• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 160
  • Last Modified:

email tracing

How can I find out actual physical location of computer used which sender used to send me an email. I have IP address, return path, message-ID, received from, and etc. all kinds of information..
1 Solution
BROTHER2Author Commented:
plesse help me out for question above.
You can't be sure of finding the exact physical location. You can a rough idea in some cases:

(1) Step 1 is to get the correct IP address. If you are not adept at reading email headers, chech these links:


(2) Go to http://www.arin.net/ and enter the IP address in the field at the top right and click on "Search Whois"
 This will either give you some information about the name and location of the controlling body, or in the case of European or Asian or other non-US addresses, give you the address of another more specific site where you can repeat the Whois search.

(3) Do a DNS lookup on the IP address. Open a Command Window and type:

   > nslookup #.#.#.#    

  (assuming you've Windows) and it may give you the name of the organization that the IP belongs to.

(4) These days there are some sites that automate the above process, i.e. you enter the IP address and they try to give you a location, even a map. e.g. try http://www.networldmap.com/TryIt.htm

Some other good tips are at: http://www.private.org.il/IP2geo.html

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now