如果追查Email邮件来源?大家进来帮帮忙!
如果追查Email邮件来源?大家进来帮帮忙!事件是这样子的,本公司有一个员工发恶意邮件到公司邮箱,攻击公司管理层,现在上面很生气,不知道大家有没有办法可以追查到从那里发过来的啊?请各位师兄帮帮忙啊!
现在我把邮件的信头发出来,请大家分析一下!
Received: from m13-117.163.com (unknown [220.181.13.117])
by app2 (Coremail) with SMTP id wKgADIZAVfWt8I1FoPfcLw==.31131S2;
Sun, 24 Dec 2006 11:14:53 +0800 (CST)
Received: from 192.168.208.47(211.139.190.122) (
192.168.208.47(211.139.190.122) [192.168.208.47(211.139.190.122)] ) by
webmail-app117 (Coremail) ; Sun, 24 Dec 2006 11:13:26 +0800 (CST)
MIME-Version: 1.0
Message-ID: <[email]458DF056.0000EA.13845@bj163app117.163.com[/email]>
Date: Sun, 24 Dec 2006 11:13:26 +0800 (CST)
From: [email]icacdep@163.com[/email]
To: [email]iscdachina@963.net[/email]
Cc: [email]dragonhk@isc.com.hk[/email]
Subject: cateye produc
X-Priority: 3
X-Originating-IP: [192.168.208.47(211.139.190.122)]
X-Mailer: <!-- CoreMail Version 3.1_dev Copyright (c) 2002-2006 [url]www.mailtech.cn[/url] -->
163com
Content-Type: Multipart/Alternative; boundary="Boundary-=_CxxFToSkAINkEJMHsavAYvfKCPwm"
--Boundary-=_CxxFToSkAINkEJMHsavAYvfKCPwm
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64 这是另外一个邮件,大家快快来研究!
Received: from m13-121.163.com (unknown [220.181.13.121])
by app2 (Coremail) with SMTP id wKgADHfAEBRgz49FEUzLMg==.63350S2;
Mon, 25 Dec 2006 21:17:20 +0800 (CST)
Received: from 192.168.208.42(211.139.190.131) (
192.168.208.42(211.139.190.131) [192.168.208.42(211.139.190.131)] ) by
webmail-app121 (Coremail) ; Mon, 25 Dec 2006 21:17:03 +0800 (CST)
MIME-Version: 1.0
Message-ID: <[email]458FCF4F.000026.10144@bjapp121.163.com[/email]>
Date: Mon, 25 Dec 2006 21:17:03 +0800 (CST)
From: [email]icacdep@163.com[/email]
To: "[email]dannychan@963.net[/email]" <[email]dannychan@963.net[/email]>, "[email]dragonhk@isc.com.hk[/email]" <[email]dragonhk@isc.com.hk[/email]>
Cc: "[email]iscdachina@963.net[/email]" <[email]iscdachina@963.net[/email]>, "wei jian dong" <[email]wjdk@szonline.net[/email]>
Subject: =?gb2312?B?tPLAz7ui?=
X-Priority: 3
X-Originating-IP: [192.168.208.42(211.139.190.131)]
X-Mailer: <!-- CoreMail Version 3.1_dev Copyright (c) 2002-2006 [url]www.mailtech.cn[/url] -->
163com
Content-Type: Multipart/Alternative; boundary="Boundary-=_qPMpzIaqButaqCqdyrIkuaayhrje"
--Boundary-=_qPMpzIaqButaqCqdyrIkuaayhrje
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64
页:
[1]
