email headers

george2

Daemon Poster
Messages
553
Now I get alot of sapm mail and I have enabled the headers to see who sent it but i don't know how to read the headers. Could someone please tell me how to tell where it came from.
 
Ok This is what headers should look like
There are a few basic parts that are the ones that you want
I sent this email to meself and i cleared out my up address for obvious reasons

MIME-Version: 1.0
X-Originating-IP: [xxx.xxx.xxx.xx]
X-Originating-Email: [xxx@hotmail.com]
X-Sender: xxx@hotmail.com
Received: from hotmail.com ([65.54.162.43]) by mc12-f5.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Tue, 9 Aug 2005 05:35:26 -0700
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Tue, 9 Aug 2005 05:35:25 -0700
Received: from 65.54.162.200 by by108fd.bay108.hotmail.msn.com with HTTP;Tue, 09 Aug 2005 12:35:25 GMT
X-Message-Info: JGTYoYF78jEHjJx36Oi8+Z3TmmkSEdPt4iogl2abg+M=
X-OriginalArrivalTime: 09 Aug 2005 12:35:25.0924 (UTC) FILETIME=[D15EA240:01C59CDE]
Return-Path: xxx@hotmail.com

The originating IP address is the main one that you want, it'll identify the computer in which it was sent from
That is actually all you need, from there you can use the ip address to find out the hostname of the computer and then the company, then you can report the ip address
If you want, you can find a rough location, or atleast the time zone, but not the exact location
 
Back
Top Bottom