Grabify — send a shortened link, watch the IP land on your dashboard. Dead simple, works on 90% of people.
IPLogger — same idea, plus geo, ISP, and device. Use a masked link.
Email headers — send a mail, open the raw source, read the Received: chain. Reveals origin IP.
Discord / Steam resolvers — paste their ID into a resolver bot, get the IP behind the account.
WebRTC leak — load a WebRTC test page, have them visit it, it dumps the real IP even behind a VPN on some browsers.
P2P apps — a torrent client, or a game lobby with them in it. Sniff with Wireshark.
Voice call / VOIP — some VoIP clients leak the peer IP in the packet headers.
Images — host an image on your server, send it. Every load logs their IP in your access logs.
Custom shorteners with webhooks — roll your own, pipe hits to a Discord webhook in real time.
Social engineering — "check out my portfolio site" → click → logged. The human is the weakest link.
Notes:
A VPN hides the IP but leaks at the browser level are common — WebRTC and DNS are the usual holes.
Mobile IPs are carrier-grade NAT — you'll get the carrier's IP, not the person's. Still useful for geo.
Always grab the IP + timestamp together so it holds up if you need to argue.
JOIN FOR MORE →
𝙐𝙢𝙗𝙧𝙖𝙓𝙩𝙧𝙖
CONTACT FOR FREE STUFF & MENTORSHIPS →
𝐔𝐦𝐛𝐫𝐚𝐗𝐭𝐫𝐚