ip address from email

jamoor · 11 Feb 2006 at 17:32

Sat, 11 Feb 2006 09:22:25 -0800 (PST)
Received: by 10.35.78.13 with SMTP id f13mr125372pyl;
Sat, 11 Feb 2006 09:22:25 -0800 (PST)
Return-Path: <**@hotmail.com>
Received: from hotmail.com (bay7-f26.bay7.hotmail.com [64.4.11.51])
by mx.gmail.com with ESMTP id i72si852988pye.2006.02.11.09.22.24;
Sat, 11 Feb 2006 09:22:25 -0800 (PST)
Received-SPF: pass (gmail.com: domain of **@hotmail.com designates 64.4.11.51 as permitted sender)
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Sat, 11 Feb 2006 09:22:24 -0800
Message-ID: <[email protected]>
Received: from 84.67.246.54 by by7fd.bay7.hotmail.msn.com with HTTP;
Sat, 11 Feb 2006 17:22:23 GMT
X-Originating-IP: [84.67.246.54]
X-Originating-Email: [@hotmail.com]
X-Sender: **@hotmail.com
From: "" <**@hotmail.com>
To:
Bcc:
Subject: hey
Date: Sat, 11 Feb 2006 17:22:23 +0000
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-OriginalArrivalTime: 11 Feb 2006 17:22:24.0247 (UTC) FILETIME=[B91FB870:01C62F2F]

Ok i recieved an email from a friend who had is hotmail account "hacked" yeah right,
"the hacker" sent me an email, is it possible to find out which ip address sent the email?

jamoor · 11 Feb 2006 at 17:38

Beansprout said:
X-Originating-IP: [84.67.246.54]

is that hotmale (hehe) s ip or does that belong to the person who sent it?

jamoor · 11 Feb 2006 at 17:49

and who is energis

jamoor · 11 Feb 2006 at 18:20

VeNT said:
02/11/06 18:16:19 Dns 84.67.246.54
nslookup 84.67.246.54
Canonical name: user-5686.lns1-c9.dsl.pol.co.uk
Addresses:
84.67.246.54

samspade win

www.pol.co.uk leads to http://www.cw.com/new/ so I'm guessing it was a C&W user?
is he a C&W user? if not, email those headers to the C&W abuse address.

i will check,

it is that IP address though because i emailed myself and my ip address was where that is