View Full Version : Faking IP etc.


Bebelina
02-03-10, 11:17 PM
How easy is it to fake an IP or a phonenumber?

For example to make it look like you are calling from another country than you actually are?

Can anyone do it with just a little investigation or is it more complex than that?

James R
02-03-10, 11:36 PM
How do you know what country somebody is phoning you from anyway?

Read-Only
02-03-10, 11:39 PM
How easy is it to fake an IP or a phonenumber?

For example to make it look like you are calling from another country than you actually are?

Can anyone do it with just a little investigation or is it more complex than that?

Yes, IPAs can be spoofed, though I'm not familiar with the methods. And having once worked in the long-distance side of the telephony house, I'm aware of two effective ways to send false caller-IDs. However I'm not going to reveal any details, but I'll give you a word of strong advice - don't try it because your real number CAN be found very easily and depending on the nature of the call, you could find yourself in BIG trouble. Even possibly facing jail time in addition to an expensive fine.

Read-Only
02-03-10, 11:44 PM
How do you know what country somebody is phoning you from anyway?

While most countries have implemented Caller ID, not all have. Do you not have it in Australia? (I never get calls from there.)

princelove
02-03-10, 11:44 PM
OH Yeah Maybe some one want to disturb on you

Read-Only
02-03-10, 11:49 PM
OH Yeah Maybe some one want to disturb on you

What?? I can't get any sense out of that.:shrug:

princelove
02-03-10, 11:55 PM
Think more to that

Read-Only
02-04-10, 12:00 AM
Think more to that

There's nothing to think about. The usage of English is SO bad that it looks like a child of 6 wrote it. Surely you can do better than that, can't you???

princelove
02-04-10, 12:05 AM
Hey Man i am from afghanistan and i want to fortify my english speaking so i try to solve the problems as possible as easy.

Read-Only
02-04-10, 12:14 AM
Hey Man i am from afghanistan and i want to fortify my english speaking so i try to solve the problems as possible as easy.

OK, I can understand THAT, But you sure need a lot of practice because the words you used in that post don't even come close to going together. Why not hook up with someone who speaks both languages well and learn that way instead of just mixing up English words to the point that no one can understand you?

princelove
02-04-10, 12:35 AM
So in this this i registered my self to know english from yours would you correct my english mistakes?

phlogistician
02-04-10, 03:06 AM
How easy is it to fake an IP or a phonenumber?

For example to make it look like you are calling from another country than you actually are?

Can anyone do it with just a little investigation or is it more complex than that?

Fake an IP, trickier than just using an open proxy.

Faking a phone number caller ID. Tricky, and like Read Only said, quite likely to land you in trouble, as that data is used for billing purposes, and it may look like you are attempting fraud if caught.

Nasor
02-04-10, 08:44 AM
You can't really fake your IP address when you connect to another computer, because your IP address is how the other computer knows how to send data to you. It would be easy enough to send someone packets with a spoofed IP address, but you would never receive an answer, because the answer would be routed to the fake IP address rather than to your computer.

phlogistician
02-04-10, 09:17 AM
You can't really fake your IP address when you connect to another computer, because your IP address is how the other computer knows how to send data to you.

Sure you can, you edit the packets to make it look like the traffic didn't originate from your computer, and that your computer is part of the network that is routing the traffic. That stuff isn't usually logged, just the originating IP, which in this case is bogus.

draqon
02-04-10, 09:55 AM
yeah well obviously IP address clearly identifies that the person is what that country/state...*sarcasm*

video on how to change IP address: google "faking IP address" on youtube

fedr808
02-04-10, 10:04 AM
How easy is it to fake an IP or a phonenumber?

For example to make it look like you are calling from another country than you actually are?

Can anyone do it with just a little investigation or is it more complex than that?

Basically just use a proxy.

Look it up on wikihow.

Basically it is a website/server, when you open a webpage rather than you sending the info straight to the website's server (lets say www.google.com) where your IP is logged, you are sending the request to the proxy server, which basically than requests your page from google. That way when logged, the IP address will be that of the proxy server.

Caution though, some lesser known proxy's could use logging software so I wouldnt use any passwords or anything very sensitive, but the major proxy's are reliable.

And the best part, with a little work you can "stack" them, you send your request to one proxy, that proxy sends it to another, that one sends it to another which gets the info from google and sends it all the way back down the line.

If you stack 7 or more proxy's it is in all practicality impossible to trace the signal back to you, even if you use a single proxy, it takes no work to tell that you are using a proxy, and a good tech wiz can track you. But that's a single one, for every one you stack the dificulty to track your IP increases exponentially.

If what you are doing is super sensitive, for every super sensitive thing you send through an e-mail or upload (and I stress the term up-load rather than just look up a website), I'd change the proxy's, you can use the same ones, just switch up the servers order and change out older ones for new ones.

China's cyber attacks have been sent through a proxy located in Taiwan, that is why the IP addresses always show Taiwan to be the origin, but it's really a mask.

draqon
02-04-10, 10:06 AM
China's cyber attacks have been sent through a proxy located in Taiwan, that is why the IP addresses always show Taiwan to be the origin, but it's really a mask.

and you know that it was China how? :rolleyes:

Nasor
02-04-10, 11:13 AM
Sure you can, you edit the packets to make it look like the traffic didn't originate from your computer, and that your computer is part of the network that is routing the traffic. That stuff isn't usually logged, just the originating IP, which in this case is bogus.
You could easily do this, but as I said, the problem is getting answering packets back from the computer you are connected to. The other computer would try to send its reply packets to whatever inaccurate originating IP address you inserted into the packets. If you insert someone else's legitimate IP address, the reply will be routed to someone else's computer (who will most likely just ignore the unsolicited packets), and you won't be along that route, so you won't see the reply. If you inserted a made-up IP address, the other computer will simply keep passing the packets addressed to the non-existent IP address up the chain until they finally reach a high-level router that says "I don't know where the hell this is, it's not in any of my tables" and sends a response back to the other computer telling it that it's trying to send data to an invalid address. Either way, you will likely never see the reply. Unless you happen to be a large network service provider or something that routinely passes packets off to other networks that are owned be others, and are thus able to spoof the originating IP address as coming from somewhere that you know will result in the other computer's reply being routed through you, you won't get an answer back from them.

Nasor
02-04-10, 11:16 AM
video on how to change IP address: google "faking IP address" on youtube
I'm sure you'll find plenty of videos telling you how to use a proxy or break into people's wifi, but I don't think you'll find anything explaining how to actually communicate directly with another computer using a fake IP address.

Bebelina
02-04-10, 11:44 AM
OH Yeah Maybe some one want to disturb on you

Exactly. :D

It's about this guy who has been calling me from Kurdistan, according to himself, but the number says Bagdad, so he could be calling from outer space as far as I'm concerned. I'm not talking to liars anyway, but it would be nice if there was a way to find out, but then you really have to be an expert in that area. I mean, he doesn't even have to be calling from a phone, it can be from a computer too, which makes it even easier to fake a number. And the voice can be scrambled, so it doesn't even have to be a (hu)man.

Randwolf
02-04-10, 11:52 AM
This is not this difficult people. Start at the other end. If I wanted a messaged to arrive here at SF and make it look like it cam from Tasmania, all I would need to do is relay it through a Tasmanian server. In a nutshell, I send a message to the Tasmanian computer that translates it and resends the message from their server. How would anyone ever know where the original message originated?

Unless, of course, you follow the stream upwards, with the cooperation of the Tasmanian ISP's. It's that simple.

Now imagine doing that same thing 6 - 7 times, before the message arrives at SF. Kinda tough to follow, right? Assuming you are not CIA, NSA, etc... :cool:

Randwolf
02-04-10, 11:56 AM
You could easily do this, but as I said, the problem is getting answering packets back from the computer you are connected to.

Sorry, forgot this part. This is true, especially if you are trying to maintain "session". (If that means nothing to you, don't worry, you will probably never have to try to do this...)

Anyhow, as to anonymously posting to a board like SF, you are not waiting for a specific "message" to come back to your computer. Someone posts, you read it - maybe now from Taiwan, who cares... And so on...

Nasor
02-04-10, 12:40 PM
Sorry, forgot this part. This is true, especially if you are trying to maintain "session". (If that means nothing to you, don't worry, you will probably never have to try to do this...)

Anyhow, as to anonymously posting to a board like SF, you are not waiting for a specific "message" to come back to your computer. Someone posts, you read it - maybe now from Taiwan, who cares... And so on...
True, but then you aren't connected to sf; you are connected to a proxy. The proxy still has to know your IP address, or it won't be able to send packets to you.

Randwolf
02-04-10, 12:46 PM
True, but then you aren't connected to sf; you are connected to a proxy. The proxy still has to know your IP address, you it won't be able to send packets to you.

Agreed, the proxy knows my IP. However, I'm not sure exactly what the thread participants are trying to accomplish here... ;)

Bebelina
02-04-10, 01:27 PM
It's been very informative, thank you.

Fraggle Rocker
02-04-10, 04:37 PM
OK, I can understand THAT, But you sure need a lot of practice because the words you used in that post don't even come close to going together. Why not hook up with someone who speaks both languages well and learn that way instead of just mixing up English words to the point that no one can understand you?As the Linguistics Moderator, I think you guys are being excessively hard on him. I'm sure it's not easy to find someone who speaks both English and Dari (or Pashto or whichever is his native language). Afghanistan is not like Mexico, Japan or Saudi Arabia, or even China or Iran, where it's fairly easy to find an English teacher and not even too hard to find someone who speaks the language passably. Did it occur to you that maybe one of the reasons he came here is to improve his English? Did it occur to you that you might simply be able to help, instead of acting like the Parisians, who make exaggerated grimaces and hold their ears in mock pain at the affront of hearing their language spoken poorly?
OH Yeah Maybe some one want to disturb on youCorrection: Maybe someone wants to disturb you."Someone" is one word when used as a pronoun. The same is true of "everyone" and "anyone." Unfortunately we are not consistent so "no one" is always written as two words. Be sure to conjugate your verbs. In the second person singular (he/she/it or anyone other than the person speaking or the person spoken to) most verbs take the suffix -S or -ES. There are a few exceptions like have/has and be/is. So: "someone wants," not "someone want." "Disturb" is a transitive verb, meaning it requires a direct object. Therefore, no preposition is necessary between "disturb" and its object, which in this case is the pronoun "you."

Think more to thatCorrection: Think more about that.Prepositions are one of the most difficult things to learn about English. There aren't very many, so each one has many meanings, and they overlap. You have to memorize the usage of each one; there's no other way to learn them. You think about something. We would probably say that differently: Think about that a little more. That is idiomatic speech and it's difficult to explain, but you will see this form even in writing.
Hey Man i am from afghanistan and i want to fortify my english speaking so i try to solve the problems as possible as easy.Correction: I am from Afghanistan and I want to improve my English. So I am trying to solve my problems as easily as possible."Hey, man" is slang and is more appropriate in speech between friends than in writing. You'll see people use it here but you'll be safer to stick with more formal language until you know English better. If you do want to write it, use commas: Hey, man, I is always capitalized, even if it's not the first word in the sentence. English is a rude language; we capitalize "I" instead of "you.";) Names of countries and the adjectives formed from them are always capitalized: Afghanistan, Afghan [or do you say "Afghanistani"?] France, French, Kazakhstan, Kazakh. We understand "fortify" but we say improve knowledge, skill or talent. You just say improve my English, not "my English speaking." And don't forget to spell English and England with a capital E. We understand "I try," but in this case we say I am trying, the present progressive tense. This is a very difficult point of English grammer to explain. You will usually see the present progressive tense used in unconditional statements. The present indicative is usually reserved for clauses with more complicated relationships: "If I try to speak English better, will people understand me more easily?" "to solve my problems," not "the problems." If you say "the problems" you imply that the problems are general. "Toyota is trying to fix the problems with the sticking throttle in their cars." If the problem is with you, and not with the language, then it is your problem, not "the problem." easily, not "easy." "Solve" is a verb, so it must be modified by an adverb. Adjectives can only be used to modify nouns (and verbs in the infinitive and gerund mode but that's getting too complicated:(). "A problem" is easy but "I solved it easily. For completeness I will note that "It was easy to solve," and "Solving it was easy" because those sentences contain an infinitive and a gerund, respectively. But that probably just confuses you further. If the subject of the sentence is a person rather than the problem or the action itself, use an adverb. as easily as possible. You got it backwards: "as possible as easy." Different languages put their words in a different sequence, and this is the way it's done in English.
So in this this i registered my self to know english from yours would you correct my english mistakes?Correction: So for this purpose I registered myself to learn English from you. Would you please correct my English mistakes?This should be two sentences because it's too complicated. When you know our language better you will be able to build complicated sentences correctly, but for now you should strive for simplicity. I'm not sure what you mean by "in this this." It doesn't mean anything. So I just guessed. Don't forget to always capitalize the pronoun "I." There are a few people here who do it wrong, and I am always yelling at them. They pretend that their fingers are too uncoordinated to hit the SHIFT key. Please don't copy them, they are being deliberately rude. "Myself" is one word. So is "yourself, himself, herself, itself, ourselves, themselves." "To know English from yours": We understand you but that's the wrong way to say it. What you really want to do is learn, because that's the way you get to know things. You can say to learn English from you, or to learn from your English. I would advise you not to use the second form because it is not always correct. The first form is always correct. Remember to always capitalize the names of languages. English, Dari, Pashto, Farsi, Greek, Thai, Armenian. Remember to use "please" when you're asking a favor: "Would you please correct my English mistakes, or Please, would you correct my English mistakes. We Americans don't always use polite language so if I were asking my friend for a favor I probably would not say "please." But if I were asking a stranger I would always say "please."If you would like more help like this, I suggest that you come to the Linguistics subforum. The people there are more interested in language and more of them will be willing to help you. I'm the Moderator over there.

Michael
02-04-10, 05:26 PM
So in this this i registered my self to know english from yours would you correct my english mistakes?You'd probably want to start a new thread - but, most people don't really have THAT much freetime on their hands. Although, if you have specific questions about parts of English then yes I think that will fit in with Linguistics well.

There may be websites for learning English that correct English for free?

Also, I got your meaning even if your English was broken.

phlogistician
02-05-10, 02:59 AM
You could easily do this, but as I said, the problem is getting answering packets back from the computer you are connected to.

Dude, I've done this on on IP security course. It's easy, with the right tools.

Nasor
02-05-10, 08:35 AM
Dude, I've done this on on IP security course. It's easy, with the right tools.
So how exactly do you ensure that the return packets get routed through you? You couldn't just use loose source routing, because virtually nobody allows that any more...so what's the technique?

phlogistician
02-05-10, 08:43 AM
So how exactly do you ensure that the return packets get routed through you? You couldn't just use loose source routing, because virtually nobody allows that any more...so what's the technique?

I'll have to dig out the manuals, because we spoofed, and then put measures in place to prevent being spoofed.

Blindman
02-05-10, 08:59 AM
Use a public phone or computer, pre paid mobile with fake ID, or snail mail...

Nasor
02-05-10, 11:40 AM
I'll have to dig out the manuals, because we spoofed, and then put measures in place to prevent being spoofed.
If you don't mind going through the trouble to dig it out I would be very curious to hear about it, because I don't see how such a thing could even be possible without using loose source routing...which as I said, isn't really an option any more because no one has allowed it for 15+ years (precisely because it's so easy to abuse).

Stryder
02-08-10, 03:34 AM
It's possible to spoof an IP, but you have to be in the same subnet since you have to intercept broadcast messages. As It's been mentioned though it's not easy, placing a different IP in as a spoof will result in none returned packets, which identifies something is amiss.

Spoofing an IP with the same MAC address as someone else, usually generates a conflict if the network is using DHCP or some other rolecall server. This means the conflict will usually be logged on that network and be viewable by administrators of that network.

This is the main reason why most people just go with "Proxies" the idea being that the person that runs the Proxy gets between you and whoever you are connecting to.... however "hackers" (Well not the keyboard samurai types) can use proxies to mix Data mining and Social Engineering together. (Personally I find it a low sophistication hack and don't see it with the same awe as those that get down and dirty with packet assembly.)

Phone numbers is a little different and is dependent on the exchange, it is possible to fake Caller ID numbers however it requires setting up a tunnel but I can't go into too much detail on that because I've had extremely limited experience on the subject (although know a man, that knows a man that's in the business...blah blah blah! :) )

With VoIP (Voice Over IP) it's possible to make calls from other countries in some extreme cases, however this is either down to misconfiguration, phracks or trial offers offered to reseller telecoms companies.

Can anyone do it? erm.. I'd say no, it takes a bit of grey matter to do a good job of it and most that attempt it illegally don't last too long.