Email header

Let's discuss your opinions, suggestions, ideas, etc. related to software and technology.
User avatar
Irabbit
Site Admin
Posts: 2867
Joined: March 11th, 2010, 1:00 pm
Location: Stroud Township

Re: Email header

Post by Irabbit » September 6th, 2015, 9:19 pm

In the email there is a link to click on which is supposed to take you to PNC Bank. Of course, that is not where it goes. The ip address the link takes you to is 94.32.66.164 which is in Italy:

inetnum: 94.32.64.0 - 94.32.79.255
netname: TISCALINET-DATACENTER
descr: Tiscali SpA
descr: Internet Service Provider

Host name: vps2974-94.32.66.164.vps.hosting.tiscali.it

User avatar
wd
Site Admin
Posts: 4029
Joined: March 11th, 2010, 1:00 pm
Location: Pa
Contact:

Re: Email header

Post by wd » September 6th, 2015, 9:37 pm

if that's where it came from
could have been relayed thru multiple places

User avatar
Irabbit
Site Admin
Posts: 2867
Joined: March 11th, 2010, 1:00 pm
Location: Stroud Township

Re: Email header

Post by Irabbit » September 6th, 2015, 9:43 pm

That's what I am thinking, but it is not from PNC Bank.

User avatar
wd
Site Admin
Posts: 4029
Joined: March 11th, 2010, 1:00 pm
Location: Pa
Contact:

Re: Email header

Post by wd » September 7th, 2015, 7:52 am

That IP address may be the last server the email got generated from but not necessarily the origination IP

User avatar
Irabbit
Site Admin
Posts: 2867
Joined: March 11th, 2010, 1:00 pm
Location: Stroud Township

Re: Email header

Post by Irabbit » September 7th, 2015, 8:38 am

That's what I was trying to say. I am sure it is being used by whoever is sending the email- sort of spoofing the ip address.

User avatar
wd
Site Admin
Posts: 4029
Joined: March 11th, 2010, 1:00 pm
Location: Pa
Contact:

Re: Email header

Post by wd » September 7th, 2015, 8:43 am

or sent thru dark net and exiting from that IP after going thru multiple servers

Post Reply

Return to “Tech Talk”