cancel
Showing results for 
Search instead for 
Did you mean: 

Getting Email / Spam IP from headers

N/A

Getting Email / Spam IP from headers

Hi

I keep getting spam from my own domain and I was wondering how do you get the correct IP address of spammers from the headers? I believe the correct address is "[70.101.38.207] (helo=70-101-38-207.dsl2-plymouth.roc.ny.frontiernet.net)" but I'm not quite sure. Are there any online tools which can parse email headers and find the correct spammer IP??


Quote
Envelope-to:
Delivery-date: Sun, 20 Nov 2005 22:19:29 +0000
Received: from rhea.easily.co.uk ([212.53.64.82])
by pih-mxcore05.plus.net with esmtp (PlusNet MXCore v2.00) id 1EdxWz-0003Ol-Ha
for ; Sun, 20 Nov 2005 22:19:29 +0000
Received: from [70.101.38.207] (helo=70-101-38-207.dsl2-plymouth.roc.ny.frontiernet.net)
by rhea.easily.co.uk with smtp (NetBenefit 2.0)
id 1EdxWr-0000Cx-Eb
for ; Sun, 20 Nov 2005 22:19:23 +0000
X-Message-Info: UASLfiPU568vbKLVimZNp5Xui6+OTRUfygt385kCEQYM
Received: from riibmvmjmmax7.t-online.de (24.166.111.96) by lio98-i01.racqi.com.au with Microsoft SMTPSVC(5.0.2195.6824);
Mon, 21 Nov 2005 00:17:16 +0200
Received: from Vickyx726w090bc574ues (24.246.88.193) by ulkygdlplv416.mweb.co.zw
(InterMail vM.5.01.06.05 066-321-501-159-317-9393919) with SMTP
id <54016888884998.UGIL90.gosvp667940.etnic.be @lazarusn647a50uu874sp>
for ; Sun, 20 Nov 2005 21:18:16 -0100
Message-ID: <1276hra592jps58$4636188$hr60rl37@Vickypu3lr073fm5sp>
From:
To:
Subject:


I have removed my email address, I don't want more SPAM :?

tia Smiley
2 REPLIES
Community Veteran
Posts: 14,469
Registered: 30-07-2007

Getting Email / Spam IP from headers

Paste the headers into here and it will tell you the route the email took.

Note: the vast majority of spam originates from compromised systems or the orginating IP address is false or has been spoofed so the chances of you finding who sent it are pretty remote - which is why spam cannot be stopped.
N/A

Getting Email / Spam IP from headers

thanks, checking now