Learn How to Find an Email IP Address and Track its Sender

You get more than just the message when you check your email. Emails have “headers” that reveal information about the sender and the server they came from. You need to track down the sender’s IP address to do it. Following the steps in this article will allow you to determine the sender’s IP address.

Keep in mind that if the sender hides their IP address using a proxy server, this won’t work.

Additionally, the real IP address of the sender may not be seen if the email was sent from a Gmail account or Outlook via the web browser, as both Google and Microsoft conceal this information. If, however, you receive an email through a desktop client like Thunderbird, Outlook, or Apple Mail from a Gmail user, you may trace the email back to its sender’s IP address.

But first, why even bother to trace an email IP address?

Why Do You Need to Trace an Email Address?

The prevalence of malicious software, phishing emails, and other online scams is alarming today. So, knowing how you can trace the IP address of a suspicious email can help in

• Learning more about the sender and the message’s location.
• Prevent unwanted messages from reaching your inbox and protect your website from malicious users.

So here are the steps to discover everything about the email you receive in your inbox. And the first step is to explore the header.

How to Explore Email Header

Luckily, your email already provides the necessary means to trace the email owner in the email header. In addition, you can view the sender’s information, depending on your email service.

Gmail

• Select the email in your account
• Open the drop-down menu by clicking the three dots at the top-right corner of the email.
• Click the Show Original in the drop-down menu to open the email header

Yahoo Mail

• Open the email message
• Click on the More icon located above the message pane
• Select View Raw Message.
• A new tab will show you the details of the email header

Microsoft Outlook

• Double-click on the target email message
• Select File>Properties
• It will give you all about the Internet Headers

Apple Mail

• Open the target email message.
•  Follow the path View>Message>Raw Source to see the email header

What to see in an email header

It’s important to know what information is contained in an email’s header before attempting to use that information to discover who the email address’s owner is.

•  From: This reflects the email sender. (However, the information can be forged).
•  Reply-To: This shows the email address where you can send your response.
•  Subject: Of course, email’s subject.
• To: This is the recipient’s email id.
• Received: You have to read this from downwards to upwards. The original email sender is at the bottom, then moves upward, taking you through the email servers that the email went to before reaching you.
•  Delivered To: The final recipient, i-e you.
• MIME-Version: MIME (Multipurpose Internet Mail Extensions) represents the current standard email format.
• Content-Type: It enables the email client and the browser to “read” the message contents. It is usually either ISO-8859-1 and UTF-8 character.
• Authentication-Results: It reflects the record of all authentication checks performed on the message
• DKIM Signature: DKIM (Domain Keys Identified Mail) authenticates the domain from which the is sent. DKIM is important in preventing email fraud
• ARC Authentication-Results: ARC (Authenticated Receive Chain) identifies the email forwarders. 
• ARC Message Signature: It validates the information reflected in the email header info.
• ARC Seal: It verifies the message signature and the authentication results.
• Received SPF: The SPF (Sender Policy Framework) is a part of email authentication that prevents potential forgery in email sender addresses.
• Return Path: Bounce and non-send emails fall here.
• X Received: It shows a temporary address like a mail transfer agent or Gmail SMTP server.
• X Google SMTP Source: It reflects if the email was transferred through the Gmail SMTP server.

How to Trace an IP Address from your email

Now that you are aware of the header’s content, it’s time to know how you can trace your email IP address.

1. Open the email header.
2. You will find the IP address in the Received line, reflecting the email server IP of the sender. It is shown as X Originating IP or Original IP
3. You can use IP address lookup tool to trace an IP address. Copy and paste the IP address from the header into this tool, and it will show you the location of the sender’s email server. The details will likely include the country, city, postal code, latitude, longitude, time zone, and Geonames ID related to the IP address you searched.

How to identify the correct Received Line

As you know, the IP address is reflected in the Received line, so it is important to know more about it. Perhaps you will see multiple Received lines in your email header.

How should you interpret them, and which one represents the “true” version?

You will see multiple Received lines when an email message passes across multiple email servers. For this reason, spammers frequently employ several phonies’ Received lines to obfuscate their online activity.

You can still identify the initial sender even if multiple Received lines were accidentally discarded. Simply put in a little extra effort. Start at the bottom of the email, with the last Received line, then work your way up to the email’s header. Verify that the by and from addresses are consistent with one another. Your target IP address will be found with the correct data in the final Received line.

Read Also: How to Change your IP Address

How different email accounts show the IP address

• Gmail shows the email server’s IP address in the Received line. It does not locate the sender’s computer.
• Yahoo shows the email sender’s IP in the last Received line
• Outlook shows the IP address in the first Received line

Conclusion

A spam or phishing email’s sender can be identified by inspecting the email’s “header,” which is a valuable resource in its own right. Knowing the email header’s information helps you track down the owner of a certain email IP address. Learning the sender’s identity and location should be a breeze if you know how to trace the IP address.

Just remember that if the sender went to great lengths to conceal their identity, you might not be able to learn who they are.