Please help is this guy really overseas in Syria?

Post your questions about IP address geolocation here.
Locked
Sue
New Member
Posts: 2
Joined: Fri Sep 06, 2013 6:44 pm

Please help is this guy really overseas in Syria?

Post by Sue » Fri Sep 06, 2013 6:59 pm

Can you please help I have been speaking to this guy online he says he is soldier deployed overseas. I have recently found out that the pictures he sends me belong to a soldier that has different first name but same last name. Now he just replies to emails I send him is there any way to find out where he is?

From him Wed May 8 07:03:25 2013
X-Apparently-To: me@yahoo.com via 98.138.226.96; Wed, 08 May 2013 07:03:26 -0700
Return-Path: <fromhim@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
b3BlIHlvdSBhcmUgZ29vZCBiZWluZyBwcmV0dHkgYnVzeSB3aXRoIGxvdHMg
b2Ygd29yayBvbiBteSBoYW5kIHRvIGFjY29tcGxpc2ggTWlzc2VkIHRhbGtp
bmcgdG8geW91LEkga25vdyB0aGF0IHdlIGFyZSAyMDAwIG1pbGVzIGF3YXkg
ZnJvbSBlYWNoIG90aGVyLCBidXQgdGhlIGZlZWxpbmdzIGluIG15IGhlYXJ0
IGZvciB5b3Ugd2lsbCBuZXZlciBjaGFuZ2UsIGV2ZW4gaWYgeQEwAQEBAQN0
ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG: YN4QbIUWLDspevoyX6mTeo.OxxOhmTRw0_vuz.WrjyB0mR.m
6kuagboMxFuYAax83S0Oie6iDm23odLExqdx7esLkouLLiebahmJRjEOJUKp
1l6dDAjEF7y3fDArlQLoP339nmZa0JnxpX1FgjJsa4_afkMgYZdrF_jjW53.
7iS.t6S7sprPBrFRcfITP_lY2eZx3zeB.LXSACA.d.XR6rr.qYeirHeUJlVA
C8fiIgFgw711XEctwFokb0nL7YOPcJVSmbd3a04A.iSaN1ujhkUf2lfGrrOl
KRbTTCjZBEKLaFGHySd63pifcLMk8Vw8D3E.L5nQ9j7VnZ3SaULAY9I2MULC
Pq7.NrvZZpFlQbjHoFDsgxl6Sa.1JPgyOEz4FlEbaQ5WpD59.S__qyjnctv.
AWtB.PDTdK3vRgHhuqgKTj3s7J705kexMzuofgleIoGb0Nq8IlJ9HZYWe.nE
xO23QE2cs43g0x4FlY4kSVQmramtwl9mv8Eidg4Kj.DQq1J5p7GZzoPmhgrD
oAOhSKjwL0HhK.n8MJalwhi9QQtA7GlDlpkjccm3J8L12MGJ66eY5B0iQv3Y
kHSsfICVqXNzC2ASiO5Cr_V0_be3XlOHIFk5rDrMoJmZLe4mmQo9HlN.OxRz
0HNmWS54BXAWkcOniRQGQKktb6rxNsuimaVeJxUuKDdE9dXRHpG64owtVhxW
YVbpqeL3yBt8ZEI7QmUEStG.Wm.yPpSQ0uNsRR8V6q8_McCQPW_tstZ32zjy
QyVYqODtDiXaYSFppEQXJjyiIQAqorGQ1yV3UgNBNT4DDNKPieQqwb1MrlGb
uFxkWXm1ykGIByH7VOvu6dPOYadoAuOABxt7332cUOsiOs0cJwJe2SSjJG.8
oo5l_OIiMndXHqJ7f_79O8u7oDchjgMruVLT_t93jxEP0O8GCcJqXDpivk8N
u32xyNjqlkpvQ.aRzIGiMthrfyfjWFYtRcT.Ailyqlvi9_VtXf19vT2T7LUd
3mTgRVJhfYnYlx24Ojzt.dzAmVHpTJZ.lz8dG4qwXA5RPFy464uaKFt_h986
0PXxvsSVdWMZFgUttpczHqDNCrQB_F1bF4djwnS8AlO2J99rHZTOEFQOJRhh
Lo4kmhdutSTXoAT9PdO8NAPXai4Kf1o09sWs5UEZ0e0tqSYgIO5HUJ6MKzMy
Fqp7zXfRakRKb5HBZVkH7CGMZoSliWXqs5MEmLg3b9__1.aQgvFHnQDdyCo3
TtgDJNuvzMLqF4g5PmHqNSxU2zYVOfL9DRtqAnDeEKbGtD6gyk2FYFL6R1xy
3MT_dzhAm0GLrAkGtbC_w2c4QNt2ha4ZZ5I30FGzYNDmS8v0NNYJ1wJ4tfnx
SgKN1WHaYmnb3s.KaRQ.NG4-
X-Originating-IP: [98.139.213.129]
Authentication-Results: mta1199.mail.gq1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm4-vm0.bullet.mail.bf1.yahoo.com) (98.139.213.129)
by mta1199.mail.gq1.yahoo.com with SMTP; Wed, 08 May 2013 07:03:26 -0700
Received: from [98.139.215.141] by nm4.bullet.mail.bf1.yahoo.com with NNFMP; 08 May 2013 14:03:25 -0000
Received: from [98.139.212.213] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 08 May 2013 14:03:25 -0000
Received: from [127.0.0.1] by omp1022.mail.bf1.yahoo.com with NNFMP; 08 May 2013 14:03:25 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 423611.76943.bm@omp1022.mail.bf1.yahoo.com
Received: (qmail 47615 invoked by uid 60001); 8 May 2013 14:03:25 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1368021805; bh=UC4DDpCn+surRmpiRe7p5UDZgXPT/tCux3bZe3QJhxY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=JpzbA/1EB+U6+AW6FMBSXyevorRwXWMYRAT7xTvX8eDxyfEmGg5vpO72bx9QiuZzobApSaRQK4VSYvSpTzy/98zUhcw9M1l6rUZXMmbK6MD4lqWfF1zaYF+o0z4NeS7hOKi7mb4JiVYQTTYwkzIMdrkN7NfJii2jdNc8LT3zZzs=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=L5y8L2VO3srHqLybFp42UJPI/iOgyfiCIpKLDzAx9j0A8MLgLF2eJz/3nAjPao95lSOE31yNf6qAc+lcEVYK8VscZzH7SacdXHsV7Q5zF8Uwhp6isQmyUpPSQ12otxO5kIHCyD4tlfqStxgtQDjTvWgu5mAbLutIYDqkmqR80iI=;
X-YMail-OSG: BW6I05UVM1lLEBkYSTs2qm9O2W5USozicd_Nq3ikz04g9Kh
r5YG4mEFAXqxQ_XAC4jEdfCZoM3JpoSL6ZkwUQLd7V4Qda68kfN7hNyPWAWt
kh5P._gwCmZJZG3MMQkz0jW1mjb5zBdI2HBzJMusFUQtjXxjNtWGplMQsYKo
cKqARRBPE.MknEfFu3EiK0IDgGa3X7tIzhdqEtEh_AtaSmDEdAT0JBnnWzPH
S_Ksq05f0Rxzi2Tioqu8Pk7dXTViNIG0111x7IX.NQdK5_F7Vwt1NNCINY6B
Ia6aCrrWfy5BAQ9IV5uxFjcRwGgVL1fz2mz5VCa47IBs1k_HEZO5Im9H0RYP
_lSSM526AQfCwbtFlp0RlO1AxDW_7e80mbqudpNxzw7Xrl9UNL8GqPZv0oSo
hZbXPrMehVCFteZCFRTT_UUZik4GlZOCIELJd3YHVJnntnA52I3a0AyHdlIo
pI7eIYpN3c4TfceKW2gM-
Received: from [197.177.77.221] by web164903.mail.bf1.yahoo.com via HTTP; Wed, 08 May 2013 07:03:25 PDT
X-Mailer: YahooMailWebService/0.8.141.536
References: <1367960877.79497.YahooMailNeo@web125306.mail.ne1.yahoo.com>
Message-ID: <1368021805.44937.YahooMailNeo@web164903.mail.bf1.yahoo.com>
Date: Wed, 8 May 2013 07:03:25 -0700 (PDT)
From: fromhim@yahoo.com>
Reply-To: fromhim@yahoo.com>
Subject: Re: My Love <3
To: me@yahoo.com>
In-Reply-To: <1367960877.79497.YahooMailNeo@web125306.mail.ne1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="675359693-1732487409-1368021805=:44937"
Content-Length: 5733

User avatar
Chrispcritters
Forum Administrator
Posts: 2459
Joined: Tue Mar 02, 2010 5:41 pm
Location: 127.0.0.1 | ::1
Contact:

Re: Please help is this guy really overseas in Syria?

Post by Chrispcritters » Sat Sep 07, 2013 12:20 pm

No, the source IP address 197.177.77.221 is in Kenya. Sounds like a scam.
Founder & CEO of WhatIsMyIPAddress.com.
You can follow me on Twitter and Facebook for some behind the scenes info.

Sue
New Member
Posts: 2
Joined: Fri Sep 06, 2013 6:44 pm

Re: Please help is this guy really overseas in Syria?

Post by Sue » Sat Sep 07, 2013 1:16 pm

Thank you for your help
That’s what I thought, I have been looking at all the emails he sends and they are always different locations, I asked so I could make sure I was looking at the correct ip, I guess it’s a whole network of them, sometimes the emails come from the USA and sometimes its Kenya and sometimes it’s Egypt. When I confronted him on the different names he knew exactly what I was talking about he told me the real soldier’s name, and insisted that it was him. It’s kind of sad I met him on chemistry.com, oh well it’s sad that this kind of things happens now.

George
Active Member
Posts: 522
Joined: Thu Jan 24, 2013 10:24 pm

Re: Please help is this guy really overseas in Syria?

Post by George » Mon Sep 09, 2013 2:46 am

Looking at the ISP details, there is every chance that he was physically in Kenya at some point. The US IPs were probably because he was using webmail services that don't give the originating IP and you were seeing the server address. As many scammers travel widely throught out Africa, his Egyptian IP may have been from one of those trips.

Locked

Who is online

Users browsing this forum: No registered users and 2 guests