邮件服务器-邮件系统-邮件技术论坛(BBS)'s Archiver

海洋科技www.idcsea.com,海外邮件解决方案提供商!

自由电 发表于 2006-12-26 10:48

如果追查Email邮件来源?大家进来帮帮忙!

如果追查Email邮件来源?大家进来帮帮忙!



事件是这样子的,本公司有一个员工发恶意邮件到公司邮箱,攻击公司管理层,现在上面很生气,不知道大家有没有办法可以追查到从那里发过来的啊?请各位师兄帮帮忙啊!
现在我把邮件的信头发出来,请大家分析一下!

Received: from m13-117.163.com (unknown [220.181.13.117])
        by app2 (Coremail) with SMTP id wKgADIZAVfWt8I1FoPfcLw==.31131S2;
        Sun, 24 Dec 2006 11:14:53 +0800 (CST)
Received: from 192.168.208.47(211.139.190.122) (
192.168.208.47(211.139.190.122) [192.168.208.47(211.139.190.122)] ) by
webmail-app117 (Coremail) ; Sun, 24 Dec 2006 11:13:26 +0800 (CST)
MIME-Version: 1.0
Message-ID: <[email]458DF056.0000EA.13845@bj163app117.163.com[/email]>
Date: Sun, 24 Dec 2006 11:13:26 +0800 (CST)
From: [email]icacdep@163.com[/email]
To: [email]iscdachina@963.net[/email]
Cc: [email]dragonhk@isc.com.hk[/email]
Subject: cateye produc
X-Priority: 3
X-Originating-IP: [192.168.208.47(211.139.190.122)]
X-Mailer: <!-- CoreMail Version 3.1_dev Copyright (c) 2002-2006 [url]www.mailtech.cn[/url] -->
163com
Content-Type: Multipart/Alternative; boundary="Boundary-=_CxxFToSkAINkEJMHsavAYvfKCPwm"


--Boundary-=_CxxFToSkAINkEJMHsavAYvfKCPwm
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64

自由电 发表于 2006-12-26 10:49

这是另外一个邮件,大家快快来研究!
Received: from m13-121.163.com (unknown [220.181.13.121])
        by app2 (Coremail) with SMTP id wKgADHfAEBRgz49FEUzLMg==.63350S2;
        Mon, 25 Dec 2006 21:17:20 +0800 (CST)
Received: from 192.168.208.42(211.139.190.131) (
192.168.208.42(211.139.190.131) [192.168.208.42(211.139.190.131)] ) by
webmail-app121 (Coremail) ; Mon, 25 Dec 2006 21:17:03 +0800 (CST)
MIME-Version: 1.0
Message-ID: <[email]458FCF4F.000026.10144@bjapp121.163.com[/email]>
Date: Mon, 25 Dec 2006 21:17:03 +0800 (CST)
From: [email]icacdep@163.com[/email]
To: "[email]dannychan@963.net[/email]" <[email]dannychan@963.net[/email]>, "[email]dragonhk@isc.com.hk[/email]" <[email]dragonhk@isc.com.hk[/email]>
Cc: "[email]iscdachina@963.net[/email]" <[email]iscdachina@963.net[/email]>, "wei jian dong" <[email]wjdk@szonline.net[/email]>
Subject: =?gb2312?B?tPLAz7ui?=
X-Priority: 3
X-Originating-IP: [192.168.208.42(211.139.190.131)]
X-Mailer: <!-- CoreMail Version 3.1_dev Copyright (c) 2002-2006 [url]www.mailtech.cn[/url] -->
163com
Content-Type: Multipart/Alternative; boundary="Boundary-=_qPMpzIaqButaqCqdyrIkuaayhrje"


--Boundary-=_qPMpzIaqButaqCqdyrIkuaayhrje
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64

页: [1]

Powered by Discuz! Archiver 6.1.0  © 2001-2007 Comsenz Inc.