need help to trace an ip

[michaeltt]

someone got into my friends email and sent another email to someone else from it with the ip 10.54.99.19
. i looked it up on arin but i dont really know what to do from there. Shes trying to figure out the isp it came from to try to pin it down on one of her friends or co workers. any help is appreciated.

 

[blut wump]

You won't find it. The 10.x.x.x series is reserved for home and internal business use. What you will have found on looking it up is the IANA, the controlling body for IP numbers.

Either the user was spoofing his IP or your friend's company is using that address range and she should ping it at work. If the company is using DHCP then the information can only be gleamed from server logs based on the time/date of the intrusion, assuming the admin tracks that detail.

Another possibility is that, while 'in' your friend's machine, they changed the data that leads her to think that IP address was used. Does she know what her own IP address was at the time?

 

[gjohnson5]

someone got into my friends email and sent another email to someone else from it with the ip 10.54.99.19
. i looked it up on arin but i dont really know what to do from there. Shes trying to figure out the isp it came from to try to pin it down on one of her friends or co workers. any help is appreciated.

blut Wump is correct. rfc1918 created some reserved ip addresses for use of folks and companies that are behind firewalls

10.0.0.0/8
172.16.0.0/12
192.168.0.0/16

All firewalls have what's called an "untrusted" interface that can create connections. Find out hat that ip address is and you can track him down