Security Basics mailing list archives

Re: is it possible to find geographical place of email sender from email headers


From: "Shreyas Zare" <shreyas () technitium com>
Date: Sun, 2 Mar 2008 01:54:01 +0530

Hi,

As I said earlier,since Gmail does not include IP of the sender in the
headers, you cannot find it. This is Gmails policy not to include IP.
If you want to verify, just mail from Gmail to some other account and
check for headers with your IP. You can also try to find my IP address
in this mail's header and since I am using Google Apps service you
wont find it. Only you have is Message-ID that you can use to get
details from Google(if they want to tell you).

Secondly, most ISPs (depends upon the country they are in) wont reveal
their customers IP details for privacy reasons without any court
order/warrant for investigation and if they disclose, the customer can
sue them.

Regards,

On 3/2/08, tommy <thedarksniper () gmail com> wrote:
hi
 yes it is possable, but you need a more detailed header that has a
 scource ip address, then you would gearch google for a whois database
 and search for the ip in the whois, it will tell you where the isp is
 located, they can assist you in getting a better idea of an exact
 location, maybe even a home address if they are nice.
 i had to do this yesterday to a kid who thought he could scare me, i
 found out that he is in my vocational school IT class and i know exactly
 who it is.

 good luck
 -tommy
 "you do not learn to hack, you hack to learn"

 Shreyas Zare wrote:
 > Hi,
 >
 > Since the sender sent the mail using Gmail service, you cant find out
 > his IP address. So you cant find out his location. The only way to do
 > is to contact Google and get details, which is very difficult.
 >
 > Regards,
 >
 > On 3/1/08, aliasghar.toraby () gmail com <aliasghar.toraby () gmail com> wrote:
 >
 >> hi friends. is it possible to find geographical place of email sender
 >>  from email headers? if it is possible please guide me. following lines
 >>  are the headers of email that some body sent to me. and i want to know
 >>  who is it? and this email sent to me is related to which country!
 >>  *********************************************************************
 >>  From: tavallode.andeishe225 () gmail com
 >>  Date: 11:25 AM
 >>  X-Account-Key: account2
 >>  X-UIDL: GmailId11869563bc21cc9d
 >>  X-Mozilla-Status: 0001
 >>  X-Mozilla-Status2: 10000000
 >>  Dekiverd-To: aliasghar.toraby () gmail com
 >>  Received: by 10.70.60.19 with SMTP id i19cs200180wxa;        Fri, 29 Feb
 >>  2008 23:55:04 -0800 (PST)
 >>  Received: by 10.100.92.9 with SMTP id
 >>  p9mr13404088anb.12.1204358101557;        Fri, 29 Feb 2008 23:55:01 -0800
 >>  (PST)
 >>  Received: by 10.100.120.12 with HTTP; Fri, 29 Feb 2008 23:55:01 -0800 (PST)
 >>  Message-ID: <a42711b0802292355o5baf9a37k34dbe8560560e1c0 () mail gmail com>
 >>  MIME-Version: 1.0
 >>  Control-Tyoe: multipart/mixed;
 >>   boundary="----=_Part_2228_7917228.1204358101511"
 >>  *********************************************************************
 >>  thanks for any help
 >>
 >>
 >
 >
 >
 >





-- 
("Computers are useless. They can only give you answers." - Pablo Picasso)

Shreyas Zare
Co-Founder, Technitium
eMail: shreyas () technitium com

..::< The Technitium Team >::..
Visit us at www.technitium.com
Contact us at theteam () technitium com

Technitium Personal Computers
We believe in quality.
Visit http://pc.technitium.com for details.


Current thread: