
Morning Good people, Am after someone who has been spreading some malicious emails; my question is there a way I can track who sent or where the email was sent from? Say IP address etc etc -- Regards, Robert.

Check email headers. To be assisted further give email client u r using even if its gmail/yahoo etc. On 22 March 2010 09:29, Robert <robbydeno@googlemail.com> wrote:
Morning Good people,
Am after someone who has been spreading some malicious emails; my question is there a way I can track who sent or where the email was sent from? Say IP address etc etc
-- Regards, Robert.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Hi Robert, IP address can be tracked. I know what you are experiencing and its becoming very common so just change your current password for now and it will take another few days for someone to hack your password again. Also separate your private mail box from the one you are using on facebook and other social networks asap. Regards, Wilson. On Mon, Mar 22, 2010 at 9:36 AM, Thuo Wilson <lixton@gmail.com> wrote:
Check email headers. To be assisted further give email client u r using even if its gmail/yahoo etc.
On 22 March 2010 09:29, Robert <robbydeno@googlemail.com> wrote:
Morning Good people,
Am after someone who has been spreading some malicious emails; my question is there a way I can track who sent or where the email was sent from? Say IP address etc etc
-- Regards, Robert.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Kind Regards, Wilson Bandi Mobile: +254-726-786481

@ Wilson...looks like Robert's issue is receiving the nasty mails and not him spamming out. On Mon, Mar 22, 2010 at 9:48 AM, Wilson Bandi <bandson67@gmail.com> wrote:
Hi Robert,
IP address can be tracked. I know what you are experiencing and its becoming very common so just change your current password for now and it will take another few days for someone to hack your password again. Also separate your private mail box from the one you are using on facebook and other social networks asap.
Regards,
Wilson.
On Mon, Mar 22, 2010 at 9:36 AM, Thuo Wilson <lixton@gmail.com> wrote:
Check email headers. To be assisted further give email client u r using even if its gmail/yahoo etc.
On 22 March 2010 09:29, Robert <robbydeno@googlemail.com> wrote:
Morning Good people,
Am after someone who has been spreading some malicious emails; my question is there a way I can track who sent or where the email was sent from? Say IP address etc etc
-- Regards, Robert.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Kind Regards,
Wilson Bandi
Mobile: +254-726-786481
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Can robert forward me one of the emails? Wilson. On Mon, Mar 22, 2010 at 10:27 AM, Cikz <jociku@gmail.com> wrote:
@ Wilson...looks like Robert's issue is receiving the nasty mails and not him spamming out.
On Mon, Mar 22, 2010 at 9:48 AM, Wilson Bandi <bandson67@gmail.com> wrote:
Hi Robert,
IP address can be tracked. I know what you are experiencing and its becoming very common so just change your current password for now and it will take another few days for someone to hack your password again. Also separate your private mail box from the one you are using on facebook and other social networks asap.
Regards,
Wilson.
On Mon, Mar 22, 2010 at 9:36 AM, Thuo Wilson <lixton@gmail.com> wrote:
Check email headers. To be assisted further give email client u r using even if its gmail/yahoo etc.
On 22 March 2010 09:29, Robert <robbydeno@googlemail.com> wrote:
Morning Good people,
Am after someone who has been spreading some malicious emails; my question is there a way I can track who sent or where the email was sent from? Say IP address etc etc
-- Regards, Robert.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Kind Regards,
Wilson Bandi
Mobile: +254-726-786481
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Kind Regards, Wilson Bandi Mobile: +254-726-786481

@Thuo, the suspect is using yahoo and gmail, to send the mail i have tried to trace but i get results below; *Source:* The source host name is "mail-wy0-f194.google.com" and the source IP address is 74.125.82.194. On Mon, Mar 22, 2010 at 9:36 AM, Thuo Wilson <lixton@gmail.com> wrote:
Check email headers. To be assisted further give email client u r using even if its gmail/yahoo etc.
On 22 March 2010 09:29, Robert <robbydeno@googlemail.com> wrote:
Morning Good people,
Am after someone who has been spreading some malicious emails; my question is there a way I can track who sent or where the email was sent from? Say IP address etc etc
-- Regards, Robert.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards, Robert.

On Mon, Mar 22, 2010 at 1:36 PM, Robert <robbydeno@googlemail.com> wrote:
@Thuo, the suspect is using yahoo and gmail, to send the mail i have tried to trace but i get results below; Source: The source host name is "mail-wy0-f194.google.com" and the source IP address is 74.125.82.194.
gmail, hotmail etc strip out the actual client ip -- you cannot trace using that -- unless they sent it using a third party client like outlook express / thunderbird etc.. ashok

Yahoo does not strip even from web, gmail does and he should therefore check the headers from the yahoo originating email. -----Original Message----- From: ashok+skunkworks@parliaments.info Reply-to: Skunkworks Mailing List <skunkworks@lists.my.co.ke> To: Skunkworks Mailing List <skunkworks@lists.my.co.ke> Subject: Re: [Skunkworks] TRACKING AN EMAIL ADDRESS Date: Mon, 22 Mar 2010 13:55:10 +0300 On Mon, Mar 22, 2010 at 1:36 PM, Robert <robbydeno@googlemail.com> wrote:
@Thuo, the suspect is using yahoo and gmail, to send the mail i have tried to trace but i get results below; Source: The source host name is "mail-wy0-f194.google.com" and the source IP address is 74.125.82.194.
gmail, hotmail etc strip out the actual client ip -- you cannot trace using that -- unless they sent it using a third party client like outlook express / thunderbird etc.. ashok _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

hotmail has an X-Originating-IP: header. Check that. On Mon, Mar 22, 2010 at 10:55 AM, <ashok+skunkworks@parliaments.info> wrote:
On Mon, Mar 22, 2010 at 1:36 PM, Robert <robbydeno@googlemail.com> wrote:
@Thuo, the suspect is using yahoo and gmail, to send the mail i have tried to trace but i get results below; Source: The source host name is "mail-wy0-f194.google.com" and the source IP address is 74.125.82.194.
gmail, hotmail etc strip out the actual client ip -- you cannot trace using that -- unless they sent it using a third party client like outlook express / thunderbird etc..
ashok _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

@Robert The ip address you have below is faked by google servers. Can you please forward me the email from the spammer to bandson67@gmail.com. Many thanks. Wilson. On Mon, Mar 22, 2010 at 4:15 PM, rsohan@gmail.com <rsohan@gmail.com> wrote:
hotmail has an X-Originating-IP: header. Check that.
On Mon, Mar 22, 2010 at 10:55 AM, <ashok+skunkworks@parliaments.info<ashok%2Bskunkworks@parliaments.info>> wrote:
On Mon, Mar 22, 2010 at 1:36 PM, Robert <robbydeno@googlemail.com> wrote:
@Thuo, the suspect is using yahoo and gmail, to send the mail i have tried to trace but i get results below; Source: The source host name is "mail-wy0-f194.google.com" and the source IP address is 74.125.82.194.
gmail, hotmail etc strip out the actual client ip -- you cannot trace using that -- unless they sent it using a third party client like outlook express / thunderbird etc..
ashok _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f...
------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Kind Regards, Wilson Bandi Mobile: +254-726-786481

tracking emails from yahoo is useless they will always take you back to yahoo smtp servers unless your tracking a person with a local domain and local server .which will give you the sending server public ip even if its a port forwarding of the ports 110 and 25 atlesst u will get sending ip then track it to the isp and and use visual locater to get the location of the server otherwise yahoo, gmail hotmail mails solution is just change your passwords often On Mon, Mar 22, 2010 at 5:39 PM, Wilson Bandi <bandson67@gmail.com> wrote:
@Robert
The ip address you have below is faked by google servers. Can you please forward me the email from the spammer to bandson67@gmail.com.
Many thanks.
Wilson.
On Mon, Mar 22, 2010 at 4:15 PM, rsohan@gmail.com <rsohan@gmail.com>wrote:
hotmail has an X-Originating-IP: header. Check that.
On Mon, Mar 22, 2010 at 10:55 AM, <ashok+skunkworks@parliaments.info<ashok%2Bskunkworks@parliaments.info>> wrote:
On Mon, Mar 22, 2010 at 1:36 PM, Robert <robbydeno@googlemail.com> wrote:
@Thuo, the suspect is using yahoo and gmail, to send the mail i have tried to trace but i get results below; Source: The source host name is "mail-wy0-f194.google.com" and the source IP address is 74.125.82.194.
gmail, hotmail etc strip out the actual client ip -- you cannot trace using that -- unless they sent it using a third party client like outlook express / thunderbird etc..
ashok _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f...
------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Kind Regards,
Wilson Bandi
Mobile: +254-726-786481
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Eric Mwania
participants (8)
-
Alex Nderitu
-
ashok+skunkworks@parliaments.info
-
Cikz
-
Eric Mwania
-
Robert
-
rsohan@gmail.com
-
Thuo Wilson
-
Wilson Bandi