Where did the email really come from?
I receive emails (hotmail.com) from someone in Bucharest. Romania. When I use an IP Locator and and insert the Original IP address it comes back as being sent from Alicante, Spain some 1500 miles and 2 time zones from where the person "says" they are (in Bucharest). The ISP come up as "Telfonica de Espana" and they do not have any ISPs in Romania. Is this possible, and if so, how could it be accomplished? Or in your expert opinion, are they really in Spain?
Software/Hardware used:
Software/Hardware used:
ASKED:
February 7, 2009 7:21 PM
UPDATED:
February 9, 2009 3:20 PM
Answer Wiki:
SPAMers will often say that they are in one country when they are actually in another country.
SPAM is typically sent via a botnet made up of computers all over the internet, so the SPAM could pretty much be coming from any countery in the world. The person sending the SPAM could be in any country.
===============
The ISP could be using a network of email relay servers. The email client could submit the message to one server locally and then it get rerouted through the ISP network and go out a different server entirely. You would need to look through the entire header to trace the message path. Just looking at the last IP address does not give you the whole story. A good website for SMTP header analysis is <a href="http://headertool.apelord.com/">http://headertool.apelord.com/</a>
To see all answers submitted to the Answer Wiki: View Answer History.
RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
