How can I trace where email came from?

Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.

I received mails with the same mail address,always yahoo, in the return-path,From, and Reply-to, but it doesn't exist.I checked the IP 200.69.231.41 but only said iplannetworks.net. How can I identify the real sender? Thanks.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

You can't. You've gotten as much information as someone can without involving
law enforcement.

Leo
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (MingW32)

iD8DBQFGOqK3CMEe9B/8oqERAl52AJ4qNGQ8oFKO2pZm/eXXFQKnheCfWACfYziR
oilOanMKMC23C4zhUQ45ozc=
=E6pM
-----END PGP SIGNATURE-----

I have two different emails, from two different accounts of whom I believe to be the same person.
Is there a way to determine if they are indeed the same person harrassing me?

[email headers including someone else's email address removed.]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

No. Not without contacting the ISPs used to send each mail, and even then
you'll probably need a court order in order to get them to listen to you.

Leo
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (MingW32)

iD8DBQFGUxRjCMEe9B/8oqERArN6AJ9O6S5Lkn0wfQnra85FWafUT3XY/ACdHkL4
9Reve1Ip2N6LEVKyeG58gMc=
=khZV
-----END PGP SIGNATURE-----

How can i find out who sent me this message as the i need to know if its legal or not. I need to contact the person who sent the mail - can you help..

Return-path:
Envelope-to: dianelouw@iburst.co.za
Delivery-date: Thu, 12 Jul 2007 10:11:16 +0200
Received: from veronique.gransy.com ([87.236.199.200])
by mail-01.jhb.wbs.co.za with esmtp (Exim 4.63)
(envelope-from )
id 1I8tlV-0002XU-3q
for dianelouw@iburst.co.za; Thu, 12 Jul 2007 10:11:15 +0200
Received: by veronique.gransy.com (Postfix, from userid 33)
id 0FB72C51F; Thu, 12 Jul 2007 10:10:06 +0200 (CEST)

I am trying to trace the original message sender below the AOL source. Here is the original info: How can I trace the gmail IP?

Received: by 10.143.163.4 with HTTP; Thu, 2 Aug 2007 08:55:34 -0700 (PDT)
Message-ID:
Date: Thu, 2 Aug 2007 11:55:34 -0400
From: "Tim Duffy"
To: "Gregg Parratto"
Subject: Fwd: [Hamilton] Fwd: Talk is cheap, campaign promises cheaper. -- Please forward to all share holders
In-Reply-To:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_65885_13716383.1186070134038"
References:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

You cannot.

Leo

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFGtRQICMEe9B/8oqERAm3gAJ0U2xkPrrPydh1cwbvv6g6A6C1a8ACghQdB
IytYInCg1iGLCby2dW1dDMk=
=D07N
-----END PGP SIGNATURE-----

is it possible to get a physical address from where an email came from?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

No.

Leo

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFGwHzsCMEe9B/8oqERApSqAJ9igmkQJzbuoZWkEAV2wlakyzpllQCgi+IQ
Za+fPUVLEaZvKYHLjXrPKUw=
=aAho
-----END PGP SIGNATURE-----

Hi. have managed to find an ip address from an email im curious about. have determined the geo location and did a reverse dns (?) lookup , so it hink i have the host server (?) can you track something further ? i.e- right back to the physical location of the computer ? (sorry, may seem like an idiotic question but im a relative newbie . am extremely interested though and advice on any good reading material would also be appreciated. thanks irrespective.

To post a comment on "How can I trace where email came from?", please return to that article's main page.