|
Answer» hi im new here so not sure if im in the right section sorry if im not ...basically what im wondering is if someone SENDS me an email from Ireland ( I am also in Ireland ) is it possible for it to have an american ip address ? I have a friend from new York who is coming to visit me in Ireland they were supposed to be here yesterday and we were gonna arrange to meet . They emailed yesterday saying they are here in Ireland but can't meet till next week . I was sceptical because they have CHANGED travel plans a couple of times now so I checked the ip of their email and it's new York !! Could this be possible if they actually are in Ireland ?I don't think the person is very good with computers or USING a proxy as some people have suggested or a vpn I doubt to be honest they even know wat an ip is so basically I'm wondering is it possible and if so how likely . It's a hotmail account .. When I email from my hotmail account the ip is Ireland do why would there's be any different if they actually are in Ireland .theres two ip's on the header for the email one is xoriginating xp which is from microsoft which im assuming is the servers ip and the other ip is new york syracuse where the persons from so does this just mean that cause their account was set up in the states it will always have an american ip or should there ip now be in ireland if the email was sent from here??my understanding was that the ip would be from the wifi or 3g provider they are using i.e now it would be an irish company therefore and irish ip ? or am i completely wrong on that i really need to know for sure before i accuse this person of lying to me It depends on where you're reading this ip from. I think that the ip you are reading is where the mail server is. If that is the case, then it would say new york no matter where your friend is.thanks for the reply ..im getting the ip from the email header ,it gives two ips one says its microsoft corporation ,the other is based in new york ...each time they'v emailed me since they'v ''been in ireland '' its the same ip based in syaracuse but previous emails iv gotten from them have the same microsoft corp ip PLUS diferent ips all based in and around syracuse new york ..i just thought that if they were in ireland using irish wifi or 3g then the second ip wouldnt be new york it would now be an irish ip ...thanks anyway If you could cut and paste all email headers here, removing all email addresses, that would be helpful. The routing headers usually take the form of a series of entries like this:
Received: from mail.sendingserver.com ([www.xxx.yyy.zzz]:abcde) by smtp.nextserver with esmtp (NBT 4.72 2) id gi-BB-er-ish for [email protected]; Tue, 25 Oct 2011 08:17:04 +0100
There will be several headers of that nature. The last header that looks like that will usually (but not always) contain details of the location of the originating server. Bear in mind however that if I work in the UK but my corporate mail server is in America, the originating IP may appear to be American.
here is the email header in full as requested hopefully you can make more sense of it than i can this is a reply from their hotmail account sent to my yahoo account if that matters
From ................ Sun Oct 23 23:36:08 2011 X-Apparently-To: ................ via 87.248.110.155; Sun, 23 Oct 2011 23:39:52 +0000 Return-Path: <[email protected]> Received-SPF: pass (domain of hotmail.com designates 65.54.190.149 as permitted sender) bSBvbiBmdWNraW5nIHZhY2F0aW9uIHdpdGggbXk gZnJpZW5kcyBub3Qgc2l0 dGluZyBieSBhIGNvbXB1dGVyIHNvIHNvcnJ5IEk gZGlkbid0IHByb21wdGx5 IHJlcGx5LCB3ZSB3ZXJlIG91dCEgATABAQEB X-YMailISG: 73mTmuUWLDud4RylSqyNt7t0oxKDS10PnTU2uK. TzR12gQoW FxileAI3DqBHbIh8OgZXwP8I2bwnqc7ih9Nxcd7 kglq6oAVJTnFTmauC3va_ I4TLEYLNR3RU1_9QarT3gC8t6VQVAMJqXyevdqK PBbI0HVfvZJ5PnehHJjNU ZRWBcrb3OrhIxR7pujwgs3p1O72RIqAnb_xJteL rh4MtKEYzsczfRANj0aIy 1f2sIzI0iAimUpPzmwIXPrcyQ8nqZf7Ly8PZEg7 EVlKHGr17pe8_P4799TLc Ui5gDAXPVtCbPe5YckekndyI9QSqFuddsLUWr2W W2gap18aH2tkmPy.lvYuz ZJMWEYUMxgfUUgWACO_hixeOgSW3pjnw.dzghW3 Ne6Ce3ONucA2iBYWF_6uN .VaLjty1Wl4XOK6fpaWmaqSD2b69djiQpnEi5ig 0Q7QTPX0ydAsHeJI6VNMo 7zPR99IKUAaIGKYPxltuYpQcJffl9raZXeRkWpv DRCSmu4h7uhm_M7P.E2Jp CCCXeAvmzsUATuouXNlmkGJJf8YxAVl_ZRfOBwZ .5RA8MYTketoFe3E.w2Vh E6.OwDeqUEwFkoywuAsh2261vvw_9jZ2N3B_udm JMUBQtEWZNWk4QColqBiX fmZuupkHkHU5oF1qq.kFYRm3u4N1cMVW9K8.N_D W8zLrHxsit81ToIQctguO 9c8uCaxJI51iuZb_rkfGq4e6X7QVEd2PO9Uk6zm 6r1lhUDzlSFqGBjqSJ9t_ ha_bn5TcmrWJds2JTGWPsVtLoH2F43tAqpx.lOY a.OkqJylpLg9I2ryahWb_ oyOfJ3YJhBR_oVTPX9izAIbcFEVgQc9HNTvxrSm V_JwmEpsDvVV_E3p4CnN4 gqAuEFxGdacJctj8qXUCfSFzdG1IIpDDKShmA0C vxxlZTebKSxuxLamWUmbR uBKnHTqsPtd6wE9xslzIzHsKV_UYyf4ciyidqek xeP7inB3UKUgXaL1Tj_RG cPjjZGrHwyHrx6n053H8TEd402N.r2ThUjx2v0Y n4mTR.gyFLbM8NQWgYqE_ Qks4Or6_bDrR547FMbioaWT6e3ovI0CFa35dZEn 4GFuUmpIw9jJUr9XqydC6 6mUdOImC X-Originating-IP: [65.54.190.149] Authentication-Results: mta1037.mail.ukl.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig) Received: from 127.0.0.1 (EHLO bay0-omc3-s11.bay0.hotmail.com) (65.54.190.149) by mta1037.mail.ukl.yahoo.com with SMTP; Sun, 23 Oct 2011 23:39:52 +0000 Received: from BAY145-W53 ([65.54.190.189]) by bay0-omc3-s11.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Sun, 23 Oct 2011 16:36:07 -0700 Message-ID: <[email protected]> Return-Path: [email protected] Content-Type: multipart/alternative; boundary="_fbc95b36-f62a-40cd-84ff-a2f67c7988f2_" X-Originating-IP: [24.59.44.211] From: To: Subject: RE: Date: Sun, 23 Oct 2011 19:36:08 -0400 Importance: Normal In-Reply-To: <[email protected]> References: <[email protected]> MIME-Version: 1.0 X-OriginalArrivalTime: 23 Oct 2011 23:36:07.0799 (UTC) FILETIME=[89D23870:01CC91DC] Content-Length: 4151 Okay the first listed email server is here:
Quote Received: from BAY145-W53 ([65.54.190.189]) by bay0-omc3-s11.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Sun, 23 Oct 2011 16:36:07 -0700
That IP address belongs to Microsoft.
There's also a suggestion (not necessarily reliable) about the SENDING computer:
QuoteX-Originating-IP: [24.59.44.211]
Here's the WHOIS info for the owner of that IP address:
QuoteOrgName: Road Runner HoldCo LLC OrgId: RRNY Address: 13820 Sunrise Valley Drive City: Herndon StateProv: VA PostalCode: 20171 Country: US RegDate: 2000-09-28 Updated: 2011-07-06 Comment: Allocations for this OrgID serve Road Runner residential customers out of the New York City, NY and Syracuse, NY RDCs. Ref: http://whois.arin.net/rest/org/RRNY
This is where you're getting the suggestion that the sender is in New York, I suspect. Whatever the case, firstly, that X-Originating-IP may not be supplying correct information, for reasons outside the control of the sender. Secondly, if as I suggested earlier the sender is using a corporate email server, the originating IP address will in most cases be from wherever the in-house email server resides. Your sender could be connecting via a webmail interface, VPN, Outlook Anywhere or any one of a number of different methods that would all result in the first-mentioned IP address being the corporate mail server.
Given that Hotmail is mentioned in the email headers, I would go with the webmail explanation and breathe easy. i really really need to get in contact with the original poster of this (tomgire) if possible ,can anyone help me ? there is no email listed in his account.
Quote from: myth on December 31, 2011, 08:05:48 AMi really really need to get in contact with the original poster of this (tomgire) if possible ,can anyone help me ? there is no email listed in his account.
Send a PM (Personal Message). If they have email notification turned on, they will get an email telling them of your PM. After that it is their choice whether they read it, and after that, if they respond or not. Irrespective of the number of "reallys" you put before the word "need", that is likely to be the full extent of any help you will get here.
Quote from: Salmon Trout on December 31, 2011, 08:48:55 AMIf they have email notification turned on, they will get an email telling them of your PM.
In fact, if they have email notification turned on, they already know you posted here.
|