iP's Yahoo reveals are the 'Public' address which everyone sees. It is in fact the last server that your iSP is using before launching your packets onto the 'Net. If your iSP is a large operation, they may have servers scattered all over the place, not necessarily close to your physical location.
Yahoo finally got the message and moved mail to SSL (secure) servers, however, it must be manually set to do so all the time.
To take this essential step, in Yahoo Mail, cursor over the upper right 'gear'> Mail Options> General tab, near the bottom, check the box "Make your Yahoo! Mail more secure with SSL"> tick "Save" near the top.
Your browser should then be accepting the Certificate for "mail.yahoo.com", and whenever you connect to it, there will be the address pre-fix 'https'. Always look for that.
This step is absolutely critical if you ever use a computer (or any smartphone, tablet, etc.) in a mobile situation, like at a "hot spot" cafe, library, or anywhere really.
And likewise Home units should make the adjustment.
Firefox, with "HTTPS Everywhere" will ensure all SSL connections are always made (when available).
This will not prevent account hijacks ENTIRELY: it only works when you "log-in" to Yahoo and go right to mail, then "log-out" from Yahoo. If you migrate to other Y! services while logged in, you will be dropped to normal channels and THAT is when your 'session authentication' cookie will be slurped, allowing someone else to log-in as you!
(I don't know if this is related to the 'missing' mail issue, but it's always better to be as secure as possible, rather than leave it to some one else.)
If you've not been told already, linking (or 'syncing') multiple accounts as you've done has a lot of convenience, but as convenience goes up, security goes down in many aspects.
I would seriously reconsider this co-mingling business, and disambiguate these accounts.
· 7 years ago