I read your article on how to read email headers. http://www.howtogeek.com/10820.....il-header/
But I've received a spam message, and I can't tell which is the originating IP address.

Here is the email header(I've only included the last two Received: lines):

Received: from dns.10sho.jp (p2025-ipngnfx01tokusinwcc.tokushima.ocn.ne.jp. [118.22.54.57])
by mx.google.com with ESMTPS id ts2si11290248pbc.176.2012.10.03.19.46.30
(version=TLSv1/SSLv3 cipher=OTHER);
Wed, 03 Oct 2012 19:47:01 -0700 (PDT)
Received-SPF: neutral (google.com: 118.22.54.57 is neither permitted nor denied by domain of spammer@gmail.com) client-ip=118.22.54.57;
Authentication-Results: mx.google.com; spf=neutral (google.com: 118.22.54.57 is neither permitted nor denied by domain of spammer@gmail.com) smtp.mail=spammer@gmail.com
Received: from User (50-78-27-213-static.hfc.comcastbusiness.net [50.78.27.213])
(Authenticated sender: info)
by dns.10sho.jp (Postfix) with ESMTP id 638E93E906F6;
Wed, 3 Oct 2012 18:13:17 +0900 (JST)

Posted 2 years ago
Top