looks like real ip address is
Received: from c-68-57-205-126.hsd1.il.comcast.net
EHLO [96.207.31.1])
   [68.57.205.126]

i checked other emails, but there is tor. but this twp looks like real
http://diyhpl.us/~bryan/irc/bitcoin-satoshi/email-p2presearch-2009-02-12-141802.txt