0

As I know facebook chat is working like user <> server <> user and it's not P2P. I was talking with some guys today and they were pretty sure it's possible to netstat a facebook user IP address. I'm not familiar how FB chat works, but I highly doubt they're using P2P in their chat. So my question is it possible to netstat a facebook IP, or any way to find his IP without sending a link or using any phishing tools?

Most of the articles in the google results, says this is actually possible: here.

  • As others have said it doesn't seem that chat is P2P. But Facebook does support video chat (although I've never used it), it's possible that it could be P2P. – Dracs Dec 6 '13 at 4:32
6

Facebook chat is running on XMPP protocol. It is decentralised, but not P2P. It is similar to email - there is no central server, but lots of domain servers talking to each other and taking care of their clients. I doubt that it would be possible to get IP address from XMPP.

10

Directly, no.

Indirectly, it's possible. One way:

  1. Have a web server, whose access log you control, up and running.
  2. Send your chat partner a unique hyperlink pointing to that web server, have them click the link. For example: http://yourdomain.com/JohnDoe.html (the web page does not have to exist, throwing a 404 is fine).
  3. Check your web server's access log to get the IP address of requests to /JohnDoe.html.
  4. You have your conversation partner's IP address.
  • A dirty trick always valid. But this is a kamikaze... you also disclose your identity at that website owner – Brethlosze Oct 12 '18 at 12:05
7

Facebook's chat platform utilises the XMPP protocol, which does not disclose the IP address of the client.

You are correct in saying that Facebook does not use P2P in their chat. As far as I know, it is not possible to get a facebook IP via web chat of a contact without using social engineering.

It may be worth checking whether IP addresses are disclosed when using Facebook's custom chat client, however, it is unlikely that client IP addresses are ever disclosed.

protected by Community Dec 15 '14 at 20:43

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.