How to track the source of this email?

User avatar
alkapin
Ник удалён за неоплаченную рекламу
Posts: 391
Joined: 15 May 2002 09:16
Location: было оттуда, теперь отсюда

How to track the source of this email?

Post by alkapin »

I am getting bombarded with spam emails containing exe file, most luckly virus. I want send email to "abuse" guys. Can you help me sort out email headers info for that. Here are the few headers. Thanks.


X-From_: james@TiredToBeSingle.com Sun Nov 16 17:22:20 2003
Return-Path: <james@TiredToBeSingle.com>
Received: from mx200.megamailservers.com (mx2.megamailservers.com [216.251.32.110])
by mail34.internethostingsolutions.com (8.12.10/8.12.9) with ESMTP id hAGMMKDH011695
for <CustomerService@TiredToBeSingle.com>; Sun, 16 Nov 2003 17:22:20 -0500 (EST)
Received: from localhost (h-168.creator.dp.ua [195.248.180.168] (may be forged))
by mx200.megamailservers.com (8.12.10/8.12.10) with SMTP id hAGMM1ck001695
for <CustomerService@TiredToBeSingle.com>; Sun, 16 Nov 2003 17:22:11 -0500 (EST)
Date: Sun, 16 Nov 2003 17:22:01 -0500 (EST)
Message-Id: <200311162222.hAGMM1ck001695@mx200.megamailservers.com>
From: james@TiredToBeSingle.com
To: CustomerService <CustomerService@TiredToBeSingle.com>
Reply-To: james@TiredToBeSingle.com
X-Mailer: The Bat! (v1.62)
X-Priority: 1 (High)
Subject: Re[2]: our private photos mihmcrwc
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------363C386000040E7"





X-From_: james@TiredToBeSingle.com Mon Nov 17 01:09:54 2003
Return-Path: <james@TiredToBeSingle.com>
Received: from mx200.megamailservers.com (mx2.megamailservers.com [216.251.32.110])
by mail36.internethostingsolutions.com (8.12.10/8.12.9) with ESMTP id hAH69srp085695
for <CustomerService@TiredToBeSingle.com>; Mon, 17 Nov 2003 01:09:54 -0500 (EST)
Received: from localhost (nonstop.a-teleport.com [212.86.243.134])
by mx200.megamailservers.com (8.12.10/8.12.10) with SMTP id hAH68fck021100
for <CustomerService@TiredToBeSingle.com>; Mon, 17 Nov 2003 01:08:54 -0500 (EST)
Date: Mon, 17 Nov 2003 01:08:41 -0500 (EST)
Message-Id: <200311170608.hAH68fck021100@mx200.megamailservers.com>
From: james@TiredToBeSingle.com
To: CustomerService <CustomerService@TiredToBeSingle.com>
Reply-To: james@TiredToBeSingle.com
X-Mailer: The Bat! (v1.62)
X-Priority: 1 (High)
Subject: Re[2]: our private photos isoiaipa
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------11DFB13B0024F22"



X-From_: james@TiredToBeSingle.com Mon Nov 17 01:08:31 2003
Return-Path: <james@TiredToBeSingle.com>
Received: from mx200.megamailservers.com (mx2.megamailservers.com [216.251.32.110])
by mail36.internethostingsolutions.com (8.12.10/8.12.9) with ESMTP id hAH68Urp084502
for <CustomerService@TiredToBeSingle.com>; Mon, 17 Nov 2003 01:08:31 -0500 (EST)
Received: from localhost (nonstop.a-teleport.com [212.86.243.134])
by mx200.megamailservers.com (8.12.10/8.12.10) with SMTP id hAH67Wck020769
for <CustomerService@TiredToBeSingle.com>; Mon, 17 Nov 2003 01:07:52 -0500 (EST)
Date: Mon, 17 Nov 2003 01:07:32 -0500 (EST)
Message-Id: <200311170607.hAH67Wck020769@mx200.megamailservers.com>
From: james@TiredToBeSingle.com
To: CustomerService <CustomerService@TiredToBeSingle.com>
Reply-To: james@TiredToBeSingle.com
X-Mailer: The Bat! (v1.62)
X-Priority: 1 (High)
Subject: Re[2]: our private photos hoahteot
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------AE01D13C0023F6B"
User avatar
A. Fig Lee
Уже с Приветом
Posts: 12072
Joined: 17 Nov 2002 03:41
Location: английская колония

Post by A. Fig Lee »

mx2.megamailservers.com [216.251.32.110]

Если ехе - скорее всего вирус сам по себе.
Верить нельзя никому - даже себе. Мне - можно!
Volant
Уже с Приветом
Posts: 1346
Joined: 22 Sep 2001 09:01
Location: Dallas TX, USA

Re: How to track the source of this email?

Post by Volant »

Return to “Вопросы и новости IT”