Server owner is leaking peoples IPs

I have proof it just has my IP and acouple others, not sure how to go about this but I’ve had multiple people tell I should report him. But as far as I’m concerned there’s no official place to report this to anybody. https://media.discordapp.net/attachments/428009353136701440/679249590435840010/image0.png

This is the only screen shot I have that doesn’t have an IP in it

So? They connect to his network with full acknowledgment. Leaking an IP address is not like leaking a credit/debit card. It’s not illegal and nothing can be done with the IP itself.

Well the sad truth is that any server you join the owner and/or devs have access to your ip. In turn you also gain access to their ip or at least their server ip. If you are concerned that a server owner or dev is leaking your ip address to people with intent of malicious intent then I would report it to law enforcement. Even with no real information on the server owner you can use the ip address you gained from connecting to their server to pass it on to the police. That is just about as good as having the name and address of the owner.

Not necessarily but a lot can be done with just an IP…

2 Likes

My thoughts exactly. Just because someone leaks an IP doesn’t make it a crime but it’s what is done with the IP that would change the story. Most people have no clue what to actually do with an IP so usually it’s really not a huge deal but there is so much that can be done with an IP that it should still raise concern.

In the early 2000’s my brother and I stayed in Yahoo! chat rooms searching for pedophiles. We had verious methods of getting the users IP addresses and would trace the IP to the address it was registered to. We would forward that information to the police while also either disabling their accounts or stealing them. Of course we didn’t tell the police that we stole the accounts. There was also an incident where a young woman sent everyone in the chatroom a cam invite to watch her cut her wrists, we immidiately called 911, gave her address and we watched the police break down her bedroom door. We would occasionally connect to peoples computers and networks but our main purpose was a good one.

You can only get an actual home address from an IP if you have access to their ISP’s internal tools, or call up the ISP and try to social engineer information about it out of them. Since the early 2000’s, most ISPs that I know have cracked down on it by training their employees on how to spot social engineering attempts. Unless you can do that, you are stuck with what the geolocation databases give you, which at most gives you a city… (and they’re often incorrect).

Not necessarily but a lot can be done with just an IP…

Like what? The most you can really feasibly do is use a shady DDoS tool to boot them offline for a few minutes, and chances are they will be assigned a new IP when they’re back up. Almost all broadband residential ISPs give their subscribers a modem/router combo or one of each. The router acts as a gateway for all the devices on the home network. There would have to be a very bad vulnerability to exploit on the router for you to have a chance to do anything else.

Also bear in mind I am pretty sure you don’t have to be the server owner to get someone’s IP in FiveM if the network model is P2P like GTA:O.

Ok boomer.

2 Likes

You connected to his server and gave him your IP, deal with it.

So is it not agenst TOS to leak peoples personal info? I could careless anymore what happens I’ve just had multiple people tell me to report it ¯_(ツ)_/¯

I don’t quite understand the purpose of this comment…

That is most certainly not true. Having worked most of my career for an ISP (Cox Communications in particular) I can assure you that you are completely incorrect. What you’re referring to is the network mask which helps hide your actual IP from outside entities being able to obtain it. Once a user has your actual IP it’s up to the knowledge of the individual on how they csn use it. With direct connect P2P such as connecting directly to a server there is no Network Masking that can take place. The stucture of how IP addresses have not changed since the dial up days so I’m not sure what you’re talking about as far as the early 2000’s go.

While in many cases the dynamic ip assigned to a residential customer may give off geo locations for some time while the ip is first registered to the modem it will become precise as registration has lasted some time. A common misunderstanding of residential internet services and equipment is that the ip consistantly renews and changes. This is only partially true. The dynamic ip once registered to a device will only change under a few conditions.

  1. If the modem is unregistered from the network and needs to be renewed which often only happens after long periods of time of the modem being offline or reprovisioning. Often the ip will stay the same even if offline for a couple of days of it being offline.

  2. You contact the ISP and have them change the IP. That kind of falls in line with number 1.

  3. Node splits/changes. Once a node for the area is split or repaired often it will randomly assign all dynamic IPs again.

Nothing you can do with your equipment aside from leaving the modem unplugged can change your IP. Also the modem/router combo plays no part in this. As a matter of fact most residential modem/gateways are flawed in the firmware and security. Off topic a bit I would highly reccomend steering clear of the providers equipment due to performance issues. Most ISPs have a locked down firmware which restricts nat and other features that can impact latency and performance.

ISPs do not have a security team watching for hackers so unless the hacker was obviously trying to use something like a botnet the ISP may never know. Most actual hackers find and use open ports on a modem/router/computer to connect just as a server or website would. It isn’t like that the movies. If I were a hacker on FiveM I would know that the ports that FiveM uses are usable and I would try to catch the victim while not on FiveM to attempt a connection. Now of course you would have to get into the victims network which starts with modem and/or router and route yourself from there but thats not actually too hard to do.

While completely possible most people with that knowledge wont actually waste their time on you due to the time it takes to footprint around and the federal charges that are possible. As far as getting your address it is super easy to do and fast. It may not be possible anymore with programs like NeoTrace due to the masking I talked about above since NeoTrace and programs like it usually ping nodes which are usally masked by the ISP but once the dynamic IP has been registered for sometime there are tools available to anyone to be able to get peoples addresses from the IP.

With that being said I always advise to use your gut when dealing with stuff like this and take what everyone says (including me but mostly the others with a false sense of security) with a grain of salt because a ton of people have no clue wtf they are talking about.

Just a little fyi btw… I have been hacked by a hacker/server owner on FiveM. Well not me but my wife. She joined a server and became an admin and the server owner had some issue with her concerns and decided to do some shyt. He locked her pc, stole her discord account, email addresses and shyt like that (no it wasn’t a virus). I got home from work, connected my viavi meter as a modem and was able to track what he had done and reverse it as well so yeah you guys have a false sense of security.

I’m sure it’s possible to do a lot of what you just described. The point I was trying to get at is that it’s unlikely your average kid/server owner will have the knowledge and dedication to do such things.

What I meant by P2P is the peer-to-peer network model. Unless FiveM devs have done some weird trickery - then it should be just like GTA:O’s, where you don’t have to be a “server owner” to get another player’s IP. You just use the same method people on consoles use to gain the IP - packet sniffing.

I guess VPNs are gaining more use by the day. You should be a VPN salesman lol.

Well VPNs have their use but the added latency really sucks when it comes to gaming. You can usually achive a small portion of what a VPN offers by using a good DNS server that is fast and meant to help with privacy but that technology isn’t up to par yet and barely useful. Also as with any p2p connection your IP is exposed unless the network you are going through sets up a mask or proxy to take the place of users IP addesses. FiveM does not do this as they don’t really hosts the servers. With GTA-O and FiveM it isn’t really packet sniffing that gets users IP addresses. It’s usually a mod menu that uses the GetPlayerIP native or whatever it is or in the code or FiveM the server admins can see and even log IP addresses. R* uses this mainly to catch repeated offenders that cheat to ban the IP address from what I understand so the user can’t just get on other account so easily. Although with a dynamic IP it isn’t perminant thing. I think they rarely use it.

Also I would agree that the majority of users, devs and server owners won’t know how to do most of the stuff I mentioned but you never know what knowledge someone has. Sometimes it’s better to be safe than sorry and if someone is leaking your IP address you can’t really stop then but if you report it to authorities you have a chance that if something does happen, you can have the headstart. Leaking an IP isn’t exactly illegal but if you fear that someone intends to be malicious with it you should try to protect yourself. Using an IP in any malicious way is illegal and subject to a minimum of 10 years in Federal Prison. That’s also why I said it’s unlikely anyone will actually do anything if they did have the knowledge.

Edit: had to edit the part about the mod menu. Fixed a typo and added a line. Started with typo correction “code or FiveM the server admins can see and even log IP addresses.”