Has anyone any experience of obtaining details of the user of a leased IP address from the ISP? If so do they give these details readily or is it necessary to get a Court Order?
_________________
Forensic Computer Services
Lotus Notes eDiscovery and Forensics
Tape eDiscovery and Forensics 

Good morning Ron,

Well, you can start by doing a "whois" check here, www.dnsstuff.com or here, www.networksolutions.c...index.jsp.

If they have a domain name attached to that particular IP address, the Admin contact information should be provided. Sometimes though, folks do not make that information public.

That should get you started....

K  

Thanks for your help rocklobster, I have already done the usual lookups and have found that the IP address is within a block used for DSL access. I have the address details for the ISP administrators but I do not know to whom the IP address was leased at the time of interest.

Cheers
Ron
_________________
Forensic Computer Services
Lotus Notes eDiscovery and Forensics
Tape eDiscovery and Forensics 

The ISP will release it with a court order. You must also have the date and time of the IP usage, and don't wait too long, they'll only keep the information so long.

This is easy enough to get as a law enforcement officer. I've never tried it in a civil matter. Good luck.
_________________
Greg Marshall, EnCE 

- gmarshall139

The ISP will release it with a court order.

I feared that would be the case.....More paperwork.

Thanks for the advice anyhow.
_________________
Forensic Computer Services
Lotus Notes eDiscovery and Forensics
Tape eDiscovery and Forensics 

www.who.is > and search for the mail abuse[at]ISPName.com  

- iliaselm

www.who.is > and search for the mail abuse[at]ISPName.com

Generally abuse contacts are used for reporting incidents (amongst other things) but not to get the subscriber details Ron is after. 99.9% of ISP's will require court orders and contact will have to be made through their legal departments, as correctly stated earlier.