How To Find IP Address Thru Email
I should be posting this article last week but I forgot it. This is in relation to my post dated March 4, 2001. I only want to find out where did that scam mail originated. Through the help of some services online, I was able to locate the country where that scam email originated.
Below are the site URLs on how to find the IP address and location through email address. Thanks to these services below
http://www.ipaddresslocation.org/ip-address-locator.php
http://www.everify.com/results/email/?email=ee—–ww1%40att.net&Search=Search
IP ADDRESS RESULT OF EMAIL ADD ee—–ww1@att.net
http://www.ip-adress.com/trace_email/?aw=1&gclid=CNWAprf_tacCFci-zAod01uc_g
IP add: 81.91.228.78
Email sender ee—–ww1@att.net
RESULT OF THE LOCATION OF THIS EMAIL ADD
This Email was sent at Thu, 3 Mar 2011 23:30:41 -0800 (PST)
from IP address 81.91.228.78
IP Location: Benin.
IP address: 81.91.228.78
IP country: Benin
IP Address state:
IP Address city:
IP latitude: 9.5000
IP longitude: 2.2500
ISP: Office des Poste et Telecommunications (OPT)
Organization: Office des Postes et Telecommunications (OPT)
FULL HEADER OF THE SCAM MAIL:
From Walter Egobia Fri Mar 4 07:30:41 2011
X-Apparently-To: euroangel08@yahoo.de via 87.248.110.184; Fri, 04 Mar 2011 07:30:42 +0000
Return-Path:
X-YahooFilteredBulk: 98.138.90.250
Received-SPF: none (mta1018.mail.ukl.yahoo.com: domain of ee—–ww1@att.net does not designate permitted sender hosts)
X-YMailISG: J6J6KjwcZApiW5wY9ogqDYOkE0E6cJq10YxFu_EKNi4PSIGl
bm5K6.TCxuPQJnhvJyCYoll3PVELS3VmXqDuROMYPuMyrH4pgJWOBxTsFgSA
DyiqyaGG91kbgyg_Ss84U_8ZGuKz39WMY2QHAUt1wjYnkv0iMy4sIuvVvA6N
sIrvcYN1EiW3jDMPiIhkPE_QF6_ktPopCfPeHCK8Z3.Ejpnz5NcwC5R7074O
IB85x7OW3xyxUDOv5NHCV_Lf4Pqs_ZILv.qePMhwat.qhbi6X0V_N5EhYEoI
NaFWnekhPAAi_2uaa.sHPikF4F09fvq115roOPPmgHYGFYszIw36xKx_3teu
usElMaQyx9i6rbFEjO3qLJDPO2FK6MvzT.h7yMvxcweGa5XU60yFmQNU7skL
j5G6CVbDe_aei61qOp6f.qV06ChS1F0sYDiZ.2fsTvQiUccxHeUNYj3I1RzY
3xUS2tYwVlXcbus759YhBWtbC9XfDGHXOxRwdGzd6veeU8Bbr1lmsV8mt2bM
sScJbV5a01uJOIiGQUJ0ovLGYqIMN2XJ2kMXxKQI9UkCXLfFSek75EsAuxEC
DDdzjp0VtK1cIVzwgfiJ8eVd59RD.m8DJ7p9OqOStDJhpBgvSw.JQjR3C33L
YOc2Octh6ke9BpbUtrq.I5JVaGO4R4u895fDtypEEg9ErbZNnPhTP7UOUCU_
2mPhDwWH4aGvc7Mmsg9XhL9RlqQbX_B8I5OuidrJok9mJr_JM3O2sPzNzn4E
0IAPEnYVtf9jDVRQtWk3tOD.b_atRzZEDOydbyL1hBEzrOSvrxz8rKyycJSA
WldwCWzc_SgVmxzx0.7o3Mife1BU.WXEJZMfsA5kuk7ExEa3fk0VzvG85e18
Xy1XEwwo8_GNDrBZiOAiw73S1gjegnz41sIaVK.S3UTBGPe_liQQCF8cCmsb
VC9hXw9fxpG4yR9rpA0nstDgLDyylBD9_m3kjHi8iFlpyCKZuhgC6pGb4N.6
k_xFlK0CXjce1ToV_sbLb9eIoo884rLI2.HeouImdeibYMRkgL1PxxfsnFWj
0mPGcEMNppFa3.IquitsJD_tssRZxkm3Q9iISeeZ.J3YEmhqrtqX0p1uVgg9
YE8Q6ibd.uLeAs1XWQkjHdy5IizO7Yh0nk5aqLcBjcluaoRKuVVTH.xvBfVr
jPeqheO7DaeXYgUABYHnjLzLEJh830mdjB68KCVsHZMs1JeexEDbPwr8.4ZB
rW7Bf1N99obFkQ8SNh90AS2.GofVSIpLqlWLWMT0pCP6M9OMx4qp1uWxIIBb
vd3128vrhww_er7mu7vHNWjqvJnMzcUdpBw.rXECEcMAzIddBo3iDbPopISu
AApXJQ6KlAXn2.kZ6BzxG.LYFxCHQEj2WL1Wn4Iz0mSF8w–
X-Originating-IP: [98.138.90.250]
Authentication-Results: mta1018.mail.ukl.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm7-vm1.bullet.mail.ne1.yahoo.com) (98.138.90.250)
by mta1018.mail.ukl.yahoo.com with SMTP; Fri, 04 Mar 2011 07:30:42 +0000
Received: from [98.138.90.51] by nm7.bullet.mail.ne1.yahoo.com with NNFMP; 04 Mar 2011 07:30:41 -0000
Received: from [98.138.89.169] by tm4.bullet.mail.ne1.yahoo.com with NNFMP; 04 Mar 2011 07:30:41 -0000
Received: from [127.0.0.1] by omp1025.mail.ne1.yahoo.com with NNFMP; 04 Mar 2011 07:30:41 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 638334.6039.bm@omp1025.mail.ne1.yahoo.com
Received: (qmail 9393 invoked by uid 60001); 4 Mar 2011 07:30:41 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1299223841; bh=fX1VUW+0eOd5rlELKXpi/o5Qdlc0/Hyvcd/uKEY5Kt0=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=yGbSX9/1rB8NwDgrw4vUUodT13Of5yLieitB9hmn2/eVtpst/+YxNrs2AvyhC2gvc3PD8WlAChfErO2sqIpgibJh2UAKYE8ND0tXqO5Hda7yn2B3Vfa7tQXozYAvfo1BlckCP5Ow1p05JhKwqfHYEkFB+PUdshurV4lct+Awcbg=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=3FG77VnMZYqF9HJgjReqMF9NsUGun9l+MMW3Ph/RF1pW1GTIBrImQtUiAJFXoGdrGYHwHX2kfijO8mJDKGRtqmGfax/OHboCn7WPJo4cpcDA2Fhy1aII8xWtp9OzdWIAfJnJrOKnphzJfU9P6BIe3+2RhuuySwv1VGHrCg6dGqk=;
Message-ID: <248448.98584.qm@web181406.mail.ne1.yahoo.com>
X-YMail-OSG: CeXOjQUVM1mWnsEOP6xnmTkbxxstpaydvDn9tksLb5HZOzg
kOY_twn.HGvwbsbqVu3YDvidROU2e8xyMACJWK2sDn07ENqD1L3xzMfCvweo
0BMEsfiztpbkYZyv_6ZqNZtCu5CzJs7lusak8D9qaOJUSOgVWYw0kUKQMkq2
3KYFYjpQzuzoBzjzWn8GsUy2sJbyCKJ_5Ag24fsQak8pOTthYw79mmVnUus6
FV1Y40u3Y5QV3Vs2fdVfgOMsHrn2Y1A.rfWUbrtR8WeOgYr93kttMBcjNqE4
kq1Zhx.Uha80IB4XjvUN.IxTxgrUlJ3oEtpktvvseQ3ZDVYq0OXD0zKhz97K
.hUrzYPiETq_F9LDpxwsDmsgI_EfUh3nmgx82YU7RcGuYBdGYi.vtrUvlPSJ
YKy2wF1eFpMwrtua7gNxvGpLlMedBJmlFlYFc_Y11VffY46_Mz9oqvMcywV4
xsMHQAQNOmU54b6C.NM8O7P4k5_aB1sXfmwo2kXfsew3ov2wNAQzzDhXU6xn
a0h9pF_iSF4rZsldijZ3frwTNUe92wT2MZ04HqC4sQHMRcSsbXhMu4mZqFX5
zrysSYIZjH1SSl3JrzGnZtJx8A7nU6_Z6tmGXEfah2rJQT4Cpv2sSc34u9E1
bXItuM8gOwwvJF1pNa5XqEFQGotG4IfQyCssQYMkPDNdl4dSREeOUIE974Xs
ZOlaPFisrhIb6FlXLL0KivRGNly1EdnJwdMHRg1dC17NVMafWwFbj8baNeCW
D.hm4CQ.VEaSv88Cn2kuaGHWVhg.IZOLky_WWn_mjY.Fx8CyeVtknf4H8daW
xxyAPBvYk13Z96.QieNqFJ1T3KFaSXGLzLX4.w6p3Js8y7syHfLrul1YnUDI
NsVnmToLkxHVvCS.3ZrO26bBJHgILvyNXQj6vU.NRfqCb
Received: from [81.91.228.78] by web181406.mail.ne1.yahoo.com via HTTP; Thu, 03 Mar 2011 23:30:41 PST
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.292656
Date: Thu, 3 Mar 2011 23:30:41 -0800 (PST)
From: Walter Egobia
Reply-To: mr.wa00@yahoo.fr
Subject: Dear Trusted Friend.
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”0-1810697044-1299223841=:98584″
Content-Length: 3330
THIS POST IS STILL NOT OVER: I STILL FOUND SOME INFORMATION ABOUT THE IP ADDRESS OF THIS EMAIL ADD:
This is quite confusing. More updates soon!