Hot Downloads

Welcome, Guest
Username: Password: Remember me
  • Page:
  • 1
  • 2

TOPIC: how do i locate the sender

how do i locate the sender 11 years 2 months ago #10031

  • constant
  • constant's Avatar
  • Offline
  • New Member
  • Posts: 1
  • Karma: 0
day ago i receive unknow email message. my problem is i want to locate the area;city or country where this email come from. your help will be very appreciate.thanks
The administrator has disabled public write access.

Re: how do i locate the sender 11 years 2 months ago #10036

  • Tarun
  • Tarun's Avatar
  • Offline
  • Distinguished Member
  • Posts: 138
  • Karma: 0
Ok, i would expand the header of my e-mail.

Look for some thing like:

X-Originating-IP: [202.43.219.155]

in the header itself.

Take the IP go to Dns Stuff & put the IP in the IP Address test, in the WHOIS box & click the button next to it.

That would give me all the information about the location :wink:
Next would be SP (Service Provider)
CCNA, CCNP (Switching), CCIE#20640
The administrator has disabled public write access.

Detective Work 11 years 2 months ago #10088

  • TheBishop
  • TheBishop's Avatar
  • Offline
  • Moderator
  • Posts: 1719
  • Thank you received: 8
  • Karma: 5
www.samspade.org offers a collection of on-line tools for doing whois lookups etc
The administrator has disabled public write access.

Re: how do i locate the sender 11 years 2 months ago #10097

  • DaLight
  • DaLight's Avatar
  • Offline
  • Honored Member
  • Posts: 1302
  • Karma: 1
You can also download Sam Spade for Windows from the same website which runs on your PC. A very useful tool.
The administrator has disabled public write access.

Re: how do i locate the sender 11 years 2 months ago #10178

  • sahirh
  • sahirh's Avatar
  • Offline
  • Honored Member
  • Posts: 1700
  • Karma: 0
The simplest way for a standard email is

View the headers, locate the last 'Recieved from' header (that means the bottom-most one, when you read the headers from top to bottom). That will say something similar to:

Recieved from x.x.x.x by y.y.y.y via HTTP

That x.x.x.x would be the originating IP.. however, mail relays, proxies etc will complicate this.. thus you look for the X-Originating IP header.
Sahir Hidayatullah.
Firewall.cx Staff - Associate Editor & Security Advisor
tftfotw.blogspot.com
The administrator has disabled public write access.

Re: how do i locate the sender 11 years 2 months ago #10189

  • Tarun
  • Tarun's Avatar
  • Offline
  • Distinguished Member
  • Posts: 138
  • Karma: 0
That x.x.x.x would be the originating IP.. however, mail relays, proxies etc will complicate this.. thus you look for the X-Originating IP header.

Well, this post reminds me of the fact "sahirh" that though i know how to decipher a little bit of those headers but there are still some places i falter on. Is there any specific resource where i can find what each & every entry in the header means ?

Thanks...
Next would be SP (Service Provider)
CCNA, CCNP (Switching), CCIE#20640
The administrator has disabled public write access.
  • Page:
  • 1
  • 2
Time to create page: 0.085 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup