes gives you device names also. use it like a ping so [tracert 127.0.0.1] and it will map it through 30 hops.

    hope this helps a little

  10. #9

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    9,839
    Thank Post
    669
    Thanked 2,188 Times in 1,493 Posts
    Blog Entries
    19
    Rep Power
    900
    Quote Originally Posted by pcstru View Post
    I was going to suggest this but great care is needed. Virgin operate IP leasing so there is no grantee that an IP address is associated with a login other than at the time the login was done. This could be a minor risk (in terms of accusing the wrong person) or if several pupils live next door to each other on the same network segment, a huge risk. The only sure way is records from the ISP - "this IP was designated to this device on this specific date and time", and you will only get that with a court order.

    However, while it's possible to know the IP [and by extension the owner] you still have no idea WHO did it.

    If they're using unsecured WiFi the edit could have come from anyone. [Though, reasonably, it would only be someone who knows both the teacher and pupil.]

    Plus, visitors to the home, other students for example, could also be to blame.


    There was a story a while back, about a man being arrested/investigated for things he had viewed online, which turned out to be false.

    It ended up being that a friend/relation was using his internet to do it.

    I would link to it, but it's being flagged by our filtering... I'm also being semi-vague because I don't want Edugeek blocked.

  11. #10

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    10,074
    Thank Post
    1,384
    Thanked 1,889 Times in 1,170 Posts
    Blog Entries
    19
    Rep Power
    614
    Also contact the police as libel can slip into harassment, which is a criminal offence.

  12. #11

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227
    In my experience the police do not have the time, expertise or will to investigate on-line harassment.

  13. #12

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,309
    Thank Post
    973
    Thanked 326 Times in 194 Posts
    Blog Entries
    11
    Rep Power
    170
    Hi All,

    Thank you for all your comments regarding this. We did look at the logs to see who had accessed one of our sites and from 4 IP addresses we came up with 3 names. The 4th name actually made the edit with his Wikipedia username :-)

    Anyhow we got them in and without accusing them of anything asked them if they had anything to do with it. Believe it or not all 3 confessed to what they had done. One boy was actually amazed that we could trace his anonymity through an IP address.

    The matter now moves onto the next stage with parental involvement.

    So thanks everyone for your help with this. Case closed.

    Gareth



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 26
    Last Post: 7th February 2007, 05:33 PM
  2. Centrinity FirstClass not working with DHCP IP Address?
    By CM786 in forum Wireless Networks
    Replies: 4
    Last Post: 14th December 2006, 07:14 PM
  3. Broadband connection: RBC NAT versus Public IP addresses
    By NetworkGeezer in forum Wireless Networks
    Replies: 23
    Last Post: 1st December 2006, 10:34 AM
  4. Replies: 9
    Last Post: 10th October 2006, 11:53 AM
  5. Ping an IP address and log results
    By mrforgetful in forum Wireless Networks
    Replies: 13
    Last Post: 8th July 2006, 11:03 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •