Tracing an IP address is fairly simple. To trace a website ip address , use your computer’s command console to ping the URL, then use an IP lookup to find out where it comes from. Similarly, to trace the Ip address of an email, find the IP address from the email header, then use a whois search or IP lookup to trace it back to its source.
Method One of Four:
Website IP Address
- Open a command console. On a Mac, it’s called Terminal and it’s in the Utilities folder. On a PC, click on Start, then “All Programs”, then Accessories, and then Command Prompt. This will let you ping any website to find out the IP address of that website.
- Ping an address. This sends a signal out to a URL which then bounces back with the website information attached, and how long the round trip took.Type “ping [URL]” – example: ping facebook.com
- Press return/enter. The IP address should appear beside the website name, followed by how many seconds or milliseconds the ping took.The format of an IP address is numeric, written as four numbers separated by periods. For Facebook, the IP address is 184.108.40.206.
Method Two of Four:
Email IP Address
- 1Open your email client. To find the IP of an email sent to you, you can investigate the message’s headers—that stuff that looks like a keyboard exploded on the message.
- 2Show headers. Open a message. From the View menu, select the option that lets you view all or extended headers, and your To/From section will blossom with new information.On a Mac, click View > Message > All HeadersOn a PC, on Options, click the dialogue box launcher > Message Options dialogue box (Properties) > Internet HeadersNext to the Received section you will see something like “from….. and an IP address as described above. Select one of those, and copy it to the clipboard. In this case, we’ll select 220.127.116.11, and copy it. We can see that it says Received from http://mx-out.facebook.com, so we’ll do a test to see if that’s accurate.
- 3Open a command console. This is described above. Only this time, instead of doing a ping on a known address, we’re going to run a whois in your terminal window, by the flashing cursor, type whois 18.104.22.168, and press Enter. The information will be sent out to a database, queried, and then returned with the registration information for that IP address.In this case, we can verify that the message was sent through Facebook. Notice we also have the domain registrar’s full address.
- 4Use an alternative lookup. You may not want to use the terminal, or perhaps it’s not loaded on your computer. Instead, you can try using an Internet lookup, such as ip-lookup, which gives you much the same information as a whois lookup, and in many cases, much more.
Method Three of Four:
Geo-location of an IP Address
- 1Use the methods described above to obtain the IP number you wish to check.
- 2Go to a website that will allow you to look up IP address information.Google “IP Lookup” or “IP Geolocation” for a large list of sites that will freely offer this service.
- 3Understand what you can and cannot learn from the IP address:Which internet service provider (ISP) the user is using. In some cases this may be the user’s company .In other cases it may be just one of the large ISPs such as ATT or Comcast.The approximate physical location of the user (e.g. Palo Alto, California.)Recognize that usually you will not learn the actual name of the person doing at that IP address (e.g. Joe Smith). ISPs will typically only release such information under a court order.
Method Four of Four
- 1Open a command console as described above. On Windows, enter tracert <IP address>. On UNIX (including Linux and Macintosh OS X), open a shell and use the command traceroute <IP address>, and how long each step takes.