Please help... Need to find location of this IP address

Post your questions about IP address geolocation here.
Locked
Engine0919
New Member
Posts: 2
Joined: Sun Oct 09, 2011 7:47 am

Please help... Need to find location of this IP address

Post by Engine0919 » Sun Oct 09, 2011 8:06 am

hiii need to find where this is coming from IP 98.138.90.68 , sumone has already left a comment saying she is a scammer , if u have been in contact with the person , plz contact me on engine0919@yahoo.com thank u .

User avatar
Chrispcritters
Forum Administrator
Posts: 2460
Joined: Tue Mar 02, 2010 5:41 pm
Location: 127.0.0.1 | ::1
Contact:

Re: Please help... Need to find location of this IP address

Post by Chrispcritters » Sun Oct 09, 2011 1:45 pm

98.138.90.68 appears to be a Yahoo mail server, not the sender of the email. Do you have headers that you can post?
Founder & CEO of WhatIsMyIPAddress.com.
You can follow me on Twitter and Facebook for some behind the scenes info.

Engine0919
New Member
Posts: 2
Joined: Sun Oct 09, 2011 7:47 am

Re: Please help... Need to find location of this IP address

Post by Engine0919 » Sun Oct 09, 2011 2:22 pm

Chrispcritters wrote:98.138.90.68 appears to be a Yahoo mail server, not the sender of the email. Do you have headers that you can post?
hii thanx for replying , heres the header , took out the mail addresses and names appreciate if you could help me out thank u

X-Apparently-To: via 98.136.167.172; Sat, 08 Oct 2011 22:31:17 -0700
Return-Path: <>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
eWFob28uY29tPgpUbzogUm9zYSBHdXptYW4gPGd1em1hbnJvc2E1NEB5YWhv
by5jb20.ClNlbnQ6IFNhdHVyZGF5LCBPY3RvYmVyIDgsIDIwMTEgMTA6MjUg
UE0KU3ViamVjdDogUmU6IAoKaSBqdXN0IGRpZCAsIAoKRnJvbTogUm9zYSBH
dXptYW4gPGd1em1hbnJvc2E1NEB5YWhvby5jb20.ClRvOiAicmljaGFyZF9j
b3VsdG9uQHlhaG9vLmNvbSIgPHJpY2hhcmRfY291bHRvbkB5YWhvby5jb20B
MAEBAQE-
X-YMailISG: grWCk_gWLDsr78RwZxMMuuwpjSLB1Zn1TIr7o3SsQw5XCV62
LBMENLT7csLiKCbJBIyyLwxwvvK5ETJY4Z1B5C8mtrel3GnEdBXZC1QREGw5
MFws5wH37nqK0FrBbsnWdgKQU.lHyzgj_NxGYyvD5R0UHlqq6Siyp72lvF9m
mU4UuGMvmYWUiWKnLVoRnkyNVoITbi0puiWykmwupMhalMVIPTJbL7n8WrXv
htWi3CzXjZ8xNVRMOHn3ppBoqr46zNLIJu_MYAfQi7CEvgjL3RICPTG7oA60
DxtInMX8lzxVimJF.DPU8iLFBdSymdtE8Zlg9SHTNm61rorQKdVM8g_Xaht7
RPFjjJKWj1G46ol.FhMD_3tIvnGoKR5AAzsR3ILrBuhBKed_OWtHG4HQVfrp
s2IxEyrMzktCLO.9Meh31fjBhx212gXeZYzWjKaXwhgrPQr4rlHTGbBvIAWT
tAAkT01SX6NoTRWBiJ7iuiLuKfsEplwomj.pyFw4ps1kQHEwlI79RS89VyXn
Gz4vZlalYaP.A1ZdL3eZwZ.s_pNNm.VGOru9sqRxkh7.Ai3YLg8YSiAlD0SU
or5nCofY5BLTcfrPlIyA3v5j4ZkIVCIJL94cMlCUEn7o8BjZALZb9ZJosLMP
ZEADzjAMwxbqQ.pHZFpjZaNtHnbN.U5daO5sweVVAKz5mZGMzJ01RDpdMbbv
VwGatawOiEkOPrHKhmpdowOpLn3EgTRGfhwbGfN9R1fklzvn1MmfKM3uBEba
HOMiVp7LtA_3sx13W6I2pGDBCQtHKlLcR5fD0QCCjQNOC.YHdEgo3nhNeprO
ajH3UC8HRJ8EH5_gzBI9pma.joFfuJtZIh18YA1dbmwdTMmZvW7k5svf1Nyy
li25VGQWzizuLfkzh9MUwfkINJaPMOA17xJLF87D9hliJjqiqeDwVa2mcJ0M
bkCyCSY68JbzbMa8pq.ZKMkLkNU_Iq92f3MMvY9v2kTnvtK2YITlp4_9D4Dm
5NpPYkZ2Nz3g84gHrROW5da3jO6wjkloQePPgjumBGbPaOmE8swhCab7veJD
aX4WvdvvndDK1DWEYxWr6SN6BsJaBzCsq9SAwYKCJEQvXF5CsyMBLBdmPXw_
bie8P9o7gbA60meGx.cT5wk0eqCGD4yxTpE3ICuSW61kK1rs53Cb8nhYCPFo
vEsDYyMMwirV208Q4uEME_3xR48FBgwIiOhe
X-Originating-IP: [98.138.90.68]
Authentication-Results: mta1189.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm5.bullet.mail.ne1.yahoo.com) (98.138.90.68)
by mta1189.mail.bf1.yahoo.com with SMTP; Sat, 08 Oct 2011 22:31:17 -0700
Received: from [98.138.90.52] by nm5.bullet.mail.ne1.yahoo.com with NNFMP; 09 Oct 2011 05:31:16 -0000
Received: from [98.138.88.232] by tm5.bullet.mail.ne1.yahoo.com with NNFMP; 09 Oct 2011 05:31:16 -0000
Received: from [127.0.0.1] by omp1032.mail.ne1.yahoo.com with NNFMP; 09 Oct 2011 05:31:16 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 109665.7269.bm@omp1032.mail.ne1.yahoo.com
Received: (qmail 5197 invoked by uid 60001); 9 Oct 2011 05:31:15 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1318138275; bh=Z85WVKLBpvfFZtbSNCRyImASfuLia4FfXR9v86NFWoc=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=wRKpkYjAe2j5oZ9r4DDH40QCu8JAkQtSJnebCk7pSy13Xa+GYCl09BRZaxsU27aD5Q2ygJehu6yipHBibTj2u4ChACwNVoTZ5fHxcjmT0NXJNydqeUjpj3lW+Ol66E0syBTFTqIkLMVg7jDrC5AOmJErtJaq9zeCta9crKPEJNA=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=12OButSkkO5Jq1CQd5NMg9bU+Ols26VLKIBVEDv0220CCDCDL+1ACdSbHeueFjE7S/TzKIkox9fvkzUSOR23wuOG0UAzSIp6J9kRvEKxwLwTmLfOBahym6EB+bhZqruWnPtN6iw72Vjx92PU4E/D6v2JGjf8rLm4s/fmET3yDyA=;
X-YMail-OSG: jVpzsMYVM1mhoxEg1Swjhrk5CSfvSLxDKfxACT3.NV0u9bP
VaqK5.IaHpFFlLbRDs4qXnfvdGr.gtlG5MIIa979Y9oHE5.wPM2iuGHWVqha
uLJtxsEBT8ie1PkCFlYuhbsHTNgFqQ0FIBqboueN2vKyHwDmCk25q.eh88hR
dTKrtv.IYJsWD7AMBjFV5RVYiNv.mkzM4CSu0b1k8NXDm3vvTW_3ccOdIdog
q9GQKztjp6li_uNV6WwQFOeIQlg_EDA60v_Mbhb9ph23a2m1Nc5CelpAZInR
QKv7JEyF09lje8O.G9_IoxfSagiwDIrbmjq.Ja5jhFFjp6pcbxc5..oTDp_i
FFlX8DcO1MDKabqT8dOQ6ITyMMBINGzUn8YNl1Nl5CDteNUiaWr3xr1nlIZs
D15V5gw--
Received: from [75.51.191.66] by web120406.mail.ne1.yahoo.com via HTTP; Sat, 08 Oct 2011 22:31:15 PDT
X-Mailer: YahooMailWebService/0.8.114.317681
References: <1318137770.81875.YahooMailNeo@web120410.mail.ne1.yahoo.com> <1318137941.6820.YahooMailNeo@web114119.mail.gq1.yahoo.com>
Message-ID: <1318138275.142.YahooMailNeo@web120406.mail.ne1.yahoo.com>
Date: Sat, 8 Oct 2011 22:31:15 -0700 (PDT)
From:>
Reply-To: >
Subject: Re:
To: -Reply-To: <1318137941.6820.YahooMailNeo@web114119.mail.gq1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1635569886-788418826-1318138275=:142"
Content-Length: 3542

User avatar
Chrispcritters
Forum Administrator
Posts: 2460
Joined: Tue Mar 02, 2010 5:41 pm
Location: 127.0.0.1 | ::1
Contact:

Re: Please help... Need to find location of this IP address

Post by Chrispcritters » Mon Oct 10, 2011 11:11 am

Source is likely 75.51.191.66
Founder & CEO of WhatIsMyIPAddress.com.
You can follow me on Twitter and Facebook for some behind the scenes info.

Ralph Warner
New Member
Posts: 1
Joined: Wed Oct 12, 2011 4:00 am

Re: Please help... Need to find location of this IP address

Post by Ralph Warner » Wed Oct 12, 2011 4:08 am

The IP address leads to California but there is still some cause for concern, the NNFMP in a header is a red flag that the IP has been associated with spam and scam and its often found in the headers from scammers.

Please note that having NNFMP in a header does not automatically mean its a scammer and the lack of it does not automatically indicate that it isn't one, its just another red flag or something to look out for.

So, how to tell if its a scammer;
Do a search on the email address
Do an exact search on a portion of text from one of the emails (to do an exact search surround the quote with quotation marks, like this "Ralph Warner" before doing the search)
Have you been asked to send money, cash a cheque, receive money into your bank account or receive a package, they are all classic signs of a scam.

I am currently a moderator on an antiscam forum and would be happy to give you more detailed advice if you are still unsure.

Locked

Who is online

Users browsing this forum: No registered users and 1 guest