1.

Solve : i need some ip address help please?

Answer»

hi im new here so not sure if im in the right section sorry if im not ...basically what im wondering is  if someone SENDS me an email from Ireland ( I am also in Ireland ) is it possible for it to have an american ip address ? I have a friend from new York who is coming to visit me in Ireland they were supposed to be here yesterday and we were gonna arrange to meet . They emailed yesterday saying they are here in Ireland but can't meet till next week . I was sceptical because they have CHANGED travel plans a couple of times now so I checked the ip of their email and it's new York !! Could this be possible if they actually are in Ireland ?I don't think the person is very good with computers or USING a proxy as some people have suggested or a vpn  I doubt to be honest they even know wat an ip is so basically I'm wondering is it possible and if so how likely . It's a hotmail account .. When I email from my hotmail account the ip is Ireland do why would there's be any different if they actually are in Ireland
.theres two ip's on the header for the email one is xoriginating xp which is from microsoft which im assuming is the servers ip and the other ip is new york syracuse where the persons from so does this just mean that cause their account was set up in the states it will always have an american ip or should there ip now be in ireland if the email was sent from here??my understanding was that the ip would be from the wifi or 3g provider they are using i.e now it would be an irish company therefore and irish ip ? or am i completely wrong on that i really need to know for sure before i accuse this person of lying to me
It depends on where you're reading this ip from. I think that the ip you are reading is where the mail server is. If that is the case, then it would say new york no matter where your friend is.thanks for the reply ..im getting the ip from the email header ,it gives two ips one says its microsoft corporation ,the other is based in new york ...each time they'v emailed me since they'v ''been in ireland '' its the same ip based in syaracuse but previous emails iv gotten from them have the same microsoft corp ip PLUS diferent ips all based in and around syracuse new york ..i just thought that if they were in ireland using irish wifi or 3g then the second ip wouldnt be new york it would now be an irish ip ...thanks anyway If you could cut and paste all email headers here, removing all email addresses, that would be helpful.  The routing headers usually take the form of a series of entries like this:

Received: from mail.sendingserver.com ([www.xxx.yyy.zzz]:abcde)   by
 smtp.nextserver with esmtp (NBT 4.72 2)   id gi-BB-er-ish   for
 [email protected]; Tue, 25 Oct 2011 08:17:04 +0100

There will be several headers of that nature.  The last header that looks like that will usually (but not always) contain details of the location of the originating server.  Bear in mind however that if I work in the UK but my corporate mail server is in America, the originating IP may appear to be American. 


here is the email header in full as requested hopefully  you can make more sense of it than i can this is a reply from their hotmail account sent to my yahoo account if that matters

From ................ Sun Oct 23 23:36:08 2011
X-Apparently-To: ................ via 87.248.110.155; Sun, 23 Oct 2011 23:39:52 +0000
Return-Path: <[email protected]>
Received-SPF: pass (domain of hotmail.com designates 65.54.190.149 as permitted sender)
 bSBvbiBmdWNraW5nIHZhY2F0aW9uIHdpdGggbXk gZnJpZW5kcyBub3Qgc2l0
 dGluZyBieSBhIGNvbXB1dGVyIHNvIHNvcnJ5IEk gZGlkbid0IHByb21wdGx5
 IHJlcGx5LCB3ZSB3ZXJlIG91dCEgATABAQEB
X-YMailISG: 73mTmuUWLDud4RylSqyNt7t0oxKDS10PnTU2uK. TzR12gQoW
 FxileAI3DqBHbIh8OgZXwP8I2bwnqc7ih9Nxcd7 kglq6oAVJTnFTmauC3va_
 I4TLEYLNR3RU1_9QarT3gC8t6VQVAMJqXyevdqK PBbI0HVfvZJ5PnehHJjNU
 ZRWBcrb3OrhIxR7pujwgs3p1O72RIqAnb_xJteL rh4MtKEYzsczfRANj0aIy
 1f2sIzI0iAimUpPzmwIXPrcyQ8nqZf7Ly8PZEg7 EVlKHGr17pe8_P4799TLc
 Ui5gDAXPVtCbPe5YckekndyI9QSqFuddsLUWr2W W2gap18aH2tkmPy.lvYuz
 ZJMWEYUMxgfUUgWACO_hixeOgSW3pjnw.dzghW3 Ne6Ce3ONucA2iBYWF_6uN
 .VaLjty1Wl4XOK6fpaWmaqSD2b69djiQpnEi5ig 0Q7QTPX0ydAsHeJI6VNMo
 7zPR99IKUAaIGKYPxltuYpQcJffl9raZXeRkWpv DRCSmu4h7uhm_M7P.E2Jp
 CCCXeAvmzsUATuouXNlmkGJJf8YxAVl_ZRfOBwZ .5RA8MYTketoFe3E.w2Vh
 E6.OwDeqUEwFkoywuAsh2261vvw_9jZ2N3B_udm JMUBQtEWZNWk4QColqBiX
 fmZuupkHkHU5oF1qq.kFYRm3u4N1cMVW9K8.N_D W8zLrHxsit81ToIQctguO
 9c8uCaxJI51iuZb_rkfGq4e6X7QVEd2PO9Uk6zm 6r1lhUDzlSFqGBjqSJ9t_
 ha_bn5TcmrWJds2JTGWPsVtLoH2F43tAqpx.lOY a.OkqJylpLg9I2ryahWb_
 oyOfJ3YJhBR_oVTPX9izAIbcFEVgQc9HNTvxrSm V_JwmEpsDvVV_E3p4CnN4
 gqAuEFxGdacJctj8qXUCfSFzdG1IIpDDKShmA0C vxxlZTebKSxuxLamWUmbR
 uBKnHTqsPtd6wE9xslzIzHsKV_UYyf4ciyidqek xeP7inB3UKUgXaL1Tj_RG
 cPjjZGrHwyHrx6n053H8TEd402N.r2ThUjx2v0Y n4mTR.gyFLbM8NQWgYqE_
 Qks4Or6_bDrR547FMbioaWT6e3ovI0CFa35dZEn 4GFuUmpIw9jJUr9XqydC6
 6mUdOImC
X-Originating-IP: [65.54.190.149]
Authentication-Results: mta1037.mail.ukl.yahoo.com  from=hotmail.com; domainkeys=neutral (no sig);  from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1  (EHLO bay0-omc3-s11.bay0.hotmail.com) (65.54.190.149)
  by mta1037.mail.ukl.yahoo.com with SMTP; Sun, 23 Oct 2011 23:39:52 +0000
Received: from BAY145-W53 ([65.54.190.189]) by bay0-omc3-s11.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
    Sun, 23 Oct 2011 16:36:07 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
   boundary="_fbc95b36-f62a-40cd-84ff-a2f67c7988f2_"
X-Originating-IP: [24.59.44.211]
From:
To:
Subject: RE:
Date: Sun, 23 Oct 2011 19:36:08 -0400
Importance: Normal
In-Reply-To: <[email protected]>
References: <[email protected]>
MIME-Version: 1.0
X-OriginalArrivalTime: 23 Oct 2011 23:36:07.0799 (UTC) FILETIME=[89D23870:01CC91DC]
Content-Length: 4151
Okay the first listed email server is here:

Quote

Received: from BAY145-W53 ([65.54.190.189]) by bay0-omc3-s11.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
    Sun, 23 Oct 2011 16:36:07 -0700

That IP address belongs to Microsoft.

There's also a suggestion (not necessarily reliable) about the SENDING computer:

Quote
X-Originating-IP: [24.59.44.211]

Here's the WHOIS info for the owner of that IP address:

Quote
OrgName:        Road Runner HoldCo LLC
OrgId:          RRNY
Address:        13820 Sunrise Valley Drive
City:           Herndon
StateProv:      VA
PostalCode:     20171
Country:        US
RegDate:        2000-09-28
Updated:        2011-07-06
Comment:        Allocations for this OrgID serve Road Runner residential customers out of the New York City, NY and Syracuse, NY RDCs.
Ref:            http://whois.arin.net/rest/org/RRNY

This is where you're getting the suggestion that the sender is in New York, I suspect.  Whatever the case, firstly, that X-Originating-IP may not be supplying correct information, for reasons outside the control of the sender.  Secondly, if as I suggested earlier the sender is using a corporate email server, the originating IP address will in most cases be from wherever the in-house email server resides.  Your sender could be connecting via a webmail interface, VPN, Outlook Anywhere or any one of a number of different methods that would all result in the first-mentioned IP address being the corporate mail server.

Given that Hotmail is mentioned in the email headers, I would go with the webmail explanation and breathe easy.  i  really really need to get in contact with the original poster of this (tomgire) if possible ,can anyone help me ? there is no email listed in his account. Quote from: myth on December 31, 2011, 08:05:48 AM
i  really really need to get in contact with the original poster of this (tomgire) if possible ,can anyone help me ? there is no email listed in his account.

Send a PM (Personal Message). If they have email notification turned on, they will get an email telling them of your PM. After that it is their choice whether they read it, and after that, if they respond or not. Irrespective of the number of "reallys" you put before the word "need", that is likely to be the full extent of any help you will get here.
Quote from: Salmon Trout on December 31, 2011, 08:48:55 AM
If they have email notification turned on, they will get an email telling them of your PM.

In fact, if they have email notification turned on, they already know you posted here.



Discussion

No Comment Found