自由电 发表于 2006-12-26 10:48:43

如果追查Email邮件来源?大家进来帮帮忙!

如果追查Email邮件来源?大家进来帮帮忙!



事件是这样子的,本公司有一个员工发恶意邮件到公司邮箱,攻击公司管理层,现在上面很生气,不知道大家有没有办法可以追查到从那里发过来的啊?请各位师兄帮帮忙啊!
现在我把邮件的信头发出来,请大家分析一下!

Received: from m13-117.163.com (unknown )
      by app2 (Coremail) with SMTP id wKgADIZAVfWt8I1FoPfcLw==.31131S2;
      Sun, 24 Dec 2006 11:14:53 +0800 (CST)
Received: from 192.168.208.47(211.139.190.122) (
192.168.208.47(211.139.190.122) ) by
webmail-app117 (Coremail) ; Sun, 24 Dec 2006 11:13:26 +0800 (CST)
MIME-Version: 1.0
Message-ID: <458DF056.0000EA.13845@bj163app117.163.com>
Date: Sun, 24 Dec 2006 11:13:26 +0800 (CST)
From: icacdep@163.com
To: iscdachina@963.net
Cc: dragonhk@isc.com.hk
Subject: cateye produc
X-Priority: 3
X-Originating-IP:
X-Mailer: <!-- CoreMail Version 3.1_dev Copyright (c) 2002-2006 www.mailtech.cn -->
163com
Content-Type: Multipart/Alternative; boundary="Boundary-=_CxxFToSkAINkEJMHsavAYvfKCPwm"


--Boundary-=_CxxFToSkAINkEJMHsavAYvfKCPwm
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64

自由电 发表于 2006-12-26 10:49:11

这是另外一个邮件,大家快快来研究!
Received: from m13-121.163.com (unknown )
      by app2 (Coremail) with SMTP id wKgADHfAEBRgz49FEUzLMg==.63350S2;
      Mon, 25 Dec 2006 21:17:20 +0800 (CST)
Received: from 192.168.208.42(211.139.190.131) (
192.168.208.42(211.139.190.131) ) by
webmail-app121 (Coremail) ; Mon, 25 Dec 2006 21:17:03 +0800 (CST)
MIME-Version: 1.0
Message-ID: <458FCF4F.000026.10144@bjapp121.163.com>
Date: Mon, 25 Dec 2006 21:17:03 +0800 (CST)
From: icacdep@163.com
To: "dannychan@963.net" <dannychan@963.net>, "dragonhk@isc.com.hk" <dragonhk@isc.com.hk>
Cc: "iscdachina@963.net" <iscdachina@963.net>, "wei jian dong" <wjdk@szonline.net>
Subject: =?gb2312?B?tPLAz7ui?=
X-Priority: 3
X-Originating-IP:
X-Mailer: <!-- CoreMail Version 3.1_dev Copyright (c) 2002-2006 www.mailtech.cn -->
163com
Content-Type: Multipart/Alternative; boundary="Boundary-=_qPMpzIaqButaqCqdyrIkuaayhrje"


--Boundary-=_qPMpzIaqButaqCqdyrIkuaayhrje
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64
页: [1]
查看完整版本: 如果追查Email邮件来源?大家进来帮帮忙!