Help Tracking an E-Mail Header

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • kmanrox
    aka K-Man
    • Oct 2001
    • 29295
    #1

    Help Tracking an E-Mail Header

    Return-Path: <[email protected]>
    Delivered-To: [email protected]
    Received: (qmail 87934 invoked by uid 1005); 12 May 2003 15:28:02 -0000
    Received: from unknown (HELO 216.130.191.1) (203.146.232.1)
    by tiger.webair.com with SMTP; 12 May 2003 15:28:02 -0000
    Received: from zrv70.vptuceo.net [206.160.120.197] by 216.130.191.1 with ESMTP id <502167-72198>; Mon, 12 May 2003 09:25:55 -0600
    Message-ID: <9$4h2$u$ss-6-25-c39i6-1-1gl@ezk9e6ymq>
    From: "TEddy" <[email protected]>
    To: <[email protected]>
    Subject: tester bulk mailer
    Date: Mon, 12 May 03 09:25:55 GMT
    X-Mailer: Microsoft Outlook, Build 10.0.2627
    MIME-Version: 1.0
    Content-Type: multipart/alternative;
    boundary="._94F479910_D83"
    X-Priority: 3
    X-MSMail-Priority: Normal


    i tried it on spamcop, but i dont believe it... any ideas expertz?
    Crypto HODLr
    Crypto mining
    Angel investor
    Tags: None
    • Ludedude
      Suck it!
      • Jun 2001
      • 4432
      #2
      I don't know what you're looking for, but that email originated from Sprint's network somewhere. There's nothing else to tell about it.

      05/12/03 11:34:45 IP block 206.160.120.197
      Trying 206.160.120.197 at ARIN
      Trying 206.160.120 at ARIN

      OrgName: Sprint
      OrgID: SPRN
      Address: 12502 Sunrise Valley Dr.
      City: Reston
      StateProv: VA
      PostalCode: 20196
      Country: US

      NetRange: 206.160.0.0 - 206.160.255.255
      CIDR: 206.160.0.0/16
      NetName: SPRINT-S
      NetHandle: NET-206-160-0-0-1
      Parent: NET-206-0-0-0-0
      NetType: Direct Allocation
      NameServer: NS1-AUTH.SPRINTLINK.NET
      NameServer: NS2-AUTH.SPRINTLINK.NET
      NameServer: NS3-AUTH.SPRINTLINK.NET
      Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
      RegDate: 1995-10-06
      Updated: 1996-09-10

      TechHandle: SPRINT-NOC-ARIN
      TechName: Sprintlink (Sprint)
      TechPhone: +1-800-232-6895
      TechEmail: [email protected]

      OrgTechHandle: ARINS-ARIN
      OrgTechName: arin-sprint-iprequest
      OrgTechPhone: +1-800-232-3458
      OrgTechEmail: [email protected]

      # ARIN WHOIS database, last updated 2003-05-11 20:10
      # Enter ? for additional hints on searching ARIN's WHOIS database.

        Comment

        • grumpy
          Too lazy to set a custom title
          • Jan 2002
          • 9870
          #3
          Search results for: 216.130.191.1


          OrgName: Webair Internet Development Inc
          OrgID: WAIR
          Address: 333 Jericho Tpke
          Address: Suite 200
          City: Jericho
          StateProv: NY
          PostalCode: 11753
          Country: US

          NetRange: 216.130.160.0 - 216.130.191.255
          CIDR: 216.130.160.0/19
          NetName: WEBAIRINTERNET
          NetHandle: NET-216-130-160-0-1
          Parent: NET-216-0-0-0-0
          NetType: Direct Allocation
          NameServer: NS.WEBAIR.NET
          NameServer: NS2.WEBAIR.NET
          Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
          RegDate: 2001-03-12
          Updated: 2001-11-14

          TechHandle: ZW64-ARIN
          TechName: WEBAIR-NOC
          TechPhone: +1-516-938-4100
          TechEmail: [email protected]

          OrgTechHandle: ZW64-ARIN
          OrgTechName: WEBAIR-NOC
          OrgTechPhone: +1-516-938-4100
          OrgTechEmail: [email protected]

          OrgNOCHandle: ZW64-ARIN
          OrgNOCName: WEBAIR-NOC
          OrgNOCPhone: +1-516-938-4100
          OrgNOCEmail: [email protected]
          Don't let greediness blur your vision | You gotta let some shit slide
          icq - 441-456-888

            Comment

            • grumpy
              Too lazy to set a custom title
              • Jan 2002
              • 9870
              #4
              inetnum: 203.146.0.0 - 203.146.255.255
              netname: LOXINFO-TH
              descr: Loxley Information Company Ltd.
              descr: 304 Suapah Rd, Promprab, Promprab Suttruphai, Bangkok
              country: TH
              admin-c: LIA1-AP
              tech-c: LIA1-AP
              remarks: This is an Aggregated objects from the small /22s.
              mnt-by: APNIC-HM
              mnt-lower: LOXINFO-IS
              changed: [email protected] 20001123
              status: ALLOCATED PORTABLE
              changed: [email protected] 20030313
              source: APNIC

              role: Loxinfo IP Admins
              address: 304 Suapah Rd, Pomprab
              address: Pomprab Suttruphai,Bangkok
              country: TH
              phone: +662 6225678
              fax-no: +662 6228380
              e-mail: [email protected]
              admin-c: DL85-AP
              tech-c: DL85-AP
              nic-hdl: LIA1-AP
              mnt-by: LOXINFO-IS
              changed: [email protected] 20020312
              source: APNIC
              Don't let greediness blur your vision | You gotta let some shit slide
              icq - 441-456-888

                Comment

                • kmanrox
                  aka K-Man
                  • Oct 2001
                  • 29295
                  #5
                  ahh thx grumpy, i knew it was sent from thailand, haha you just helped me bust some posing, thx =)) i got one more email i'd like a trace on if you dont mind using grump's methods, if you could...
                  Crypto HODLr
                  Crypto mining
                  Angel investor

                    Comment

                    • chupacabra
                      Confirmed User
                      • Sep 2002
                      • 3626
                      #6
                      kman, is lox-info still as spotty as they used to be when outside bangkok? i found 'easylife' to have much better connectivity all around..
                      ...promise her a defamation, tell her where the rain will fall..

                        Comment

                        • grumpy
                          Too lazy to set a custom title
                          • Jan 2002
                          • 9870
                          #7
                          Originally posted by kmanrox
                          ahh thx grumpy, i knew it was sent from thailand, haha you just helped me bust some posing, thx =)) i got one more email i'd like a trace on if you dont mind using grump's methods, if you could...
                          sure...post it
                          Don't let greediness blur your vision | You gotta let some shit slide
                          icq - 441-456-888

                            Comment

                            • kmanrox
                              aka K-Man
                              • Oct 2001
                              • 29295
                              #8
                              Return-Path: <[email protected]>
                              Delivered-To: [email protected]
                              Received: (qmail 40036 invoked by uid 1005); 12 May 2003 19:48:22 -0000
                              Received: from unknown (HELO 212.216.22.69) (210.99.180.99)
                              by tiger.webair.com with SMTP; 12 May 2003 19:48:22 -0000
                              Return-Path: Received: from 105.183.205.243 ([105.183.205.243]) by smtp-server1.cfl.rr.com with QMQP; May, 13 2003 3:42:30 AM -0000
                              Received: from [130.91.58.120] by mta6.snfc21.pbi.net with SMTP; May, 13 2003 2:19:42 AM +1100
                              Received: from unknown (HELO web13708.mail.yahoo.com) (141.52.163.69) by smtp4.cyberec.com with SMTP; May, 13 2003 1:20:34 AM -0200
                              From: Kevin <[email protected]>
                              To: [email protected]
                              Subject: ....
                              Sender: Kevin <[email protected]>
                              Mime-Version: 1.0
                              Content-Type: text/html; charset="iso-8859-1"
                              Date: Tue, 13 May 2003 03:48:51 -0400
                              X-Mailer: The Bat! (v1.52f) Business
                              Crypto HODLr
                              Crypto mining
                              Angel investor

                                Comment

                                Previous template Next
                                Working...