Does the IP address have to be an exact match?

Post your questions about IP address geolocation here.
ITwhat
Junior Member
Posts: 8
Joined: Tue May 26, 2015 1:42 pm

Does the IP address have to be an exact match?

Post by ITwhat »

Hi all!

I have received a couple anonymous emails am have two different (but similar) IP addresses. I believe that I know the person sending them and trying to match up the anonymous email IP addresses to the IP addresses of my contacts. Will this work?

This is what I have so far...

Anonymous Email IP Addresses:

2607:f8b0:400d:c04::22f
2607:f8b0:400d:c04::229

My Contacts Email IP Addresses:

I IP Address: 2607:f8b0:4001:c05::229
II IP Address: 2607:f8b0:4002:c07::22e
III IP Address: 2607:f8b0:400e:c03::229
IV IP Address: 2607:f8b0:400e:c02::22a

Also, can anyone help me decipher what each section represents?

Thank you in advance for your help!
User avatar
Chrispcritters
Forum Administrator
Posts: 2555
Joined: Tue Mar 02, 2010 5:41 pm
Location: 127.0.0.1 | ::1
Contact:

Re: Does the IP address have to be an exact match?

Post by Chrispcritters »

Can you post the actual headers and not the IPv6 addresses alone?
Founder & CEO of WhatIsMyIPAddress.com.
You can follow me on Twitter and Facebook for some behind the scenes info.
ITwhat
Junior Member
Posts: 8
Joined: Tue May 26, 2015 1:42 pm

Re: Does the IP address have to be an exact match?

Post by ITwhat »

First Anonymous Email Header

Delivered-To: {removed}@gmail.com
Received: by 10.36.3.71 with SMTP id e68csp42676ite;
Fri, 22 May 2015 05:31:19 -0700 (PDT)
X-Received: by 10.55.25.145 with SMTP id 17mr17362967qkz.46.1432297879033;
Fri, 22 May 2015 05:31:19 -0700 (PDT)
Return-Path: <{removed}@gmail.com>
Received: from mail-qg0-x22f.google.com (mail-qg0-x22f.google.com. [2607:f8b0:400d:c04::22f])
by mx.google.com with ESMTPS id v11si2123858qgv.72.2015.05.22.05.31.18
for <{removed}@gmail.com>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 22 May 2015 05:31:19 -0700 (PDT)
Received-SPF: pass (google.com: domain of {removed}@gmail.com designates 2607:f8b0:400d:c04::22f as permitted sender) client-ip=2607:f8b0:400d:c04::22f;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of {removed}@gmail.com designates 2607:f8b0:400d:c04::22f as permitted sender) smtp.mail={removed}@gmail.com...;
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-qg0-x22f.google.com with SMTP id w3so6912139qge.2
for <{removed}@gmail.com>; Fri, 22 May 2015 05:31:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=jCkKHXOahkq05bLziwkcO8QA5fUXFONx1q50JOFznx8=;
b=gaun9XSh+8wG3HgO4PiQ1uj2xt6fukU/fdN8xliL6NkTZ3UBqkJ7TR2BY42RXPfeKo
xi2vJKv1Ve/77isRuFOTLkN8FCiSbMWOqC0sYiEevzHKqwckIxNp23hDjlCAEpe3no58
va80dPA7m8Al1Q7N2sVFb/6avwUfFDA6drYuBQF/cDWuzQ4LYxmD6xDwWu8c5ThYhtqm
HLBlRxTmXvHQqexcvEBgu9C5ZrOr2rXwndhJWTKZwzU5HSZ1p+x3BZ/Abafy6BPJz71p
njvoz3ElVpAfrZCaouJfhoRxHNRYHRhBEUqxur5zX1m6cOik8w1lvmBkDMzHk231nH86
1sAQ==
MIME-Version: 1.0
X-Received: by 10.55.21.41 with SMTP id f41mr17459304qkh.0.1432297878817; Fri,
22 May 2015 05:31:18 -0700 (PDT)
Received: by 10.140.40.41 with HTTP; Fri, 22 May 2015 05:31:18 -0700 (PDT)
Date: Fri, 22 May 2015 08:31:18 -0400
Message-ID: <[email protected]om>
Subject: afternoon on the water
From: Missy D <{removed}@gmail.com>
To: {removed}@gmail.com
Content-Type: multipart/alternative; boundary=001a1147daaa4792ae0516aad612

--001a1147daaa4792ae0516aad612
Content-Type: text/plain; charset=UTF-8
ITwhat
Junior Member
Posts: 8
Joined: Tue May 26, 2015 1:42 pm

Re: Does the IP address have to be an exact match?

Post by ITwhat »

Second Anonymous Email

Delivered-To: {removed}@gmail.com
Received: by 10.36.3.71 with SMTP id e68csp550402ite;
Sat, 23 May 2015 07:43:47 -0700 (PDT)
X-Received: by 10.140.233.214 with SMTP id e205mr18543690qhc.68.1432392226844;
Sat, 23 May 2015 07:43:46 -0700 (PDT)
Return-Path: <{removed}@gmail.com>
Received: from mail-qg0-x229.google.com (mail-qg0-x229.google.com. [2607:f8b0:400d:c04::229])
by mx.google.com with ESMTPS id 84si5795633qkq.78.2015.05.23.07.43.46
for <{removed}@gmail.com>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 23 May 2015 07:43:46 -0700 (PDT)
Received-SPF: pass (google.com: domain of {removed}@gmail.com designates 2607:f8b0:400d:c04::229 as permitted sender) client-ip=2607:f8b0:400d:c04::229;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of {removed}@gmail.com designates 2607:f8b0:400d:c04::229 as permitted sender) smtp.mail={removed}@gmail.com..;
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-qg0-x229.google.com with SMTP id z61so24262927qge.1
for <{removed}@gmail.com>; Sat, 23 May 2015 07:43:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=YtfCnmgUjYCOT10KQikYPt6lHf6Idl4o15jaYExtkB0=;
b=ZTgRzVuaufE3H1ARYcI9nmL3n5HR1KruzUTasgv8PBcYBdQc1ocp1w4cRS3ddJ5wWb
XaAtWdROPZNigzOssU/e6WruPVFLppflrVUzdHJyqVCuxOVso1ttGkfz4SpF47xm3pzp
fjMxZzMYJs7yI+RB8whf31eSImohpC5ZhCPCgMVtcAOXb9KCwai9nSbwAHb0313Fi4+a
eSiTtJsGMbOOlJq6ZcKkhYfSbA6AP/ERH0kTLhTEwO1k6UYyZEHPMibYkfx/lQ1oj+LD
zQqfpKDvrxJhhxSX8YZylnsl2pJyJs6XZQU+qjzPN/2alFjiXq2LsNErHv/DreXltc18
x9LQ==
MIME-Version: 1.0
X-Received: by 10.55.17.133 with SMTP id 5mr29690034qkr.18.1432392226651; Sat,
23 May 2015 07:43:46 -0700 (PDT)
Received: by 10.140.32.201 with HTTP; Sat, 23 May 2015 07:43:46 -0700 (PDT)
Date: Sat, 23 May 2015 07:43:46 -0700
Message-ID: <CAFe=[email protected]>
Subject: Relinquishing the guilt of a coworker idly sitting by.
From: Good Samaratin <{removed}@gmail.com>
To: "{removed}@gmail.com" <{removed}@gmail.com>
Content-Type: multipart/alternative; boundary=001a114712c6d942750516c0cde3

--001a114712c6d942750516c0cde3
Content-Type: text/plain; charset=UTF-8
ITwhat
Junior Member
Posts: 8
Joined: Tue May 26, 2015 1:42 pm

Re: Does the IP address have to be an exact match?

Post by ITwhat »

First Personal Contact

Delivered-To: {removed}@gmail.com
Received: by 10.36.98.143 with SMTP id d137csp92921itc;
Mon, 16 Mar 2015 09:46:47 -0700 (PDT)
X-Received: by 10.55.24.159 with SMTP id 31mr62728008qky.74.1426524406498;
Mon, 16 Mar 2015 09:46:46 -0700 (PDT)
Return-Path: <[email protected]oclist.bounces.google.com>
Received: from mail-qg0-x248.google.com (mail-qg0-x248.google.com. [2607:f8b0:400d:c04::248])
by mx.google.com with ESMTPS id e6si13437qkh.30.2015.03.16.09.46.46
for <{removed}@gmail.com>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 16 Mar 2015 09:46:46 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected]oclist.bounces.google.com.... designates 2607:f8b0:400d:c04::248 as permitted sender) client-ip=2607:f8b0:400d:c04::248;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected]oclist.bounces.google.com.... designates 2607:f8b0:400d:c04::248 as permitted sender) smtp.mail=[email protected]oclist.bounces.google.com....;
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-qg0-x248.google.com with SMTP id a108so59304190qge.1
for <{removed}@gmail.com>; Mon, 16 Mar 2015 09:46:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:message-id:date:subject:from:to:content-type;
bh=2GeHNDbwDwUMNQRrt2Rv/X5wI8fZF4eTQ4DW93X2bHU=;
b=fsrufkwM7RyFs+rA8ABY+PKEB9L3YL0HxGLcHstHTSlfgCEsESiuI+dfgu7eQiNdCC
TFnV3L30j0cdZnBd5nECVfn1+vhRSP6lS9gSnO+zcz9aDUE7wbKWbP+5G5b7/qcohynT
RbSmX4RTJc3P5Vo99Y7C5goqRFhIfTM9PqRN7I6LVQECA2viQ4lhsbZ6S3GQxCVDcOnh
tKR5l9p1FnVxeiuj0YGXwj1ZSo80Y6ChkENyj126TzkjpDjxXpyQvifO9zVcRNbcQkqe
xTjMHwLoEfqhqSpukbBVZ94AQQMZhZhu8Bl0aq/Cbcmtp5IfLcYcayEHPDTe3MIFXYlm
ZNqA==
MIME-Version: 1.0
X-Received: by 10.52.5.169 with SMTP id t9mr64305785vdt.7.1426524406012; Mon,
16 Mar 2015 09:46:46 -0700 (PDT)
X-Originating-IP: 2602:30a:c028:9fc0:f437:7e9f:c6bd:1882
X-No-Auto-Attachment: 1
Message-ID: <[email protected]>
Date: Mon, 16 Mar 2015 16:46:46 +0000
Subject: Homework!
From: "Nicholas Trujillo (via Google Docs)" <{removed}@gmail.com>
To: {removed}@gmail.com
Content-Type: multipart/mixed; boundary=20cf302efac87be20905116a98d0

--20cf302efac87be20905116a98d0
Content-Type: multipart/alternative; boundary=20cf302efac87be20505116a98ce

--20cf302efac87be20505116a98ce
Content-Type: text/plain; charset=UTF-8; format=flowed; delsp=yes

Attached: N E W Client Packet.pdf
Sent using Google Docs http://docs.google.com/
ITwhat
Junior Member
Posts: 8
Joined: Tue May 26, 2015 1:42 pm

Re: Does the IP address have to be an exact match?

Post by ITwhat »

Second Personal Contact

Delivered-To: {removed}@gmail.com
Received: by 10.36.3.71 with SMTP id e68csp2208158ite;
Tue, 26 May 2015 07:50:21 -0700 (PDT)
X-Received: by 10.236.111.35 with SMTP id v23mr24206083yhg.109.1432651821357;
Tue, 26 May 2015 07:50:21 -0700 (PDT)
Return-Path: <{removed}@gmail.com>
Received: from mail-yk0-x22e.google.com (mail-yk0-x22e.google.com. [2607:f8b0:4002:c07::22e])
by mx.google.com with ESMTPS id 7si8334166ykc.69.2015.05.26.07.50.21
for <{removed}@gmail.com>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Tue, 26 May 2015 07:50:21 -0700 (PDT)
Received-SPF: pass (google.com: domain of {removed}@gmail.com designates 2607:f8b0:4002:c07::22e as permitted sender) client-ip=2607:f8b0:4002:c07::22e;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of {removed}@gmail.com designates 2607:f8b0:4002:c07::22e as permitted sender) smtp.mail={removed}@gmail.com....;
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-yk0-x22e.google.com with SMTP id d142so27918171yke.3
for <{removed}@gmail.com>; Tue, 26 May 2015 07:50:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type;
bh=3R+BqBiV6KdrwngDaAo1YPZ0qDrPoyBycB+cA2kXkBo=;
b=JuRJ3bIYbo0vzdSmT+qMlWGmaAg5BKcFNiQTcTXeRJaYhI9g4+yFbDYb4lDxAjvEdq
g5fqSRacOdvQhM2IbAVBfxV2SXFdMR4OV8/fTZC+tpMj3HbnWh6NEqz+KomMwQPGF6in
nv+sJS96ODaixQHwyOIL1LVETrTFAlgoPq/RqWR7czDo3phPMMTh3rTsrNK/MZABm2sA
VMbVh3lvDzCj9QRV4siD19Sser33sfANKrfzsPs5s1j6NBYuYAk5CEDh34qYoAaILlAy
Tc2fdYwotjOBMfSgLpHwuzPDKy+iSfY2k0wBsF66fJZL9pE4G9g8P3OROb3mFvAp2S0s
9d8w==
MIME-Version: 1.0
X-Received: by 10.236.209.42 with SMTP id r30mr24043722yho.5.1432651819641;
Tue, 26 May 2015 07:50:19 -0700 (PDT)
Received: by 10.13.196.66 with HTTP; Tue, 26 May 2015 07:50:19 -0700 (PDT)
Received: by 10.13.196.66 with HTTP; Tue, 26 May 2015 07:50:19 -0700 (PDT)
In-Reply-To: <[email protected]om>
References: <[email protected]om>
Date: Tue, 26 May 2015 07:50:19 -0700
Message-ID: <[email protected]om>
Subject: Sunset photo
From: Bryan Heil <{removed}@gmail.com>
To: {removed}@gmail.com
Content-Type: multipart/mixed; boundary=089e01537ae2e0298b0516fd3ebd

--089e01537ae2e0298b0516fd3ebd
Content-Type: multipart/alternative; boundary=089e01537ae2e029850516fd3ebb

--089e01537ae2e029850516fd3ebb
Content-Type: text/plain; charset=UTF-8
ITwhat
Junior Member
Posts: 8
Joined: Tue May 26, 2015 1:42 pm

Re: Does the IP address have to be an exact match?

Post by ITwhat »

Third Personal Contact

Delivered-To: {removed}@gmail.com
Received: by 10.36.98.198 with SMTP id d189csp1681430itc;
Mon, 11 May 2015 16:22:58 -0700 (PDT)
X-Received: by 10.194.171.36 with SMTP id ar4mr24145022wjc.7.1431386578296;
Mon, 11 May 2015 16:22:58 -0700 (PDT)
Return-Path: <{removed}@gmail.com>
Received: from mail-wg0-f43.google.com (mail-wg0-f43.google.com. [74.125.82.43])
by mx.google.com with ESMTPS id cn6si23266664wjb.209.2015.05.11.16.22.57
for <{removed}@gmail.com>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 11 May 2015 16:22:58 -0700 (PDT)
Received-SPF: pass (google.com: domain of {removed}@gmail.com designates 74.125.82.43 as permitted sender) client-ip=74.125.82.43;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 74.125.82.43 as permitted sender) smtp.mail={removed}@gmail.com....;
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-wg0-f43.google.com with SMTP id j6so271wgg.3
for <{removed}@gmail.com>; Mon, 11 May 2015 16:22:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=4tWxCHPZSDdzHE3x4/LJCb8GSi/9F0pWW+tDHHf3XyM=;
b=AiwSdimGrpFrggjuOzCGU5e4V6q9Oblvhh/kJY0Ty+tXtqe5lDBpQnzPV3z55fzeJe
n/k/ZXZm09I/PSrVjNCqnls3el8OXqgY57YubC2PGtjA1b1Tkc64s1ArnkqTSe0VsgWB
yXQGjCdLiaAdYEH2y6SxG5ax85baRKK0pYIJGP3BbHitf5kXxeOyeCBOtrpARXJBgJH+
fQ18s2K4BkTTUPmum6RCPv0t0jDRWZPkTny22Wt0LF04zhRcRMBTADuxMKBs51knZCAK
tL60v+nN8cSMaqZ2MXLUy8fF4jr3qri+mi3J0jQhW4oc4YqYOowS/uzEskZgS14umZcR
LL5Q==
MIME-Version: 1.0
X-Received: by 10.180.103.130 with SMTP id fw2mr23737587wib.87.1431386577649;
Mon, 11 May 2015 16:22:57 -0700 (PDT)
Received: by 10.194.58.139 with HTTP; Mon, 11 May 2015 16:22:57 -0700 (PDT)
Date: Mon, 11 May 2015 16:22:57 -0700
Message-ID: <CAL7GS-C3QpSq2zMZ7FDZ+Xc6o=[email protected]>
Subject: Video and Updates :)
From: Alyssa Douglas <{removed}@gmail.com>
To: "{removed}@gmail.com" <{removed}@gmail.com>
Content-Type: multipart/alternative; boundary=f46d04428d247f471d0515d6a81c

--f46d04428d247f471d0515d6a81c
Content-Type: text/plain; charset=UTF-8
ITwhat
Junior Member
Posts: 8
Joined: Tue May 26, 2015 1:42 pm

Re: Does the IP address have to be an exact match?

Post by ITwhat »

Fourth Personal Contact

Delivered-To: {removed}@gmail.com
Received: by 10.36.3.71 with SMTP id e68csp2374229ite;
Tue, 26 May 2015 12:41:10 -0700 (PDT)
X-Received: by 10.66.192.74 with SMTP id he10mr51416974pac.145.1432669270715;
Tue, 26 May 2015 12:41:10 -0700 (PDT)
Return-Path: <{removed}@gmail.com>
Received: from mail-pd0-x22a.google.com (mail-pd0-x22a.google.com. [2607:f8b0:400e:c02::22a])
by mx.google.com with ESMTPS id s8si22253406pdp.253.2015.05.26.12.41.10
for <{removed}@gmail.com>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Tue, 26 May 2015 12:41:10 -0700 (PDT)
Received-SPF: pass (google.com: domain of {removed}@gmail.com designates 2607:f8b0:400e:c02::22a as permitted sender) client-ip=2607:f8b0:400e:c02::22a;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of {removed}@gmail.com designates 2607:f8b0:400e:c02::22a as permitted sender) smtp.mail={removed}@gmail.com....;
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-pd0-x22a.google.com with SMTP id h10so97549712pdf.3
for <{removed}@gmail.com>; Tue, 26 May 2015 12:41:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=content-type:content-transfer-encoding:subject:from:message-id:date
:to:mime-version;
bh=c1hYY5ZdY0vX0yJgYkrYVzhJes/T48+jMOaQ9DphAvg=;
b=XAEXyEwW8RHdw5SiIXg5o5nwp02SMitbf3noNjh3BJn4HeiZBwtXyXkGu7LoyqCV/g
Co8stgPAFiWRI5yMXNxRJR4PWky+PEfePeKHx432CoEqVjA+sqXADNiUzkTyFRyJ1bLt
X8OqK8C7jtgyR+n2o6NFCLahiFuL5nwW5DnbPBZSwvPiRnNehDSPH0qTXwqHzZEQojCD
0n5vKxUUhXC/srzBF5bHB1UkNdf1HBS9b8xoOdyGz1bbCHzPFWddHAU4kuNzM2nFzVQT
XmRvCbtXhHZFfKRHoa/j9cuqBMI+GCatLr+53gNXn3rITpuBIImPsL26V+CGT286zOcv
ZGxg==
X-Received: by 10.68.131.65 with SMTP id ok1mr47936896pbb.16.1432669270367;
Tue, 26 May 2015 12:41:10 -0700 (PDT)
Return-Path: <{removed}@gmail.com>
Received: from [29.153.233.4] ([66.87.65.4])
by mx.google.com with ESMTPSA id v4sm13853584pbs.0.2015.05.26.12.41.07
for <{removed}@gmail.com>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Tue, 26 May 2015 12:41:08 -0700 (PDT)
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Subject: Hi
From: Fatmeh <{removed}@gmail.com>
Message-Id: <[email protected]>
Date: Tue, 26 May 2015 12:41:02 -0700
To: "{removed}@gmail.com" <{removed}@gmail.com>
Mime-Version: 1.0 (1.0)
X-Mailer: iPhone Mail (12F70)
User avatar
Chrispcritters
Forum Administrator
Posts: 2555
Joined: Tue Mar 02, 2010 5:41 pm
Location: 127.0.0.1 | ::1
Contact:

Re: Does the IP address have to be an exact match?

Post by Chrispcritters »

Unfortunately Google does not include the source IP address in the headers. All you are able to see are IP addresses within Google's own network.
Founder & CEO of WhatIsMyIPAddress.com.
You can follow me on Twitter and Facebook for some behind the scenes info.
ITwhat
Junior Member
Posts: 8
Joined: Tue May 26, 2015 1:42 pm

Re: Does the IP address have to be an exact match?

Post by ITwhat »

Thus I am only able to locate a broad area. I just can't believe that there isn't a way to get a closer idea. Do you have any suggestions?
Locked