Best Answer - Chosen by Voters
if you are getting this e-mails on yahoo you can view the external IP address of the originator's computer
just go to:
Open the e-mail
On the main body of the email on the right hand side click on compact head it then gives the option to click full header
this is going to give you a long list of numbers and letters.
EXAMPLE:
X-Apparently-To: YOURYAHOOID@yahoo.com via 66.196.97.56; Thu, 27 Dec 2007 22:42:31 -0800
X-Originating-IP: [64.49.252.101]
Return-Path: <noresponse.1@driverguide.net>
Authentication-Results: mta170.mail.re3.yahoo.com from=driverguide.net; domainkeys=neutral (no sig)
Received: from 64.49.252.101 (EHLO eml.driverguide.com) (64.49.252.101) by mta170.mail.re3.yahoo.com with SMTP; Thu, 27 Dec 2007 22:40:49 -0800
Received: from web1.driverguide.com (beta.driverguide.com [192.168.1.211]) by eml.driverguide.com (8.12.11.20060308/8.12.11) with ESMTP id lBS6enaR014626 for <YOURYAHOOID@yahoo.com>; Fri, 28 Dec 2007 00:40:49 -0600
Received: from web1.driverguide.com (localhost [127.0.0.1]) by web1.driverguide.com (8.12.11.20060308/8.12.11) with ESMTP id lBS6enYK027612 for <YOURYAHOOID@yahoo.com>; Fri, 28 Dec 2007 00:40:49 -0600
Received: (from apache@localhost) by web1.driverguide.com (8.12.11.20060308/8.12.11/Submit) id lBS6enEV027608; Fri, 28 Dec 2007 00:40:49 -0600
Date: Fri, 28 Dec 2007 00:40:49 -0600
Message-Id: <200712280640.lBS6enEV027608@web1.driver…
To: YOURYAHOOID@yahoo.com
Subject: DriverGuide.com - Password Change Link
From: "Driverguide" <join.1@driverguide.net> Add to Address Book Add Mobile Alert
X-Sender: <join.1@driverguide.net >
X-Mailer: PHP
X-Priority: 1
Content-Length: 597
look for: "X-Originating-IP: [64.49.252.101] "
this is the IP address of the person who sent you this
Please note that its kind of worthless to try to trace the "internal ip" of this person due to the fact that your are going to end up with an ip like" 192.168.0.1" and that is of no help.
if I was you I would trace the originating IP (note that you can get a "full ip resolution" if you open your command line go to Start> Click on RUN > type CMD if you have windows XP and press enter
this will open a black screen. Once there type IPCONFIG -a 76.222.252.60
Press ENTER
this will give you some thing like this:
C:\>ping -a 76.222.252.60
Pinging adsl-76-222-252-60.dsl.frs2ca.sbcglobal.… [76.222.252.60] with 32 byte
s of data:
Reply from 76.222.252.60: bytes=32 time=38ms TTL=51
Reply from 76.222.252.60: bytes=32 time=88ms TTL=51
Reply from 76.222.252.60: bytes=32 time=41ms TTL=51
Reply from 76.222.252.60: bytes=32 time=38ms TTL=51
Ping statistics for 76.222.252.60:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 38ms, Maximum = 88ms, Average = 51ms
where the full IP is: adsl-76-222-252-60.dsl.frs2ca.sbcglobal.…
this indicates that this person's internet service provider is SBC Global
all internet company's have a "Service Abuse" department for example AT&T's http://helpme.att.net/servabuse.php
you can contact this internet service provider and let them know the circumstance (they will normally call you back within 24hrs)
they can notify the owner of this network (wired or wireless) who should be able to check his router logs and find out the IP and MAC address of the “intruder”
than use a sniffer software such as DONTSTEALMYWIFI to view the internet activity of this person.
you can also get the USER ID date and exact time of this message (and if you can get the server name wher this come from this by doing netstat -n) and report to yahoo or whom ever the IM provider is here is a link to yahoo's service abuse:
http://help.yahoo.com/help/uk/mesg/abuse…
I HOPE THIS HELPS I KNOW IS LONG BUT I’M TRYING TO INCLUDE EVERY THING I KNOW TO HELP YOU AS MUCH AS I CAN.
PLEASE CONTACT ME IF YOU NEED ANY MORE HELP.
********YET ONE MORE THING: If this person is using yahoo messenger it realy realy hard to trace his or her IP due to the fact that messenger sends messenges to a server who in turn sends this message to a database server (with a list of users) who sends the message to you and backwards this means that if you run netstat -n you will get an IP but it will be the IP of the Instant message service provider like yahoo for example:
cs20.msg.dcn.yahoo.com:5050 ESTABLISHED
I hope this helps and have a HAPPY NEW YEAR!
just go to:
Open the e-mail
On the main body of the email on the right hand side click on compact head it then gives the option to click full header
this is going to give you a long list of numbers and letters.
EXAMPLE:
X-Apparently-To: YOURYAHOOID@yahoo.com via 66.196.97.56; Thu, 27 Dec 2007 22:42:31 -0800
X-Originating-IP: [64.49.252.101]
Return-Path: <noresponse.1@driverguide.net>
Authentication-Results: mta170.mail.re3.yahoo.com from=driverguide.net; domainkeys=neutral (no sig)
Received: from 64.49.252.101 (EHLO eml.driverguide.com) (64.49.252.101) by mta170.mail.re3.yahoo.com with SMTP; Thu, 27 Dec 2007 22:40:49 -0800
Received: from web1.driverguide.com (beta.driverguide.com [192.168.1.211]) by eml.driverguide.com (8.12.11.20060308/8.12.11) with ESMTP id lBS6enaR014626 for <YOURYAHOOID@yahoo.com>; Fri, 28 Dec 2007 00:40:49 -0600
Received: from web1.driverguide.com (localhost [127.0.0.1]) by web1.driverguide.com (8.12.11.20060308/8.12.11) with ESMTP id lBS6enYK027612 for <YOURYAHOOID@yahoo.com>; Fri, 28 Dec 2007 00:40:49 -0600
Received: (from apache@localhost) by web1.driverguide.com (8.12.11.20060308/8.12.11/Submit) id lBS6enEV027608; Fri, 28 Dec 2007 00:40:49 -0600
Date: Fri, 28 Dec 2007 00:40:49 -0600
Message-Id: <200712280640.lBS6enEV027608@web1.driver…
To: YOURYAHOOID@yahoo.com
Subject: DriverGuide.com - Password Change Link
From: "Driverguide" <join.1@driverguide.net> Add to Address Book Add Mobile Alert
X-Sender: <join.1@driverguide.net >
X-Mailer: PHP
X-Priority: 1
Content-Length: 597
look for: "X-Originating-IP: [64.49.252.101] "
this is the IP address of the person who sent you this
Please note that its kind of worthless to try to trace the "internal ip" of this person due to the fact that your are going to end up with an ip like" 192.168.0.1" and that is of no help.
if I was you I would trace the originating IP (note that you can get a "full ip resolution" if you open your command line go to Start> Click on RUN > type CMD if you have windows XP and press enter
this will open a black screen. Once there type IPCONFIG -a 76.222.252.60
Press ENTER
this will give you some thing like this:
C:\>ping -a 76.222.252.60
Pinging adsl-76-222-252-60.dsl.frs2ca.sbcglobal.… [76.222.252.60] with 32 byte
s of data:
Reply from 76.222.252.60: bytes=32 time=38ms TTL=51
Reply from 76.222.252.60: bytes=32 time=88ms TTL=51
Reply from 76.222.252.60: bytes=32 time=41ms TTL=51
Reply from 76.222.252.60: bytes=32 time=38ms TTL=51
Ping statistics for 76.222.252.60:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 38ms, Maximum = 88ms, Average = 51ms
where the full IP is: adsl-76-222-252-60.dsl.frs2ca.sbcglobal.…
this indicates that this person's internet service provider is SBC Global
all internet company's have a "Service Abuse" department for example AT&T's http://helpme.att.net/servabuse.php
you can contact this internet service provider and let them know the circumstance (they will normally call you back within 24hrs)
they can notify the owner of this network (wired or wireless) who should be able to check his router logs and find out the IP and MAC address of the “intruder”
than use a sniffer software such as DONTSTEALMYWIFI to view the internet activity of this person.
you can also get the USER ID date and exact time of this message (and if you can get the server name wher this come from this by doing netstat -n) and report to yahoo or whom ever the IM provider is here is a link to yahoo's service abuse:
http://help.yahoo.com/help/uk/mesg/abuse…
I HOPE THIS HELPS I KNOW IS LONG BUT I’M TRYING TO INCLUDE EVERY THING I KNOW TO HELP YOU AS MUCH AS I CAN.
PLEASE CONTACT ME IF YOU NEED ANY MORE HELP.
********YET ONE MORE THING: If this person is using yahoo messenger it realy realy hard to trace his or her IP due to the fact that messenger sends messenges to a server who in turn sends this message to a database server (with a list of users) who sends the message to you and backwards this means that if you run netstat -n you will get an IP but it will be the IP of the Instant message service provider like yahoo for example:
cs20.msg.dcn.yahoo.com:5050 ESTABLISHED
I hope this helps and have a HAPPY NEW YEAR!
Source(s):
13years of experience as technician and consultant for High-Tech companies
http://help.yahoo.com/help/uk/mesg/abuse…
http://helpme.att.net/servabuse.php
http://help.yahoo.com/help/uk/mesg/abuse…
http://helpme.att.net/servabuse.php
Tidak ada komentar:
Posting Komentar