Please answer: Question about IPs from email

IP Address Questions and AnswersCategory: Trace An EmailPlease answer: Question about IPs from email
Comodo asked 2 years ago

Hi; first of all, I am pleased to have joined this forum because I want to learn a lot about certain things regarding the IP.

Second, I'm here because I've got a couple questions and I need help (in a hurry) to solve them.

Here's the things:

1. Is it possible that someone who sends an email can fake the X-Originating-IP to supplant someone? If so, How is that possible?

2. Someone sent an email from email-account-A to email-account-B (email-account-A was hacked). The message source of the email in the email-account-B shows an X-Originating-IP, but the email-account-A shows a different one (both are public IP's). Which IP is the real one, the one in e-a-A or in e-a-B?

Please if someone has an answer to these questions I would be greatly thankful.

Thanks in advance.

Cheers.

1 Answers
wimiadmin Staff answered 2 years ago

Thanks for joining the forum Comodo!

"1. Is it possible that someone who sends an email can fake the X-Originating-IP to supplant someone? If so, How is that possible?"

Faking the originating IP and spoofing the originating IP are 2 very different things. Faking an IP is more or less accomplished by connecting to a network other than your own via VPN, open WIFI, etc. There are more in depth details, but we refrain from posting that information.

"2. Someone sent an email from email-account-A to email-account-B (email-account-A was hacked). The message source of the email in the email-account-B shows an X-Originating-IP, but the email-account-A shows a different one (both are public IP's). Which IP is the real one, the one in e-a-A or in e-a-B?"

The IP address from the account which the email was sent would be the originating IP. I'm not sure what you mean when you say 'but the email-account-A shows a different one'.

So, if you go to account B and read the header of the email sent from account A, that should contain the Originating IP. Again though, that's not to say that IP is 100% accurate as IPs can be 'faked' to an extent.

Know the answer? Login or sign up for an account to answer this question.
Sign Up