IP Relevancy Advice please....

peanutbutter · 2010-02-22T18:44:26Z

Hello all, i found this forum when looking for sites which deal with forensic email analysis and similar topics. Firstly can i say what a superb forum, and being only moderately technical, i will be spending a lot more time here now i have arrived – the info on here is enough for a degree in Computer Science!!!Anyway…. on to the issue at hand….I am trying to assess the conclusion to be drawn from some investigation i have done regarding a dishonest marketing scheme which has duped several friends of mine as well as myself. I won't mention as that wouldn't be fair at least in theory until courts have heard the evidence though i am 100% certain of many other dishonest practices carried out so this isn't case-dependent, but this will be going to the courts and authorities soon enough. Before that i am just trying to confirm if our findings to date confirm one particular facet of this whole case - does the info found prove with certainty that the same man sent the emails and used the same computer to log in to forums from?Briefly, the details areA product is marketed by a company. This is a one man company. This man has logged into our private support forum from his IP address which is UK based but i won't quote it hereThe company was contacted to ask for testimonials from independent customers using his product, after having received sales letters etc. Two emails were received from different 'people' whom we believe are aliases, as well as a third alias who has taken part in forums online etc to promote the product claiming to be independent and not connected to the company. I believe all of these persons are aliases set up by the owner of the company.The SAME IP ADDRESS appears in the Email Header in ALL emails from ALL persons mentioned above, AS WELL AS from the company owner's own access logs to our forum. In effect 4 different people (allegedly) all with the same IP address in their emails or network logs. I am technically proficient but i am not an IP expert. Could someone please advise if the above confirms our suspicion that the same computer terminal sent all of the communications, emails, logins etc? I am pretty sure this is the case but i am looking for confirmation from experts or people with more knowledge than myself. Does anyone have any comments, will be VERY grateful for any help with this.Thank you very much

Page 2 / 2 Prev

General (Technical, Procedural, Software, Hardware etc.)

Last Post by peanutbutter 15 years ago

12 Posts

6 Users

0 Reactions

872 Views

RSS

azrael

(@azrael)

Honorable Member

Joined: 19 years ago

Posts: 656

23/02/2010 7:24 pm

While we are on topic - there is a rather good book that covers off this sort of thing from O'Reilly called "Internet Forensics" by Robert Jones.

Chapter 3 covers EMail in detail, and there are primers on IP in Chapter 1.

ReplyQuote

peanutbutter

(@peanutbutter)

Active Member

Joined: 15 years ago

Posts: 5

Topic starter 23/02/2010 8:27 pm

Thanks for that, will maybe have a look for that one.

Much appreciated )

ReplyQuote

Page 2 / 2 Prev

8 Forums
15.7 K Topics
92.3 K Posts
198 Online
41.1 K Members

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed