Help Tracking an E-Mail Header - GoFuckYourself.com

kmanrox · 05-12-2003, 08:37 AM

by tiger.webair.com with SMTP; 12 May 2003 15:28:02 -0000
Received: from zrv70.vptuceo.net [206.160.120.197] by 216.130.191.1 with ESMTP id <502167-72198>; Mon, 12 May 2003 09:25:55 -0600
Message-ID: <9$4h2$u$ss-6-25-c39i6-1-1gl@ezk9e6ymq>
From: "TEddy" <[email protected]>
To: <[email protected]>
Subject: tester bulk mailer
Date: Mon, 12 May 03 09:25:55 GMT
X-Mailer: Microsoft Outlook, Build 10.0.2627
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="._94F479910_D83"
X-Priority: 3
X-MSMail-Priority: Normal

i tried it on spamcop, but i dont believe it... any ideas expertz?

Ludedude · 05-12-2003, 08:43 AM

I don't know what you're looking for, but that email originated from Sprint's network somewhere. There's nothing else to tell about it.

05/12/03 11:34:45 IP block 206.160.120.197
Trying 206.160.120.197 at ARIN
Trying 206.160.120 at ARIN

OrgName: Sprint
OrgID: SPRN
Address: 12502 Sunrise Valley Dr.
City: Reston
StateProv: VA
PostalCode: 20196
Country: US

NetRange: 206.160.0.0 - 206.160.255.255
CIDR: 206.160.0.0/16
NetName: SPRINT-S
NetHandle: NET-206-160-0-0-1
Parent: NET-206-0-0-0-0
NetType: Direct Allocation
NameServer: NS1-AUTH.SPRINTLINK.NET
NameServer: NS2-AUTH.SPRINTLINK.NET
NameServer: NS3-AUTH.SPRINTLINK.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 1995-10-06
Updated: 1996-09-10

TechHandle: SPRINT-NOC-ARIN
TechName: Sprintlink (Sprint)
TechPhone: +1-800-232-6895
TechEmail: [email protected]

OrgTechHandle: ARINS-ARIN
OrgTechName: arin-sprint-iprequest
OrgTechPhone: +1-800-232-3458
OrgTechEmail: [email protected]

# ARIN WHOIS database, last updated 2003-05-11 20:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

grumpy · 05-12-2003, 08:49 AM

Search results for: 216.130.191.1

OrgName: Webair Internet Development Inc
OrgID: WAIR
Address: 333 Jericho Tpke
Address: Suite 200
City: Jericho
StateProv: NY
PostalCode: 11753
Country: US

NetRange: 216.130.160.0 - 216.130.191.255
CIDR: 216.130.160.0/19
NetName: WEBAIRINTERNET
NetHandle: NET-216-130-160-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: NS.WEBAIR.NET
NameServer: NS2.WEBAIR.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2001-03-12
Updated: 2001-11-14

TechHandle: ZW64-ARIN
TechName: WEBAIR-NOC
TechPhone: +1-516-938-4100
TechEmail: [email protected]

OrgTechHandle: ZW64-ARIN
OrgTechName: WEBAIR-NOC
OrgTechPhone: +1-516-938-4100
OrgTechEmail: [email protected]

OrgNOCHandle: ZW64-ARIN
OrgNOCName: WEBAIR-NOC
OrgNOCPhone: +1-516-938-4100
OrgNOCEmail: [email protected]

grumpy · 05-12-2003, 08:52 AM

inetnum: 203.146.0.0 - 203.146.255.255
netname: LOXINFO-TH
descr: Loxley Information Company Ltd.
descr: 304 Suapah Rd, Promprab, Promprab Suttruphai, Bangkok
country: TH
admin-c: LIA1-AP
tech-c: LIA1-AP
remarks: This is an Aggregated objects from the small /22s.
mnt-by: APNIC-HM
mnt-lower: LOXINFO-IS
changed: [email protected] 20001123
status: ALLOCATED PORTABLE
changed: [email protected] 20030313
source: APNIC

role: Loxinfo IP Admins
address: 304 Suapah Rd, Pomprab
address: Pomprab Suttruphai,Bangkok
country: TH
phone: +662 6225678
fax-no: +662 6228380
e-mail: [email protected]
admin-c: DL85-AP
tech-c: DL85-AP
nic-hdl: LIA1-AP
mnt-by: LOXINFO-IS
changed: [email protected] 20020312
source: APNIC

kmanrox · 05-12-2003, 08:56 AM

ahh thx grumpy, i knew it was sent from thailand, haha you just helped me bust some posing, thx =)) i got one more email i'd like a trace on if you dont mind using grump's methods, if you could...

chupacabra · 05-12-2003, 09:09 AM

kman, is lox-info still as spotty as they used to be when outside bangkok? i found 'easylife' to have much better connectivity all around..

grumpy · 05-12-2003, 09:10 AM

Quote:

Originally posted by kmanrox
ahh thx grumpy, i knew it was sent from thailand, haha you just helped me bust some posing, thx =)) i got one more email i'd like a trace on if you dont mind using grump's methods, if you could...

sure...post it

kmanrox · 05-12-2003, 12:56 PM

Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: (qmail 40036 invoked by uid 1005); 12 May 2003 19:48:22 -0000
Received: from unknown (HELO 212.216.22.69) (210.99.180.99)
by tiger.webair.com with SMTP; 12 May 2003 19:48:22 -0000
Return-Path: Received: from 105.183.205.243 ([105.183.205.243]) by smtp-server1.cfl.rr.com with QMQP; May, 13 2003 3:42:30 AM -0000
Received: from [130.91.58.120] by mta6.snfc21.pbi.net with SMTP; May, 13 2003 2:19:42 AM +1100
Received: from unknown (HELO web13708.mail.yahoo.com) (141.52.163.69) by smtp4.cyberec.com with SMTP; May, 13 2003 1:20:34 AM -0200
From: Kevin <[email protected]>
To: [email protected]
Subject: ....
Sender: Kevin <[email protected]>
Mime-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Date: Tue, 13 May 2003 03:48:51 -0400
X-Mailer: The Bat! (v1.52f) Business

05-12-2003, 08:37 AM	#1
kmanrox aka K-Man Industry Role: Join Date: Oct 2001 Location: The Gutter Posts: 29,295	Help Tracking an E-Mail Header Return-Path: <[email protected]> Delivered-To: [email protected] Received: (qmail 87934 invoked by uid 1005); 12 May 2003 15:28:02 -0000 Received: from unknown (HELO 216.130.191.1) (203.146.232.1) by tiger.webair.com with SMTP; 12 May 2003 15:28:02 -0000 Received: from zrv70.vptuceo.net [206.160.120.197] by 216.130.191.1 with ESMTP id <502167-72198>; Mon, 12 May 2003 09:25:55 -0600 Message-ID: <9$4h2$u$ss-6-25-c39i6-1-1gl@ezk9e6ymq> From: "TEddy" <[email protected]> To: <[email protected]> Subject: tester bulk mailer Date: Mon, 12 May 03 09:25:55 GMT X-Mailer: Microsoft Outlook, Build 10.0.2627 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="._94F479910_D83" X-Priority: 3 X-MSMail-Priority: Normal i tried it on spamcop, but i dont believe it... any ideas expertz?

05-12-2003, 08:43 AM	#2
Ludedude Suck it! Industry Role: Join Date: Jun 2001 Location: Who wants to know? Posts: 4,432	I don't know what you're looking for, but that email originated from Sprint's network somewhere. There's nothing else to tell about it. 05/12/03 11:34:45 IP block 206.160.120.197 Trying 206.160.120.197 at ARIN Trying 206.160.120 at ARIN OrgName: Sprint OrgID: SPRN Address: 12502 Sunrise Valley Dr. City: Reston StateProv: VA PostalCode: 20196 Country: US NetRange: 206.160.0.0 - 206.160.255.255 CIDR: 206.160.0.0/16 NetName: SPRINT-S NetHandle: NET-206-160-0-0-1 Parent: NET-206-0-0-0-0 NetType: Direct Allocation NameServer: NS1-AUTH.SPRINTLINK.NET NameServer: NS2-AUTH.SPRINTLINK.NET NameServer: NS3-AUTH.SPRINTLINK.NET Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE RegDate: 1995-10-06 Updated: 1996-09-10 TechHandle: SPRINT-NOC-ARIN TechName: Sprintlink (Sprint) TechPhone: +1-800-232-6895 TechEmail: [email protected] OrgTechHandle: ARINS-ARIN OrgTechName: arin-sprint-iprequest OrgTechPhone: +1-800-232-3458 OrgTechEmail: [email protected] # ARIN WHOIS database, last updated 2003-05-11 20:10 # Enter ? for additional hints on searching ARIN's WHOIS database. __________________

05-12-2003, 08:49 AM	#3
grumpy Too lazy to set a custom title Join Date: Jan 2002 Location: Holland Posts: 9,870	Search results for: 216.130.191.1 OrgName: Webair Internet Development Inc OrgID: WAIR Address: 333 Jericho Tpke Address: Suite 200 City: Jericho StateProv: NY PostalCode: 11753 Country: US NetRange: 216.130.160.0 - 216.130.191.255 CIDR: 216.130.160.0/19 NetName: WEBAIRINTERNET NetHandle: NET-216-130-160-0-1 Parent: NET-216-0-0-0-0 NetType: Direct Allocation NameServer: NS.WEBAIR.NET NameServer: NS2.WEBAIR.NET Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE RegDate: 2001-03-12 Updated: 2001-11-14 TechHandle: ZW64-ARIN TechName: WEBAIR-NOC TechPhone: +1-516-938-4100 TechEmail: [email protected] OrgTechHandle: ZW64-ARIN OrgTechName: WEBAIR-NOC OrgTechPhone: +1-516-938-4100 OrgTechEmail: [email protected] OrgNOCHandle: ZW64-ARIN OrgNOCName: WEBAIR-NOC OrgNOCPhone: +1-516-938-4100 OrgNOCEmail: [email protected] __________________ Don't let greediness blur your vision \| You gotta let some shit slide icq - 441-456-888

05-12-2003, 08:52 AM	#4
grumpy Too lazy to set a custom title Join Date: Jan 2002 Location: Holland Posts: 9,870	inetnum: 203.146.0.0 - 203.146.255.255 netname: LOXINFO-TH descr: Loxley Information Company Ltd. descr: 304 Suapah Rd, Promprab, Promprab Suttruphai, Bangkok country: TH admin-c: LIA1-AP tech-c: LIA1-AP remarks: This is an Aggregated objects from the small /22s. mnt-by: APNIC-HM mnt-lower: LOXINFO-IS changed: [email protected] 20001123 status: ALLOCATED PORTABLE changed: [email protected] 20030313 source: APNIC role: Loxinfo IP Admins address: 304 Suapah Rd, Pomprab address: Pomprab Suttruphai,Bangkok country: TH phone: +662 6225678 fax-no: +662 6228380 e-mail: [email protected] admin-c: DL85-AP tech-c: DL85-AP nic-hdl: LIA1-AP mnt-by: LOXINFO-IS changed: [email protected] 20020312 source: APNIC __________________ Don't let greediness blur your vision \| You gotta let some shit slide icq - 441-456-888

05-12-2003, 08:56 AM	#5
kmanrox aka K-Man Industry Role: Join Date: Oct 2001 Location: The Gutter Posts: 29,295	ahh thx grumpy, i knew it was sent from thailand, haha you just helped me bust some posing, thx =)) i got one more email i'd like a trace on if you dont mind using grump's methods, if you could...

05-12-2003, 09:09 AM	#6
chupacabra Confirmed User Join Date: Sep 2002 Posts: 3,626	kman, is lox-info still as spotty as they used to be when outside bangkok? i found 'easylife' to have much better connectivity all around..

05-12-2003, 12:56 PM	#8
kmanrox aka K-Man Industry Role: Join Date: Oct 2001 Location: The Gutter Posts: 29,295	Return-Path: <[email protected]> Delivered-To: [email protected] Received: (qmail 40036 invoked by uid 1005); 12 May 2003 19:48:22 -0000 Received: from unknown (HELO 212.216.22.69) (210.99.180.99) by tiger.webair.com with SMTP; 12 May 2003 19:48:22 -0000 Return-Path: Received: from 105.183.205.243 ([105.183.205.243]) by smtp-server1.cfl.rr.com with QMQP; May, 13 2003 3:42:30 AM -0000 Received: from [130.91.58.120] by mta6.snfc21.pbi.net with SMTP; May, 13 2003 2:19:42 AM +1100 Received: from unknown (HELO web13708.mail.yahoo.com) (141.52.163.69) by smtp4.cyberec.com with SMTP; May, 13 2003 1:20:34 AM -0200 From: Kevin <[email protected]> To: [email protected] Subject: .... Sender: Kevin <[email protected]> Mime-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Date: Tue, 13 May 2003 03:48:51 -0400 X-Mailer: The Bat! (v1.52f) Business