Jump to content
✿Ice Rain✿

ANYONE WHO CAN PLEASE INTERPRET THE IP?

By ✿Ice Rain✿ in Off Topic

 Share

46 posts in this topic

Recommended Posts

✿Ice Rain✿ Experienced

✿Ice Rain✿   0

Posted
Filed: AOS (apr) Country: Philippines
 Timeline
Posted

Before i asked already if a YM i.d be traced. This time it's not through YM, this time the messages was sent through E-mail. Please, I would like to ask guys if anyone could interpret this to me? I checked the "full headers" of the email and this is what i found. Can anybody interpret this to me and if there's a way to know which location/country this originated? Thank you guys.

-Shape

From Mandy Owens Thu Apr 24 10:31:16 2008

X-Apparently-To: -------@yahoo.com via 76.13.9.47; Thu, 24 Apr 2008 10:31:24 -0700

X-Originating-IP: [98.136.44.43]

Return-Path: <---------@yahoo.com>

Authentication-Results: mta316.mail.re4.yahoo.com from=yahoo.com; domainkeys=pass (ok)

Received: from 98.136.44.43 (HELO n59.bullet.mail.sp1.yahoo.com) (98.136.44.43) by mta316.mail.re4.yahoo.com with SMTP; Thu, 24 Apr 2008 10:31:23 -0700

Received: from [216.252.122.218] by n59.bullet.mail.sp1.yahoo.com with NNFMP; 24 Apr 2008 17:31:16 -0000

Received: from [69.147.84.116] by t3.bullet.sp1.yahoo.com with NNFMP; 24 Apr 2008 17:31:16 -0000

Received: from [127.0.0.1] by omp208.mail.sp1.yahoo.com with NNFMP; 24 Apr 2008 17:31:16 -0000

X-Yahoo-Newman-Property: ymail-3

X-Yahoo-Newman-Id: 929298.36813.bm@omp208.mail.sp1.yahoo.com

Received: (qmail 66033 invoked by uid 60001); 24 Apr 2008 17:31:16 -0000

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type:Message-ID; b=lvDYOJDkwm8rX208sqI/EVwe/HzI7DVC+usEi8/HrXWp64h29N/0oCmoz1gQT4Ri0ImnWTcxKBSz34IRKbhJOU2ZtZyNcZMbwpM+Taq8VBQiPZScPz8SNgdTS4ntczP2T16

MCTk6d/YH7oGrD6rLu9cn3CjKlDOFLg9UwXB6Msg=;

X-YMail-OSG: DVPbaqUVM1kfeGUQeeI4LCZqiZYsXE0fv0bjmyGg1B_GE3e_iEGGcL9Xu8iHSLvMeoh2U3e9u3Sj4ISl

GoNeB1fsduYXl9OktA--

Received: from [203.76.253.104] by web45715.mail.sp1.yahoo.com via HTTP; Thu, 24 Apr 2008 10:31:16 PDT

X-Mailer: YahooMailWebService/0.7.185

Date: Thu, 24 Apr 2008 10:31:16 -0700 (PDT)

Link to comment
Share on other sites
  • Replies 45
  • Created
  • Last Reply

Top Posters In This Topic

Popular Days

Top Posters In This Topic

Popular Days

ready4ONE Veteran

ready4ONE   5,400

Posted
Filed: Lift. Cond. (apr) Country: Philippines
 Timeline
Posted

I ran the originating IP through a program call ID Serve and got this:

Initiating server query ...

Looking up the domain name for IP: 98.136.44.43

The domain name for the IP address is: n59.bullet.mail.sp1.yahoo.com

Connecting to the server on standard HTTP port: 80

[Connected] Requesting the server's default page.

The server returned the following response headers:

HTTP/1.1 200 OK

Date: Fri, 25 Apr 2008 04:24:43 GMT

Set-Cookie: BX=b24cvod412n8b&b=3&s=8e; expires=Tue, 02-Jun-2037 20:00:00 GMT; path=/; domain=.44.43

P3P: policyref="http://p3p.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV"

Last-Modified: Tue, 24 Jan 2006 19:23:53 GMT

Accept-Ranges: bytes

Cache-Control: private

Connection: close

Transfer-Encoding: chunked

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

The server's response did not contain the expected 'Server:' header to identify itself. Therefore, server's identity can not be determined.

Query complete.

B and J K-1 story

  • April 2004 met online
  • July 16, 2006 Met in person on her birthday in United Arab Emirates
  • August 4, 2006 sent certified mail I-129F packet Neb SC
  • August 9, 2006 NOA1
  • August 21, 2006 received NOA1 in mail
  • October 4, 5, 7, 13 & 17 2006 Touches! 50 day address change... Yes Judith is beautiful, quit staring at her passport photo and approve us!!! Shaming works! LOL
  • October 13, 2006 NOA2! November 2, 2006 NOA2? Huh? NVC already processed and sent us on to Abu Dhabi Consulate!
  • February 12, 2007 Abu Dhabi Interview SUCCESS!!! February 14 Visa in hand!
  • March 6, 2007 she is here!
  • MARCH 14, 2007 WE ARE MARRIED!!!
  • May 5, 2007 Sent AOS/EAD packet
  • May 11, 2007 NOA1 AOS/EAD
  • June 7, 2007 Biometrics appointment
  • June 8, 2007 first post biometrics touch, June 11, next touch...
  • August 1, 2007 AOS Interview! APPROVED!! EAD APPROVED TOO...
  • August 6, 2007 EAD card and Welcome Letter received!
  • August 13, 2007 GREEN CARD received!!! 375 days since mailing the I-129F!

    Remove Conditions:

  • May 1, 2009 first day to file
  • May 9, 2009 mailed I-751 to USCIS CS
Link to comment
Share on other sites
Heracles Grand Master

Heracles   417

Posted
Filed: Lift. Cond. (apr) Timeline
Posted (edited)

it came from here: 203.76.253.104

ipdial-253-104.tri-isys.com. Which looks like some sort of Dialup ISP in the Philippines

http://www.tri-isys.com/index.php?page=home is the provider

Edited by Boo-Yah!

According to the Internal Revenue Service, the 400 richest American households earned a total of $US138 billion, up from $US105 billion a year earlier. That's an average of $US345 million each, on which they paid a tax rate of just 16.6 per cent.

Link to comment
Share on other sites
totes Enthusiast

totes   0

Posted
Filed: K-1 Visa Country: Nigeria
 Timeline
Posted

Yahoo im's can be traced. IP's can also be traced provided the person using the IP is not using a server to hide their IP. PM me, I'm sure I can help you.

hugs

tess

09/03/08 - Visa Approved!!!!!!!

09/10/08 - Picked up visa

09/20/08 - Arrived in the US - WHOOOOHOOOOO!

12/06/08 - Wedding

01/12/09 - AOS sent

Link to comment
Share on other sites
✿Ice Rain✿ Experienced

✿Ice Rain✿   0

Posted
Filed: AOS (apr) Country: Philippines
 Timeline
  • Author
Posted
I ran the originating IP through a program call ID Serve and got this:

Initiating server query ...

Looking up the domain name for IP: 98.136.44.43

The domain name for the IP address is: n59.bullet.mail.sp1.yahoo.com

Connecting to the server on standard HTTP port: 80

[Connected] Requesting the server's default page.

The server returned the following response headers:

HTTP/1.1 200 OK

Date: Fri, 25 Apr 2008 04:24:43 GMT

Set-Cookie: BX=b24cvod412n8b&b=3&s=8e; expires=Tue, 02-Jun-2037 20:00:00 GMT; path=/; domain=.44.43

P3P: policyref="http://p3p.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV"

Last-Modified: Tue, 24 Jan 2006 19:23:53 GMT

Accept-Ranges: bytes

Cache-Control: private

Connection: close

Transfer-Encoding: chunked

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

The server's response did not contain the expected 'Server:' header to identify itself. Therefore, server's identity can not be determined.

Query complete.

Thanks Ready, does this mean cannot be really determined anymore?

Link to comment
Share on other sites
Heracles Grand Master

Heracles   417

Posted
Filed: Lift. Cond. (apr) Timeline
Posted
Thanks Ready, does this mean cannot be really determined anymore?

He is looking at the wrong IP. Check out my previous post. It has the details listed..

According to the Internal Revenue Service, the 400 richest American households earned a total of $US138 billion, up from $US105 billion a year earlier. That's an average of $US345 million each, on which they paid a tax rate of just 16.6 per cent.

Link to comment
Share on other sites
✿Ice Rain✿ Experienced

✿Ice Rain✿   0

Posted
Filed: AOS (apr) Country: Philippines
 Timeline
  • Author
Posted
it came from here: 203.76.253.104

ipdial-253-104.tri-isys.com. Which looks like some sort of Dialup ISP in the Philippines

http://www.tri-isys.com/index.php?page=home is the provider

Thanks Boo-yah, the 203.76.104. what does it mean? is this the original IP of the sender? and not the X-Originating-IP: [98.136.44.43

Link to comment
Share on other sites
Heracles Grand Master

Heracles   417

Posted
Filed: Lift. Cond. (apr) Timeline
Posted (edited)
it came from here: 203.76.253.104

ipdial-253-104.tri-isys.com. Which looks like some sort of Dialup ISP in the Philippines

http://www.tri-isys.com/index.php?page=home is the provider

Thanks Boo-yah, the 203.76.104. what does it mean? is this the original IP of the sender? and not the X-Originating-IP: [98.136.44.43

Yeah it's a little trickier when using webmails. That is the IP of the PC the Yahoo mail was written on. I am assuming one email from yahoo was sent to another yahoo account right?

Edited by Boo-Yah!

According to the Internal Revenue Service, the 400 richest American households earned a total of $US138 billion, up from $US105 billion a year earlier. That's an average of $US345 million each, on which they paid a tax rate of just 16.6 per cent.

Link to comment
Share on other sites
✿Ice Rain✿ Experienced

✿Ice Rain✿   0

Posted
Filed: AOS (apr) Country: Philippines
 Timeline
  • Author
Posted
it came from here: 203.76.253.104

ipdial-253-104.tri-isys.com. Which looks like some sort of Dialup ISP in the Philippines

http://www.tri-isys.com/index.php?page=home is the provider

Boo-yah, is this really 100% certain? Coz if it is, that is so really helpful for me. I can find way to know this cafe then if it is located only in Philippines. wow..

Thank you very much.

Link to comment
Share on other sites
✿Ice Rain✿ Experienced

✿Ice Rain✿   0

Posted
Filed: AOS (apr) Country: Philippines
 Timeline
  • Author
Posted
Yahoo im's can be traced. IP's can also be traced provided the person using the IP is not using a server to hide their IP. PM me, I'm sure I can help you.

hugs

tess

Hi Tess,

Thank you, i already PMed you. The ym messages was only offline though.

-Shape

Link to comment
Share on other sites
Heracles Grand Master

Heracles   417

Posted
Filed: Lift. Cond. (apr) Timeline
Posted (edited)
it came from here: 203.76.253.104

ipdial-253-104.tri-isys.com. Which looks like some sort of Dialup ISP in the Philippines

http://www.tri-isys.com/index.php?page=home is the provider

Boo-yah, is this really 100% certain? Coz if it is, that is so really helpful for me. I can find way to know this cafe then if it is located only in Philippines. wow..

Thank you very much.

Now were the emails sent from one yahoo account to another yahoo account?

Edited by Boo-Yah!

According to the Internal Revenue Service, the 400 richest American households earned a total of $US138 billion, up from $US105 billion a year earlier. That's an average of $US345 million each, on which they paid a tax rate of just 16.6 per cent.

Link to comment
Share on other sites
✿Ice Rain✿ Experienced

✿Ice Rain✿   0

Posted
Filed: AOS (apr) Country: Philippines
 Timeline
  • Author
Posted
it came from here: 203.76.253.104

ipdial-253-104.tri-isys.com. Which looks like some sort of Dialup ISP in the Philippines

http://www.tri-isys.com/index.php?page=home is the provider

Thanks Boo-yah, the 203.76.104. what does it mean? is this the original IP of the sender? and not the X-Originating-IP: [98.136.44.43

Yeah it's a little trickier when using webmails. That is the IP of the PC the Yahoo mail was written on. I am assuming one email from yahoo was sent to another yahoo account right?

Boo-yah, i don't think it was. It is like this:

Date: Thu, 24 Apr 2008 10:31:16 -0700 (PDT)

From: Send an Instant Message "Mandy Owens" <mandyowens---@yahoo.com> Add Mobile Alert

Yahoo! DomainKeys has confirmed that this message was sent by yahoo.com. Learn more

Subject: ----

To: -------@yahoo.com

Link to comment
Share on other sites
Heracles Grand Master

Heracles   417

Posted
Filed: Lift. Cond. (apr) Timeline
Posted

Yep you answered it. They are to and from Yahoo accounts

The message was sent from http://www.tri-isys.com/index.php?page=home - in The Philippines

Unless you guys are in the Philippines and using this businesses dialup services..

According to the Internal Revenue Service, the 400 richest American households earned a total of $US138 billion, up from $US105 billion a year earlier. That's an average of $US345 million each, on which they paid a tax rate of just 16.6 per cent.

Link to comment
Share on other sites
RonMay Proficient

RonMay   1

Posted
Filed: Citizen (pnd) Country: Philippines
 Timeline
Posted

light side:

are you on a detective hunt shape? lol

Citizenship N-400

4/15/2010- sent my N-400 via fedex overnight

4/16/2010- signed and delivered

4/29/2010- check cleared

Link to comment
Share on other sites
✿Ice Rain✿ Experienced

✿Ice Rain✿   0

Posted
Filed: AOS (apr) Country: Philippines
 Timeline
  • Author
Posted
Yep you answered it. They are to and from Yahoo accounts

The message was sent from http://www.tri-isys.com/index.php?page=home - in The Philippines

Unless you guys are in the Philippines and using this businesses dialup services..

Sorry, i misinterpreted. I thought you meant if its like forwarded message. Yeah, its from yahoo account and was sent to yahoo account also.

Many uses dial-up in the Philippines.

Thanks Boo-yah , this is really a big help.Thank you.

-Shape

Link to comment
Share on other sites
 

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing
- Back to Top -

Important Disclaimer: Please read carefully the Visajourney.com Terms of Service. If you do not agree to the Terms of Service you should not access or view any page (including this page) on VisaJourney.com. Answers and comments provided on Visajourney.com Forums are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Visajourney.com does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. VisaJourney.com does not condone immigration fraud in any way, shape or manner. VisaJourney.com recommends that if any member or user knows directly of someone involved in fraudulent or illegal activity, that they report such activity directly to the Department of Homeland Security, Immigration and Customs Enforcement. You can contact ICE via email at Immigration.Reply@dhs.gov or you can telephone ICE at 1-866-347-2423. All reported threads/posts containing reference to immigration fraud or illegal activities will be removed from this board. If you feel that you have found inappropriate content, please let us know by contacting us here with a url link to that content. Thank you.
×
×
  • Create New...